diff --git a/CHANGELOG.md b/CHANGELOG.md index 194619eed..0094cb669 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,6 +6,10 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). +## [v1.0.0-beta.17] + +- Security fix for p2p networking layer (CVE-2026-22868) + ## [v1.0.0-beta.16] - Return `413` status code instead of `500` when RPC request body exceeds size limit diff --git a/crypto/ecies/ecies.go b/crypto/ecies/ecies.go index 738bb8f58..97e94df88 100644 --- a/crypto/ecies/ecies.go +++ b/crypto/ecies/ecies.go @@ -285,7 +285,7 @@ func (prv *PrivateKey) Decrypt(c, s1, s2 []byte) (m []byte, err error) { switch c[0] { case 2, 3, 4: rLen = (prv.PublicKey.Curve.Params().BitSize + 7) / 4 - if len(c) < (rLen + hLen + 1) { + if len(c) < (rLen + hLen + params.BlockSize) { return nil, ErrInvalidMessage } default: diff --git a/params/version.go b/params/version.go index 8de4f7e73..34498674b 100644 --- a/params/version.go +++ b/params/version.go @@ -24,7 +24,7 @@ const ( VersionMajor = 1 // Major version component of the current release VersionMinor = 0 // Minor version component of the current release VersionPatch = 0 // Patch version component of the current release - VersionMeta = "beta.16" // Version metadata to append to the version string + VersionMeta = "beta.17" // Version metadata to append to the version string ) // Version holds the textual version string.