build(deps): Bump the all-go group across 5 directories with 6 updates
Type: Pull Request
State: Open
Association: Unknown
Comments: 3
(8 months ago)
(8 months ago)
T:dependencies
Bumps the all-go group with 1 update in the / directory: github.com/celestiaorg/go-header.
Bumps the all-go group with 1 update in the /execution/evm directory: github.com/ethereum/go-ethereum.
Bumps the all-go group with 2 updates in the /execution/grpc directory: golang.org/x/net and github.com/evstack/ev-node.
Bumps the all-go group with 2 updates in the /test/docker-e2e directory: github.com/ethereum/go-ethereum and github.com/docker/docker.
Bumps the all-go group with 2 updates in the /test/e2e directory: github.com/ethereum/go-ethereum and github.com/celestiaorg/tastora.
Updates github.com/celestiaorg/go-header from 0.7.3 to 0.7.4
Release notes
Sourced from github.com/celestiaorg/go-header's releases.
v0.7.4
What's Changed
- fix(store): fixes rare race condition where 2 workers attempt to close errCh at same time by
@renaynayin celestiaorg/go-header#357- fix(headertest): add locking to header test suite for concurrent use by
@renaynayin celestiaorg/go-header#356Full Changelog: https://github.com/celestiaorg/go-header/compare/v0.7.3...v0.7.4
Commits
425f0dcfix(headertest): add locking to header test suite for concurrent use (#356)62199e0fix(store): fixes rare race condition where 2 workers attempt to close errCh ...- See full diff in compare view
Updates github.com/ethereum/go-ethereum from 1.16.6 to 1.16.7
Release notes
Sourced from github.com/ethereum/go-ethereum's releases.
Ballistic Drift Stabilizer (v1.16.7)
This is a re-roll of v1.16.6, including an important fix in the KZG cryptography library.
This release enables the Fusaka hardfork on Ethereum mainnet.
The Fusaka fork is scheduled to occur at
2025-12-03 21:49:11 UTC. Please upgrade your node to v1.16.7 in time for the fork.This release also enables two blob-parameter-only (BPO) upgrades. These upgrades change protocol parameters to increase the available blob capacity.
- BPO1 on
2025-12-09- BPO2 on
2026-01-07Fusaka
RPC
- Add
eth_sendRawTransactionSyncwhich waits until either a timeout or the transaction is mined. This feature is mostly useful on L2s with lower blocktimes. (#32830, #32930, #32929)- Add support for
eth_simulateV1in ethclient (#32856)- Fix for an issue that might crash
debug_traceCall(#33015)- Fix for an issuer where local transactions were not persisted to the journal (#32921)
Core
- Fix for a cryptographic vulnerability in c-kzg-4844. This is only exploitable post-Fusaka. (#33093)
- Add
geth --genesisflag as an alternative to runninggeth init genesis.json(#32844)- Fix for receipt insertion during ERA file import. (#32934)
- Work on getting the trie node history in order to serve historical
eth_getProofrequest with the new path-based archive node. (#32907, #32914, #32937)- Further work on cmd/keeper, our guest program for zkVMs (#32816)
- Various optimizations (#32971, #32916, #32965, #32946)
Networking
- New metrics for tracking slow peers (#32964)
- Fix for an issue where disconnected peers were not removed in txFetcher (#32947)
For a full rundown of the changes please consult the Geth 1.16.6 and 1.16.7 release milestones.
As with all our previous releases, you can find the:
- Pre-built binaries for all platforms on our downloads page.
- Docker images published under
ethereum/client-go(use "stable" tag).
... (truncated)
Commits
Updates github.com/ethereum/go-ethereum from 1.16.6 to 1.16.7
Release notes
Sourced from github.com/ethereum/go-ethereum's releases.
Ballistic Drift Stabilizer (v1.16.7)
This is a re-roll of v1.16.6, including an important fix in the KZG cryptography library.
This release enables the Fusaka hardfork on Ethereum mainnet.
The Fusaka fork is scheduled to occur at
2025-12-03 21:49:11 UTC. Please upgrade your node to v1.16.7 in time for the fork.This release also enables two blob-parameter-only (BPO) upgrades. These upgrades change protocol parameters to increase the available blob capacity.
