Skip to main content

Seqera Enterprise v25.3.7

Feature updates and improvements​

info

The legacy distribution endpoint at cr.seqera.io/private is deprecated. Only bug fixes for existing major releases will continue to be published there. New major releases of Seqera Platform are available from cr.seqera.io/enterprise. Seqera will provide updated credentials for the new endpoint — contact your Seqera representative if you need access.

General​

  • Updated the PostgreSQL JDBC driver to 42.7.12. This resolves a denial of service in which a malicious database server could exhaust client CPU during SCRAM authentication, and a silent loss of channel-binding protection on connections that require it.

Bug fixes​

Pipelines​

  • Fixed the Fusion throughput quota never blocking a launch, which let organizations run Fusion-enabled workflows beyond their configured monthly throughput limit.

Monitoring and observability​

  • Fixed fusion_throughput_bytes telemetry under-reporting the current month, counting only the first day instead of every day of the month so far.

Upgrade notes​

No breaking changes. Standard upgrade procedure applies.

Security updates​

  • CVE-2026-91403: Added the eight compromised eMudhra intermediate certificate authorities to the JDK blocked certificate list. Their private keys were leaked, so anyone holding them could issue a certificate for any domain. The default trust store does not anchor these chains, so this is defence in depth for installations that use a custom trust store built from a full CA bundle.
On this Page