From 78105cd2543904197f3fe5873e1d8e9add707ef6 Mon Sep 17 00:00:00 2001 From: Teodor Calin Date: Sat, 25 Jul 2026 10:44:14 +0300 Subject: [PATCH] deps: bump common v0.5.8->v0.5.9, handshake v0.2.3->v0.2.4 (panic-DoS fix) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Ships the crypto.Verify wrong-length-key guard (common v0.5.9) and the handshake connection-handler recover() (handshake v0.2.4) — closes the remote unauthenticated handshake panic-DoS. Co-Authored-By: Claude Opus 4.8 --- go.mod | 4 ++-- go.sum | 8 ++++---- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/go.mod b/go.mod index f27a4c2d..bf721fe5 100644 --- a/go.mod +++ b/go.mod @@ -6,10 +6,10 @@ require ( github.com/coder/websocket v1.8.15 github.com/pilot-protocol/app-store v1.0.2 github.com/pilot-protocol/beacon v0.2.6 - github.com/pilot-protocol/common v0.5.8 + github.com/pilot-protocol/common v0.5.9 github.com/pilot-protocol/dataexchange v0.2.1-beta.1.0.20260615113607-fac933edea98 github.com/pilot-protocol/eventstream v0.2.2 - github.com/pilot-protocol/handshake v0.2.3 + github.com/pilot-protocol/handshake v0.2.4 github.com/pilot-protocol/nameserver v0.2.1 github.com/pilot-protocol/policy v0.2.3 github.com/pilot-protocol/rendezvous v0.2.5 diff --git a/go.sum b/go.sum index cf4a30a7..c5db72e8 100644 --- a/go.sum +++ b/go.sum @@ -8,14 +8,14 @@ github.com/pilot-protocol/app-store v1.0.2 h1:oK7cNl3e/gfxVhhkUFKNLRN256+7sDSBw8 github.com/pilot-protocol/app-store v1.0.2/go.mod h1:deltPnaQkiTgMcxWU+honz3+Bl2R1cthhuZra4pQ4PI= github.com/pilot-protocol/beacon v0.2.6 h1:grxwaVyPRUT0W6coyjYfNkO0rpzOIrwrKn94S21DuVE= github.com/pilot-protocol/beacon v0.2.6/go.mod h1:I/UhEv097g1z/qtAVDZbEhf3R5tzM0Dp71vGHah52A4= -github.com/pilot-protocol/common v0.5.8 h1:zCD58BpkvVYwSJO/QMA6ggnFus5WhvEeYd46MgOnQ8U= -github.com/pilot-protocol/common v0.5.8/go.mod h1:Ybc6f1A37s3ShoEh1nBMVL9DPyYlxvkqPTvtbxaNWg4= +github.com/pilot-protocol/common v0.5.9 h1:oCeIxMl8PtJowSU9UfSdzFXQ4s2pxxQBAitsg6P6pm8= +github.com/pilot-protocol/common v0.5.9/go.mod h1:Ybc6f1A37s3ShoEh1nBMVL9DPyYlxvkqPTvtbxaNWg4= github.com/pilot-protocol/dataexchange v0.2.1-beta.1.0.20260615113607-fac933edea98 h1:Bqgnf4CZC7aZJyDzz/E7agwXotArJg2FvFlNDqouhLo= github.com/pilot-protocol/dataexchange v0.2.1-beta.1.0.20260615113607-fac933edea98/go.mod h1:tM9eyyruBdnxhhUtViasUjnAElwF/r5PQvCYKLdlTLY= github.com/pilot-protocol/eventstream v0.2.2 h1:E0IjveK7K+dsIbE/5hD3N821FkHzxVsx1tiAORMzt8k= github.com/pilot-protocol/eventstream v0.2.2/go.mod h1:gUjoMEItW1SRJYEq39VlcIeDe2LcE5B18/4bcaUJNrs= -github.com/pilot-protocol/handshake v0.2.3 h1:DyzVMkbsQKfLvHuGcuYhu45KqrN0shJv2gD4fANYqOo= -github.com/pilot-protocol/handshake v0.2.3/go.mod h1:mHZYadBlHJXLgTqzWHYf/OQg6FPluHmb3pxWbfNBx18= +github.com/pilot-protocol/handshake v0.2.4 h1:GLzn+niMckGxSnP3SwEcsxuNaSVbppozJmDp4rCiUvI= +github.com/pilot-protocol/handshake v0.2.4/go.mod h1:xHmeC8LeBQuJk1F9ucfJXRZ5IMJKSEhVhCL9Uw2gu7o= github.com/pilot-protocol/nameserver v0.2.1 h1:ACCa6WVkEoDZVctEe09WB24Lfobt/JoLDGIqX2MEnss= github.com/pilot-protocol/nameserver v0.2.1/go.mod h1:ze4VFe74xdbyqu5oFPt0YGRrRMMnHWb/AczJhirG+h4= github.com/pilot-protocol/policy v0.2.3 h1:sonEBL82oGjj1zyMQjJJ5cw+0KQdjS1sgHiLmIVWb8g=