Skip to content

Commit 9d8d58a

Browse files
runningcodeclaude
andcommitted
changelog: Shorten the eMudhra entry
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
1 parent cdae9a0 commit 9d8d58a

1 file changed

Lines changed: 0 additions & 3 deletions

File tree

‎CHANGELOG.md‎

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -30,9 +30,6 @@
3030
- Always remove the first-draw listener after the first frame, even if no layout pass follows it ([#6152](https://github.com/getsentry/sentry-java/pull/6152))
3131
- Prevent Reactor pool maintenance tasks from retaining unbounded Sentry scope chains ([#6283](https://github.com/getsentry/sentry-java/pull/6283))
3232
- Refuse to send data to servers whose certificate was issued by one of the leaked eMudhra intermediates (CVE-2026-111943) ([#6336](https://github.com/getsentry/sentry-java/pull/6336))
33-
- Anyone can recover the private keys of these intermediates, and they are cross-signed by a root that every Android version trusts, so device trust store updates don't protect every device.
34-
- The check runs on every TLS handshake, including the new connections `HttpURLConnection` opens on its own to retry a request.
35-
- This applies to the default envelope transport and to the distribution update check, but not yet to `ApacheHttpClientTransport` from `sentry-apache-http-client-5`. Other HTTPS connections your app makes, including those instrumented by `sentry-okhttp` and the other HTTP client integrations, need their own fix, for example an OkHttp update.
3633

3734
## 8.61.1
3835

0 commit comments

Comments
 (0)