- BPO1 on
2025-12-09- BPO2 on
2026-01-07Fusaka
RPC
- Add
eth_sendRawTransactionSyncwhich waits until either a timeout or the transaction is mined. This feature is mostly useful on L2s with lower blocktimes. (#32830, #32930, #32929)- Add support for
eth_simulateV1in ethclient (#32856)- Fix for an issue that might crash
debug_traceCall(#33015)- Fix for an issuer where local transactions were not persisted to the journal (#32921)
Core
- Fix for a cryptographic vulnerability in c-kzg-4844. This is only exploitable post-Fusaka. (#33093)
- Add
geth --genesisflag as an alternative to runninggeth init genesis.json(#32844)- Fix for receipt insertion during ERA file import. (#32934)
- Work on getting the trie node history in order to serve historical
eth_getProofrequest with the new path-based archive node. (#32907, #32914, #32937)- Further work on cmd/keeper, our guest program for zkVMs (#32816)
- Various optimizations (#32971, #32916, #32965, #32946)
Networking
- New metrics for tracking slow peers (#32964)
- Fix for an issue where disconnected peers were not removed in txFetcher (#32947)
For a full rundown of the changes please consult the Geth 1.16.6 and 1.16.7 release milestones.
As with all our previous releases, you can find the:
- Pre-built binaries for all platforms on our downloads page.
- Docker images published under
ethereum/client-go(use "stable" tag).
... (truncated)
Commits
Updates github.com/ethereum/go-ethereum from 1.16.6 to 1.16.7
Release notes
Sourced from github.com/ethereum/go-ethereum's releases.
Ballistic Drift Stabilizer (v1.16.7)
This is a re-roll of v1.16.6, including an important fix in the KZG cryptography library.
This release enables the Fusaka hardfork on Ethereum mainnet.
The Fusaka fork is scheduled to occur at
2025-12-03 21:49:11 UTC. Please upgrade your node to v1.16.7 in time for the fork.This release also enables two blob-parameter-only (BPO) upgrades. These upgrades change protocol parameters to increase the available blob capacity.
- BPO1 on
2025-12-09- BPO2 on
2026-01-07Fusaka
RPC
- Add
eth_sendRawTransactionSyncwhich waits until either a timeout or the transaction is mined. This feature is mostly useful on L2s with lower blocktimes. (#32830, #32930, #32929)- Add support for
eth_simulateV1in ethclient (#32856)- Fix for an issue that might crash
debug_traceCall(#33015)- Fix for an issuer where local transactions were not persisted to the journal (#32921)
Core
- Fix for a cryptographic vulnerability in c-kzg-4844. This is only exploitable post-Fusaka. (#33093)
- Add
geth --genesisflag as an alternative to runninggeth init genesis.json(#32844)- Fix for receipt insertion during ERA file import. (#32934)
- Work on getting the trie node history in order to serve historical
eth_getProofrequest with the new path-based archive node. (#32907, #32914, #32937)- Further work on cmd/keeper, our guest program for zkVMs (#32816)
- Various optimizations (#32971, #32916, #32965, #32946)
Networking
- New metrics for tracking slow peers (#32964)
- Fix for an issue where disconnected peers were not removed in txFetcher (#32947)
For a full rundown of the changes please consult the Geth 1.16.6 and 1.16.7 release milestones.
As with all our previous releases, you can find the:
- Pre-built binaries for all platforms on our downloads page.
- Docker images published under
ethereum/client-go(use "stable" tag).
... (truncated)
Commits
Updates golang.org/x/net from 0.46.0 to 0.47.0
Commits
9a29643go.mod: update golang.org/x dependencies07cefd8context: deprecate5ac9dacpublicsuffix: don't treat ip addresses as domain namesd1f64ccquic: use testing/synctestfff0469http2: document that RFC 7540 prioritization does not work with small payloadsf35e3a4http2: fix weight overflow in RFC 7540 write scheduler89adc90http2: fix typo referring to RFC 9218 as RFC 9128 instead8d76a2cquic: don't defer MAX_STREAMS frames indefinitely027f8b7quic: fix expected ACK Delay in client's ACK after HANDSHAKE_DONEdec9fe7dns/dnsmessage: update SVCB packing to prohibit name compression- Additional commits viewable in compare view
Updates github.com/evstack/ev-node from 1.0.0-beta.9 to 1.0.0-beta.10
Changelog
Sourced from github.com/evstack/ev-node's changelog.
