liz/veilid
1
0
Fork 0
Code Pull Requests Packages Releases Activity

add changelog and missing file

Browse Source
This commit is contained in:
John Smith
2023-08-19 18:24:25 -04:00
parent eae839e484
commit a9c13d45fd
2 changed files with 33 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
CHANGELOG.md
View File

@@ -1,3 +1,11 @@
**Changes in Veilid 0.1.9**
- SECURITY FIX
* DESCRIPTION: Decompression was occurring in an unbounded way upon envelope receipt.
* IMPACT: Node crashes resulting in downtime. There was no risk of RCE or compromise due to Rust's memory protections and no use of unsafe code near the site of the error.
* INDICATIONS: This resulted in an out-of-memory abort on nodes. Issue first identified on the bootstrap servers.
* REMEDIATION: Length check added to decompression on envelopes.
- Earthfile support for generating a debug executable
**Changes in Veilid 0.1.8**
- Fix Python Install Instructions
- Fix to get server version from crate