diff --git a/docs/release-notes/release-notes-0.3.2.md b/docs/release-notes/release-notes-0.3.2.md new file mode 100644 index 0000000..3ffb29f --- /dev/null +++ b/docs/release-notes/release-notes-0.3.2.md @@ -0,0 +1,59 @@ +Joinmarket-clientserver 0.3.2: +================= + + + +Minor release with important bugfixes, especially for Makers (yield-generators). + +Due to the security implications of the first bugfix described below, upgrade immediately. + +Please report bugs using the issue tracker at github: + + + +Upgrading +========= + +To upgrade: run the `install.sh` script as mentioned in the README. When prompted to overwrite the directory `jmvenv`, accept. + + +Notable changes +=============== + +### Prevent daemon listening on all interfaces + +`b5db28e` + +This fixes an important privacy weakness - in case you are not behind NAT/firewall, the previous version +accepted connections to the daemon port (default 27183) from other machines. This did not represent +a funds loss risk (the daemon has no access to Bitcoin/wallet, only does message passing), but could have +allowed at least disruption of processing, and probably leak information. Many thanks to @undeath for +noticing this, and apologies from me for not testing/checking it when I first wrote it. + +### Add correct transaction timeout watchers to Core blockchain interface + +`3aab8b9` + +For the case of transactions which were negotiated but not broadcast on the network (e.g. if the +Taker's pushtx() operation failed for some reason), the transaction watching loop did not stop, +which is a problem for a long-running Maker (it will eventually start to use more and more resources +by constantly polling Core, if such failed tx negotations occur). +Now timeouts as specified in `[TIMEOUT]`, `unconfirm_timeout_sec` and `confirm_timeout_hours` +as set in the config (defaults 90, 6 respectively) are respected. + +Other changes are minor: improvements to wallethistory feature, improvements to `install.sh` (including `--develop` flag for developers), +and some improvements to the testing and docs. + +Credits +======= + +Thanks to everyone who directly contributed to this release - + +- @adlai +- @undeath +- @fivepiece +- @AdamISZ +- @mecampbellsoup +- @sangaman + +And thanks also to those who submitted bug reports, tested and otherwise helped out. diff --git a/jmbase/setup.py b/jmbase/setup.py index 33e3fb7..7db3568 100644 --- a/jmbase/setup.py +++ b/jmbase/setup.py @@ -2,7 +2,7 @@ from setuptools import setup setup(name='joinmarketbase', - version='0.3.1', + version='0.3.2', description='Joinmarket client library for Bitcoin coinjoins', url='http://github.com/AdamISZ/joinmarket-clientserver/jmbase', author='Adam Gibson', diff --git a/jmbitcoin/setup.py b/jmbitcoin/setup.py index fae78f9..af35a8d 100644 --- a/jmbitcoin/setup.py +++ b/jmbitcoin/setup.py @@ -2,7 +2,7 @@ from setuptools import setup setup(name='joinmarketbitcoin', - version='0.3.1', + version='0.3.2', description='Joinmarket client library for Bitcoin coinjoins', url='http://github.com/AdamISZ/joinmarket-clientserver/jmbitcoin', author='Adam Gibson', diff --git a/jmclient/setup.py b/jmclient/setup.py index 796441f..904702f 100644 --- a/jmclient/setup.py +++ b/jmclient/setup.py @@ -2,12 +2,12 @@ from setuptools import setup setup(name='joinmarketclient', - version='0.3.1', + version='0.3.2', description='Joinmarket client library for Bitcoin coinjoins', url='http://github.com/AdamISZ/joinmarket-clientserver/jmclient', author='Adam Gibson', author_email='ekaggata@gmail.com', license='GPL', packages=['jmclient'], - install_requires=['joinmarketbase==0.3.1', 'mnemonic', 'qt4reactor'], + install_requires=['joinmarketbase==0.3.2', 'mnemonic', 'qt4reactor'], zip_safe=False) diff --git a/jmdaemon/setup.py b/jmdaemon/setup.py index 4204540..1402c1c 100644 --- a/jmdaemon/setup.py +++ b/jmdaemon/setup.py @@ -2,12 +2,12 @@ from setuptools import setup setup(name='joinmarketdaemon', - version='0.3.1', + version='0.3.2', description='Joinmarket client library for Bitcoin coinjoins', url='http://github.com/AdamISZ/joinmarket-clientserver/jmdaemon', author='Adam Gibson', author_email='ekaggata@gmail.com', license='GPL', packages=['jmdaemon'], - install_requires=['txsocksx', 'pyopenssl', 'libnacl', 'joinmarketbase==0.3.1'], + install_requires=['txsocksx', 'pyopenssl', 'libnacl', 'joinmarketbase==0.3.2'], zip_safe=False) diff --git a/scripts/joinmarket-qt.py b/scripts/joinmarket-qt.py index d673a6f..2e50cf1 100644 --- a/scripts/joinmarket-qt.py +++ b/scripts/joinmarket-qt.py @@ -48,7 +48,7 @@ pyqt4reactor.install() donation_address = "1AZgQZWYRteh6UyF87hwuvyWj73NvWKpL" #Underlying joinmarket code version (as per setup.py etc.) -JM_CORE_VERSION = '0.3.1' +JM_CORE_VERSION = '0.3.2' #Version of this Qt script specifically JM_GUI_VERSION = '7'