v1.0.0-beta.10
Added
- Enhanced health check system with separate liveness (
/health/live) and readiness (/health/ready) HTTP endpoints. Readiness endpoint includes P2P listening check and aggregator block production rate validation (5x block time threshold). (#2800)- Added
GetP2PStoreInfoRPC method to retrieve head/tail metadata for go-header stores used by P2P sync (#2835)- Added protobuf definitions for
P2PStoreEntryandP2PStoreSnapshotmessages to support P2P store inspectionChanged
- Remove GasPrice and GasMultiplier from DA interface and configuration to use celestia-node's native fee estimation. (#2822)
- Use cache instead of in memory store for reaper. Persist cache on reload. Autoclean after 24 hours. (#2811)
- Improved P2P sync service store initialization to be atomic and prevent race conditions (#2838)
- Enhanced P2P bootstrap behavior to intelligently detect starting height from local store instead of requiring trusted hash
- Relaxed execution layer height validation in block replay to allow execution to be ahead of target height, enabling recovery from manual intervention scenarios
Removed
- BREAKING: Removed
evnode.v1.HealthServicegRPC endpoint. Use HTTP endpoints:GET /health/liveandGET /health/ready. (#2800)- BREAKING: Removed
TrustedHashconfiguration option and--evnode.node.trusted_hashflag. Sync service now automatically determines starting height from local store state (#2838)Fixed
- Fixed sync service initialization issue when node is not on genesis but has an empty store
Commits
d7eda60refactor(syncer,cache): use compare and swap loop and add comments (#2873)9a5eba1refactor: use state da height as well (#2872)faabb32refactor: retrieve highest da height in cache (#2870)6badca1chore: change from event count to start and end height (#2871)12b9559chore: bump da (#2866)d8d1709chore: bump core (#2865)e5aa2c3chore: reduce log noise (#2864)9d4c64cfix: sync service for non zero height starts with empty store (#2834)3ad84b8build(deps): Bump golang.org/x/crypto from 0.43.0 to 0.45.0 in /execution/evm...2b45d45chore: minor improvement for docs (#2862)- Additional commits viewable in compare view
Updates golang.org/x/net from 0.46.0 to 0.47.0
Commits
9a29643go.mod: update golang.org/x dependencies07cefd8context: deprecate5ac9dacpublicsuffix: don't treat ip addresses as domain namesd1f64ccquic: use testing/synctestfff0469http2: document that RFC 7540 prioritization does not work with small payloadsf35e3a4http2: fix weight overflow in RFC 7540 write scheduler89adc90http2: fix typo referring to RFC 9218 as RFC 9128 instead8d76a2cquic: don't defer MAX_STREAMS frames indefinitely027f8b7quic: fix expected ACK Delay in client's ACK after HANDSHAKE_DONEdec9fe7dns/dnsmessage: update SVCB packing to prohibit name compression- Additional commits viewable in compare view
Updates github.com/ethereum/go-ethereum from 1.16.6 to 1.16.7
Release notes
Sourced from github.com/ethereum/go-ethereum's releases.
Ballistic Drift Stabilizer (v1.16.7)
This is a re-roll of v1.16.6, including an important fix in the KZG cryptography library.
This release enables the Fusaka hardfork on Ethereum mainnet.
The Fusaka fork is scheduled to occur at
2025-12-03 21:49:11 UTC. Please upgrade your node to v1.16.7 in time for the fork.This release also enables two blob-parameter-only (BPO) upgrades. These upgrades change protocol parameters to increase the available blob capacity.
- BPO1 on
2025-12-09- BPO2 on
2026-01-07Fusaka
RPC
- Add
eth_sendRawTransactionSyncwhich waits until either a timeout or the transaction is mined. This feature is mostly useful on L2s with lower blocktimes. (#32830, #32930, #32929)- Add support for
eth_simulateV1in ethclient (#32856)- Fix for an issue that might crash
debug_traceCall(#33015)- Fix for an issuer where local transactions were not persisted to the journal (#32921)
Core
- Fix for a cryptographic vulnerability in c-kzg-4844. This is only exploitable post-Fusaka. (#33093)
- Add
geth --genesisflag as an alternative to runninggeth init genesis.json(#32844)- Fix for receipt insertion during ERA file import. (#32934)
- Work on getting the trie node history in order to serve historical
eth_getProofrequest with the new path-based archive node. (#32907, #32914, #32937)- Further work on cmd/keeper, our guest program for zkVMs (#32816)
- Various optimizations (#32971, #32916, #32965, #32946)
Networking
- New metrics for tracking slow peers (#32964)
- Fix for an issue where disconnected peers were not removed in txFetcher (#32947)
For a full rundown of the changes please consult the Geth 1.16.6 and 1.16.7 release milestones.
