Security Notice: Please upgrade Baseten CLI and Truss CLI

eMudhra/emSign, a third-party certificate authority, has reported that some of its signing keys were compromised. Baseten's systems and data are not affected.

We've rebuilt the Baseten (v1.4.1) and Truss CLIs (0.18.36) with fixes to block certificates from affected authorities.

We strongly recommend upgrading to the latest versions of these, and using Baseten CLI moving forward. If you don't upgrade and you're running with outdated certificate bundles on your OS, your traffic can be intercepted and decrypted on an untrusted network. Note that most Windows & MacOS systems have updated bundles and are not affected.

Instructions:

Baseten CLI:

brew update && brew upgrade baseten

Truss:

pip install truss==0.18.36