- https://github.com/ipfs/go-ipfs/tree/v0.12.0 mentions "As usual, this release includes important fixes, some of which may be critical for security. Unless the fix addresses a bug being exploited in the wild, the fix will not be called out in the release notes. Please make sure to update ASAP. See our release process for details." - https://github.com/ipfs/go-ipfs/tree/v0.12.1 mentions "This patch release fixes a security issue with the docker-compose.yaml file in which the IPFS daemon API listens on all interfaces instead of only the loopback interface, which could allow remote callers to control your IPFS daemon. If you use the included docker-compose.yaml file, it is recommended to upgrade." (which sounds like it doesn't affect us)
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=5c768597be25a2a51cf88ad7d07b298348f69479 commit 5c768597be25a2a51cf88ad7d07b298348f69479 Author: Sam James <sam@gentoo.org> AuthorDate: 2022-04-13 22:15:26 +0000 Commit: Sam James <sam@gentoo.org> CommitDate: 2022-04-13 22:18:51 +0000 net-p2p/go-ipfs: add 0.12.2 Bug: https://bugs.gentoo.org/836010 Bug: https://bugs.gentoo.org/833480 Closes: https://bugs.gentoo.org/835491 Signed-off-by: Sam James <sam@gentoo.org> net-p2p/go-ipfs/Manifest | 2 + .../files/go-ipfs-0.12.2-upgrade-quic-go.patch | 39 ++++++++++++ net-p2p/go-ipfs/go-ipfs-0.12.2.ebuild | 70 ++++++++++++++++++++++ 3 files changed, 111 insertions(+)
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=df562ee983ce7ca53c599daab561739ee02edede commit df562ee983ce7ca53c599daab561739ee02edede Author: Sam James <sam@gentoo.org> AuthorDate: 2022-04-22 02:23:57 +0000 Commit: Sam James <sam@gentoo.org> CommitDate: 2022-04-22 17:36:00 +0000 net-p2p/go-ipfs: drop 0.10.0, 0.11.0 Bug: https://bugs.gentoo.org/836010 Bug: https://bugs.gentoo.org/833480 Signed-off-by: Sam James <sam@gentoo.org> net-p2p/go-ipfs/Manifest | 2050 --------------------------------- net-p2p/go-ipfs/go-ipfs-0.10.0.ebuild | 1941 ------------------------------- net-p2p/go-ipfs/go-ipfs-0.11.0.ebuild | 1977 ------------------------------- 3 files changed, 5968 deletions(-)
All done, thanks!