As with all our previous releases, you can find the:
- Pre-built binaries for all platforms on our downloads page.
- Docker images published under
ethereum/client-go(use "stable" tag).
... (truncated)
Commits
Updates github.com/ethereum/go-ethereum from 1.16.6 to 1.16.7
Release notes
Sourced from github.com/ethereum/go-ethereum's releases.
Ballistic Drift Stabilizer (v1.16.7)
This is a re-roll of v1.16.6, including an important fix in the KZG cryptography library.
This release enables the Fusaka hardfork on Ethereum mainnet.
The Fusaka fork is scheduled to occur at
2025-12-03 21:49:11 UTC. Please upgrade your node to v1.16.7 in time for the fork.This release also enables two blob-parameter-only (BPO) upgrades. These upgrades change protocol parameters to increase the available blob capacity.
- BPO1 on
2025-12-09- BPO2 on
2026-01-07Fusaka
RPC
- Add
eth_sendRawTransactionSyncwhich waits until either a timeout or the transaction is mined. This feature is mostly useful on L2s with lower blocktimes. (#32830, #32930, #32929)- Add support for
eth_simulateV1in ethclient (#32856)- Fix for an issue that might crash
debug_traceCall(#33015)- Fix for an issuer where local transactions were not persisted to the journal (#32921)
Core
- Fix for a cryptographic vulnerability in c-kzg-4844. This is only exploitable post-Fusaka. (#33093)
- Add
geth --genesisflag as an alternative to runninggeth init genesis.json(#32844)- Fix for receipt insertion during ERA file import. (#32934)
- Work on getting the trie node history in order to serve historical
eth_getProofrequest with the new path-based archive node. (#32907, #32914, #32937)- Further work on cmd/keeper, our guest program for zkVMs (#32816)
- Various optimizations (#32971, #32916, #32965, #32946)
Networking
- New metrics for tracking slow peers (#32964)
- Fix for an issue where disconnected peers were not removed in txFetcher (#32947)
For a full rundown of the changes please consult the Geth 1.16.6 and 1.16.7 release milestones.
As with all our previous releases, you can find the:
- Pre-built binaries for all platforms on our downloads page.
- Docker images published under
ethereum/client-go(use "stable" tag).
... (truncated)
Commits
Updates github.com/docker/docker from 28.5.1+incompatible to 28.5.2+incompatible
Release notes
Sourced from github.com/docker/docker's releases.
v28.5.2
28.5.2
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
[!CAUTION] This release contains fixes for three high-severity security vulnerabilities in runc:
All three vulnerabilities ultimately allow (through different methods) for full container breakouts by bypassing runc's restrictions for writing to arbitrary
/procfiles.Packaging updates
- Update runc to v1.3.3. moby/moby#51394
Bug fixes and enhancements
- dockerd-rootless.sh: if slirp4netns is not installed, try using pasta (passt). moby/moby#51162
- Update Go runtime to 1.24.9. moby/moby#51387, docker/cli#6613
Deprecations
- Go-SDK: cli/command/image/build: deprecate
DefaultDockerfileName,DetectArchiveReader,WriteTempDockerfile,ResolveAndValidateContextPath. These utilities were only used internally and will be removed in the next release. docker/cli#6610- Go-SDK: cli/command/image/build: deprecate IsArchive utility. docker/cli#6560
- Go-SDK: opts: deprecate
ValidateMACAddress. docker/cli#6560- Go-SDK: opts: deprecate ListOpts.Delete(). docker/cli#6560
Commits
89c5e8fMerge pull request #51396 from thaJeztah/28.x_backport_api_docs9b93878Merge pull request #51395 from thaJeztah/28.x_backport_rootless_reject6178456Merge pull request #51398 from vvoland/51397-28.x0cae4e5vendor: github.com/moby/buildkit v0.25.233cc06fMerge pull request #51394 from vvoland/51393-28.xd525277api/docs: remove BuildCache.Parent field for API v1.42 and up2fbc51bdockerd-rootless.sh: reject DOCKERD_ROOTLESS_ROOTLESSKIT_NET=hostbd98008integration-cli: Adjust nofile limits1967515Dockerfile: update runc binary to v1.3.34489660Merge pull request #51387 from thaJeztah/28.x_bump_go- Additional commits viewable in compare view
Updates github.com/ethereum/go-ethereum from 1.16.6 to 1.16.7
Release notes
Sourced from github.com/ethereum/go-ethereum's releases.
