Skip to content

v0.12.1
Compare
Choose a tag to compare
@guseggert guseggert released this 19 Mar 13:11
· 2227 commits to master since this release
v0.12.1
This tag was signed with the committer’s verified signature. The key has expired.
guseggert Gus Eggert
GPG key ID: 08403467A64C485E
Expired
Learn about vigilant mode.
da2b9bd
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

go-ipfs v0.12.1 Release

This patch release fixes a security issue with the docker-compose.yaml file in which the IPFS daemon API listens on all interfaces instead of only the loopback interface, which could allow remote callers to control your IPFS daemon. If you use the included docker-compose.yaml file, it is recommended to upgrade.

See also the security advisory: GHSA-fx5p-f64h-93xc

Thanks to @LynHyper for finding and disclosing this.

Changelog

Full Changelog
  • github.com/ipfs/go-ipfs:
    • fix: listen on loopback for API and gateway ports in docker-compose.yaml

❤ Contributors

Contributor Commits Lines ± Files Changed
guseggert 1 +10/-3 1

Contributors

Winterhuman
Assets 50
Loading