Affected configurations: All Go consumer variations
Probability: Very low
Severity: Excessive
Particulars: A bug in Geth (and doubtlessly different purchasers) could undergo from a DoS assault and permits distant attackers to stall synchronisation course of nearly indefinitely by supplying a legitimate, lighter chain. Extra info shall be given out a later time together with the report that was submitted by way of the bug bounty program.
Results on anticipated chain reorganisation depth: None
Proposed momentary workaround: None
Remedial motion taken by Ethereum: Provision of hotfixes as beneath:
In case you’re utilizing Mist: obtain the up to date binary from the release page
If utilizing the PPA: sudo apt-get replace then sudo apt-get improve
If utilizing brew: brew replace then brew reinstall ethereum
If utilizing a home windows binary: obtain the up to date binary from the release page
In case you are constructing from supply: git pull adopted by make geth (please use the Grasp department 94ad694a26ca3f7776ec8240802596755e5d5c0a)