6 changed files with 66 additions and 7 deletions
@ -0,0 +1,59 @@ |
|||||||
|
Joinmarket-clientserver 0.3.2: |
||||||
|
================= |
||||||
|
|
||||||
|
<https://github.com/joinmarket-org/joinmarket-clientserver/releases/tag/v0.3.2> |
||||||
|
|
||||||
|
Minor release with important bugfixes, especially for Makers (yield-generators). |
||||||
|
|
||||||
|
Due to the security implications of the first bugfix described below, upgrade immediately. |
||||||
|
|
||||||
|
Please report bugs using the issue tracker at github: |
||||||
|
|
||||||
|
<https://github.com/joinmarket-org/joinmarket-clientserver/issues> |
||||||
|
|
||||||
|
Upgrading |
||||||
|
========= |
||||||
|
|
||||||
|
To upgrade: run the `install.sh` script as mentioned in the README. When prompted to overwrite the directory `jmvenv`, accept. |
||||||
|
|
||||||
|
|
||||||
|
Notable changes |
||||||
|
=============== |
||||||
|
|
||||||
|
### Prevent daemon listening on all interfaces |
||||||
|
|
||||||
|
`b5db28e` |
||||||
|
|
||||||
|
This fixes an important privacy weakness - in case you are not behind NAT/firewall, the previous version |
||||||
|
accepted connections to the daemon port (default 27183) from other machines. This did not represent |
||||||
|
a funds loss risk (the daemon has no access to Bitcoin/wallet, only does message passing), but could have |
||||||
|
allowed at least disruption of processing, and probably leak information. Many thanks to @undeath for |
||||||
|
noticing this, and apologies from me for not testing/checking it when I first wrote it. |
||||||
|
|
||||||
|
### Add correct transaction timeout watchers to Core blockchain interface |
||||||
|
|
||||||
|
`3aab8b9` |
||||||
|
|
||||||
|
For the case of transactions which were negotiated but not broadcast on the network (e.g. if the |
||||||
|
Taker's pushtx() operation failed for some reason), the transaction watching loop did not stop, |
||||||
|
which is a problem for a long-running Maker (it will eventually start to use more and more resources |
||||||
|
by constantly polling Core, if such failed tx negotations occur). |
||||||
|
Now timeouts as specified in `[TIMEOUT]`, `unconfirm_timeout_sec` and `confirm_timeout_hours` |
||||||
|
as set in the config (defaults 90, 6 respectively) are respected. |
||||||
|
|
||||||
|
Other changes are minor: improvements to wallethistory feature, improvements to `install.sh` (including `--develop` flag for developers), |
||||||
|
and some improvements to the testing and docs. |
||||||
|
|
||||||
|
Credits |
||||||
|
======= |
||||||
|
|
||||||
|
Thanks to everyone who directly contributed to this release - |
||||||
|
|
||||||
|
- @adlai |
||||||
|
- @undeath |
||||||
|
- @fivepiece |
||||||
|
- @AdamISZ |
||||||
|
- @mecampbellsoup |
||||||
|
- @sangaman |
||||||
|
|
||||||
|
And thanks also to those who submitted bug reports, tested and otherwise helped out. |
||||||
Loading…
Reference in new issue