Go IPFS v0.12.1 Release Notes
Release Date: 2022-03-17 // about 2 years ago-
๐ This patch release fixes a security issue with the
docker-compose.yaml
file in which the IPFS daemon API listens on all interfaces instead of only the loopback interface, which could allow remote callers to control your IPFS daemon. If you use the includeddocker-compose.yaml
file, it is recommended to upgrade.๐ See also the security advisory: https://github.com/ipfs/go-ipfs/security/advisories/GHSA-fx5p-f64h-93xc
Thanks to @LynHyper for finding and disclosing this.
๐ Changelog
Full Changelog
- github.com/ipfs/go-ipfs:
- fix: listen on loopback for API and gateway ports in docker-compose.yaml
โค Contributors
Contributor Commits Lines ยฑ Files Changed guseggert 1 +10/-3 1 - github.com/ipfs/go-ipfs: