Security context

Highlights

Auth Bypass: 117 prior fixes. Scrutinize any change in this area.

msp: most-fixed (18 issues). Treat as high-risk during review.

134 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Auth Bypass: The Membership Service Provider (MSP) is a critical core capability where failures directly compromise identity validation. Historically, multiple issues allowed attackers to bypass checks through unverified raw certificate bytes, failure to validate intermediate CA constraints against CRLs or leaf-node trees, and missing expiration or Organizational Unit checks during setup and principal matching.

Auth Bypass: Validation of transaction namespaces, read-write sets, and signatures at commit time represents a high-impact risk surface. Historical flaws in VSCC/LSCC integration and fallback paths allowed endorsement policy bypasses by failing to enforce checks on duplicate namespaces, original namespaces, and unvalidated transaction filters.

Denial of Service: Connection handling and authentication timeouts in the gossip layer are prone to resource leaks. Unstopped tickers, missing timeout deadlines, and failure to explicitly terminate connections during authentication mismatches have previously allowed malicious peers to trigger file descriptor exhaustion and hang connections indefinitely.