Ballistic Drift Stabilizer (v1.16.7)
This is a re-roll of v1.16.6, including an important fix in the KZG cryptography library.
This release enables the Fusaka hardfork on Ethereum mainnet.
The Fusaka fork is scheduled to occur at
2025-12-03 21:49:11 UTC. Please upgrade your node to v1.16.7 in time for the fork.This release also enables two blob-parameter-only (BPO) upgrades. These upgrades change protocol parameters to increase the available blob capacity.
- BPO1 on
2025-12-09- BPO2 on
2026-01-07Fusaka
RPC
- Add
eth_sendRawTransactionSyncwhich waits until either a timeout or the transaction is mined. This feature is mostly useful on L2s with lower blocktimes. (#32830, #32930, #32929)- Add support for
eth_simulateV1in ethclient (#32856)- Fix for an issue that might crash
debug_traceCall(#33015)- Fix for an issuer where local transactions were not persisted to the journal (#32921)
Core
- Fix for a cryptographic vulnerability in c-kzg-4844. This is only exploitable post-Fusaka. (#33093)
- Add
geth --genesisflag as an alternative to runninggeth init genesis.json(#32844)- Fix for receipt insertion during ERA file import. (#32934)
- Work on getting the trie node history in order to serve historical
eth_getProofrequest with the new path-based archive node. (#32907, #32914, #32937)- Further work on cmd/keeper, our guest program for zkVMs (#32816)
- Various optimizations (#32971, #32916, #32965, #32946)
Networking
- New metrics for tracking slow peers (#32964)
- Fix for an issue where disconnected peers were not removed in txFetcher (#32947)
For a full rundown of the changes please consult the Geth 1.16.6 and 1.16.7 release milestones.
As with all our previous releases, you can find the:
- Pre-built binaries for all platforms on our downloads page.
- Docker images published under
ethereum/client-go(use "stable" tag).
... (truncated)
Commits
Updates github.com/ethereum/go-ethereum from 1.16.6 to 1.16.7
Release notes
Sourced from github.com/ethereum/go-ethereum's releases.
Ballistic Drift Stabilizer (v1.16.7)
This is a re-roll of v1.16.6, including an important fix in the KZG cryptography library.
This release enables the Fusaka hardfork on Ethereum mainnet.
The Fusaka fork is scheduled to occur at
2025-12-03 21:49:11 UTC. Please upgrade your node to v1.16.7 in time for the fork.This release also enables two blob-parameter-only (BPO) upgrades. These upgrades change protocol parameters to increase the available blob capacity.
- BPO1 on
2025-12-09- BPO2 on
2026-01-07Fusaka
RPC
- Add
eth_sendRawTransactionSyncwhich waits until either a timeout or the transaction is mined. This feature is mostly useful on L2s with lower blocktimes. (#32830, #32930, #32929)- Add support for
eth_simulateV1in ethclient (#32856)- Fix for an issue that might crash
debug_traceCall(#33015)- Fix for an issuer where local transactions were not persisted to the journal (#32921)
Core
- Fix for a cryptographic vulnerability in c-kzg-4844. This is only exploitable post-Fusaka. (#33093)
- Add
geth --genesisflag as an alternative to runninggeth init genesis.json(#32844)- Fix for receipt insertion during ERA file import. (#32934)
- Work on getting the trie node history in order to serve historical
eth_getProofrequest with the new path-based archive node. (#32907, #32914, #32937)- Further work on cmd/keeper, our guest program for zkVMs (#32816)
- Various optimizations (#32971, #32916, #32965, #32946)
Networking
- New metrics for tracking slow peers (#32964)
- Fix for an issue where disconnected peers were not removed in txFetcher (#32947)
For a full rundown of the changes please consult the Geth 1.16.6 and 1.16.7 release milestones.
As with all our previous releases, you can find the:
- Pre-built binaries for all platforms on our downloads page.
- Docker images published under
ethereum/client-go(use "stable" tag).
