docs: update changelog for v0.12.2 and v0.11.1
Adin Schmahmann committed
Mar 17, 2022 at 14:56 UTC
5fc3338c751130ae02ebd134579c8b6b0a4fbf4e
1 file changed
+45
-2
CHANGELOG.md
+45
-2
@@ -1,7 +1,50 @@
1
# go-ipfs changelog
2
3
-## v0.12.1 2022-03-10
4
-This patch release [fixes](https://github.com/ipfs/go-ipfs/commit/816a128aaf963d72c4930852ce32b9a4e31924a1) a security issue with the `docker-compose.yaml` file, introduced in v0.11.0, in which the IPFS daemon API listens on all interfaces instead of only the loopback interface, which could allow remote callers to control your IPFS daemon. If you use the included `docker-compose.yaml` file, it is recommended to upgrade.
3
+## v0.12.2 and v0.11.1 2022-04-08
4
+
5
+This patch release fixes a security issue wherein traversing some malformed DAGs can cause the node to panic.
6
+
7
+See also the security advisory: https://github.com/ipfs/go-ipfs/security/advisories/GHSA-mcq2-w56r-5w2w
8
+
9
+Note: the v0.11.1 patch release contains the Docker compose fix from v0.12.1 as well
10
+
11
+### Changelog
12
+
13
+<details>
14
+<summary>Full Changelog</summary>
15
+- github.com/ipld/go-codec-dagpb (v1.3.0 -> v1.3.2):
16
+ - fix: use protowire for Links bytes decoding
17
+</details>
18
+
19
+### ❤ Contributors
20
+
21
+| Contributor | Commits | Lines ± | Files Changed |
22
+|-------------|---------|---------|---------------|
23
+| Rod Vagg | 1 | +34/-19 | 2 |
24
+
25
+## v0.12.1 2022-03-17
26
+
27
+This patch release [fixes](https://github.com/ipfs/go-ipfs/commit/816a128aaf963d72c4930852ce32b9a4e31924a1) a security issue with the `docker-compose.yaml` file in which the IPFS daemon API listens on all interfaces instead of only the loopback interface, which could allow remote callers to control your IPFS daemon. If you use the included `docker-compose.yaml` file, it is recommended to upgrade.
28
+
29
+See also the security advisory: https://github.com/ipfs/go-ipfs/security/advisories/GHSA-fx5p-f64h-93xc
30
+
31
+Thanks to @LynHyper for finding and disclosing this.
32
+
33
+### Changelog
34
+
35
+<details>
36
+<summary>Full Changelog</summary>
37
+
38
+- github.com/ipfs/go-ipfs:
39
+ - fix: listen on loopback for API and gateway ports in docker-compose.yaml
40
+
41
+</details>
42
+
43
+### ❤ Contributors
44
+
45
+| Contributor | Commits | Lines ± | Files Changed |
46
+|-------------|---------|---------|---------------|
47
+| guseggert | 1 | +10/-3 | 1 |
48
49
## v0.12.0 2022-02-17
50