go-ipfs v0.12.2 Release
This patch release fixes a security issue wherein traversing some malformed DAGs can cause the node to panic.
Given that some users haven't yet gone through the migration for v0.12.0, we have also backported this to v0.11.1.
See also the security advisory: GHSA-mcq2-w56r-5w2w
Changelog
Full Changelog
- github.com/ipld/go-codec-dagpb (v1.3.0 -> v1.3.2): - fix: use protowire for Links bytes decoding❤ Contributors
| Contributor | Commits | Lines ± | Files Changed |
|---|---|---|---|
| Rod Vagg | 1 | +34/-19 | 2 |