Affected configurations: All Go shopper variations
Probability: Very low
Severity: Excessive
Particulars: A bug in Geth (and doubtlessly different purchasers) could undergo from a DoS assault and permits distant attackers to stall synchronisation course of virtually indefinitely by supplying a legitimate, lighter chain. Extra info might be given out a later time together with the report that was submitted by the bug bounty program.
Results on anticipated chain reorganisation depth: None
Proposed short-term workaround: None
Remedial motion taken by Ethereum: Provision of hotfixes as beneath:
If you happen to’re utilizing Mist: obtain the up to date binary from the release page
If utilizing the PPA: sudo apt-get replace then sudo apt-get improve
If utilizing brew: brew replace then brew reinstall ethereum
If utilizing a home windows binary: obtain the up to date binary from the release page
In case you are constructing from supply: git pull adopted by make geth (please use the Grasp department 94ad694a26ca3f7776ec8240802596755e5d5c0a)