... (truncated)
Commits
Updates github.com/celestiaorg/tastora from 0.7.5 to 0.8.0
Release notes
Sourced from github.com/celestiaorg/tastora's releases.
v0.8.0
What's Changed
- chore(deps): bump github.com/consensys/gnark-crypto from 0.18.0 to 0.18.1 in the go_modules group across 1 directory by
@dependabot[bot] in celestiaorg/tastora#147- chore: add labeled client and update volume cleanup by
@chattonin celestiaorg/tastora#145- chore: fix jwt secret flag by
@chattonin celestiaorg/tastora#150Full Changelog: https://github.com/celestiaorg/tastora/compare/v0.7.5...v0.8.0
Commits
Updates github.com/ethereum/go-ethereum from 1.16.6 to 1.16.7
Release notes
Sourced from github.com/ethereum/go-ethereum's releases.
Ballistic Drift Stabilizer (v1.16.7)
This is a re-roll of v1.16.6, including an important fix in the KZG cryptography library.
This release enables the Fusaka hardfork on Ethereum mainnet.
The Fusaka fork is scheduled to occur at
2025-12-03 21:49:11 UTC. Please upgrade your node to v1.16.7 in time for the fork.This release also enables two blob-parameter-only (BPO) upgrades. These upgrades change protocol parameters to increase the available blob capacity.
- BPO1 on
2025-12-09- BPO2 on
2026-01-07Fusaka
RPC
- Add
eth_sendRawTransactionSyncwhich waits until either a timeout or the transaction is mined. This feature is mostly useful on L2s with lower blocktimes. (#32830, #32930, #32929)- Add support for
eth_simulateV1in ethclient (#32856)- Fix for an issue that might crash
debug_traceCall(#33015)- Fix for an issuer where local transactions were not persisted to the journal (#32921)
Core
- Fix for a cryptographic vulnerability in c-kzg-4844. This is only exploitable post-Fusaka. (#33093)
- Add
geth --genesisflag as an alternative to runninggeth init genesis.json(#32844)- Fix for receipt insertion during ERA file import. (#32934)
- Work on getting the trie node history in order to serve historical
eth_getProofrequest with the new path-based archive node. (#32907, #32914, #32937)- Further work on cmd/keeper, our guest program for zkVMs (#32816)
- Various optimizations (#32971, #32916, #32965, #32946)
Networking
- New metrics for tracking slow peers (#32964)
- Fix for an issue where disconnected peers were not removed in txFetcher (#32947)
For a full rundown of the changes please consult the Geth 1.16.6 and 1.16.7 release milestones.
As with all our previous releases, you can find the:
- Pre-built binaries for all platforms on our downloads page.
- Docker images published under
ethereum/client-go(use "stable" tag).
... (truncated)
Commits
Updates github.com/celestiaorg/tastora from 0.7.5 to 0.8.0
Release notes
Sourced from github.com/celestiaorg/tastora's releases.
v0.8.0
What's Changed
- chore(deps): bump github.com/consensys/gnark-crypto from 0.18.0 to 0.18.1 in the go_modules group across 1 directory by
@dependabot[bot] in celestiaorg/tastora#147- chore: add labeled client and update volume cleanup by
@chattonin celestiaorg/tastora#145- chore: fix jwt secret flag by
@chattonin celestiaorg/tastora#150Full Changelog: https://github.com/celestiaorg/tastora/compare/v0.7.5...v0.8.0
Commits
ef34bd5chore: fix jwt secret flag (#150)-
Package Dependencies
Package:
github.com/docker/dockerEcosystem:
goVersion Change:
28.5.1+incompatible → 28.5.2+incompatibleUpdate Type:
PatchPackage:
github.com/ethereum/go-ethereumEcosystem:
goVersion Change:
1.16.6 → 1.16.7Update Type:
PatchPackage:
github.com/celestiaorg/go-headerEcosystem:
goVersion Change:
0.7.3 → 0.7.4Update Type:
PatchPackage:
github.com/celestiaorg/tastoraEcosystem:
goVersion Change:
0.7.5 → 0.8.0Update Type:
Minor
Security Advisories
Mautic has an Open Redirect vulnerability on user unlock path.
runc container escape and denial of service due to arbitrary write gadgets and procfs write redirects
runc container escape with malicious config due to /dev/console mount and related races
runc container escape via "masked path" abuse due to mount race conditions
Technical Details
| ID: | 11417787 |
| UUID: | 3657864742 |
| Node ID: | PR_kwDOFABrEc61JNUb |
| Host: | GitHub |
| Repository: | evstack/ev-node |