LedgerHQ/ledger-live @ledgerhq/live-desktop@4.20.1 on GitHub

4.20.1

#22198 b9c7dea Thanks @gre-ledger! - Enforce the QR code pairing sequence on both sides of the handshake
The host and the candidate now run the pairing messages through an explicit single-use state
machine: each message is only accepted at the one point of the sequence where it is expected,
and the peer that initiated the handshake is bound for the whole session. Envelopes, keys and
decrypted bodies are validated before being acted upon, so a duplicate, out-of-order, foreign or
malformed message ends the session with a QRCodeProtocolError: Desktop then asks for a fresh
QR code, Mobile goes to its existing retry screen.
Updated dependencies [153959b, b9c7dea]:
- @ledgerhq/live-common@37.6.1
- @ledgerhq/ledger-key-ring-protocol@0.21.3
- @ledgerhq/asset-detail@0.11.5
- @ledgerhq/live-dmk-desktop@0.21.1