4.0.7

Security​

• TLS library (rustls) 0.23.46 in every Rust component - the customer panel (2083), the admin panel (2087), hitechcloudcli, Sentinel and the meet service. The four advisories published on 2026-10-14 against 0.23.45: TLS session secrets could appear in debug output (RUSTSEC-2026-0346), application data could reach the outer server after an Encrypted Client Hello rejection (RUSTSEC-2026-0347), Brotli certificate decompression could allocate up to 1 GiB before authentication (RUSTSEC-2026-0348), and an unauthenticated ServerHello could downgrade later connections to classical key exchange (RUSTSEC-2026-0349). 4.0.6 shipped the fix in the 2083 engine and meet only.