Fixed
- SOCKS listener was not properly handling data and connection status
- Increased SOCKS job in/out channel size from 100 to 1,000
- Fixed a bug where multiple SOCKS go routines were created instead of one
- Updated
readSOCKSClient()function to close the connection on any connection read error - Updated
processMessage()to drop SOCKS jobs when the connection was already closed - Added
NewInfoWithID()factory for SOCKS jobs information structures that keep the same Job ID for the connection lifetime
Changed
- Upgraded the following libraries to their latest version
- upgraded github.com/google/uuid v1.5.0 => v1.6.0
- upgraded golang.org/x/net v0.21.0 => v0.22.0
- upgraded golang.org/x/sync v0.5.0 => v0.6.0
- upgraded google.golang.org/grpc v1.60.1 => v1.62.1
- upgraded github.com/quic-go/quic-go v0.40.1 => v0.42.0
Security
- Upgraded go-jose/v3 to v3.0.3 to address CVE-2024-28180
- Upgraded the protobuf library to v1.33.0 to address CVE-2024-24786
The data/bin directory contains compiled versions of the Merlin CLI and Merlin Agents
Merlin documentation and Wiki can be found here
The compressed files have a password of
merlin