diff --git a/docs/release-notes/release-notes-0.4.2.md b/docs/release-notes/release-notes-0.4.2.md new file mode 100644 index 0000000..cdac1ac --- /dev/null +++ b/docs/release-notes/release-notes-0.4.2.md @@ -0,0 +1,90 @@ +Joinmarket-clientserver 0.4.2: +================= + + + +This is a bugfix release, and to be considered essential for Makers (yield-generator runners). +See "Notable changes", first section, for details of the issue. + +If you encounter errors in installation, please read the second section ("Changes to gpg usage in install procedure"). + +If you are upgrading from pre-0.4.0 you **must** read the [release notes for 0.4.0](https://github.com/JoinMarket-Org/joinmarket-clientserver/blob/master/docs/release-notes/release-notes-0.4.0.md) and follow +the relevant upgrade instructions, which apply here exactly the same. + +Please report bugs using the issue tracker at github: + + + +Upgrading +========= + +To upgrade (if from pre-0.4.0): + +As mentioned above, follow the instructions as per "Upgrading" in [release 0.4.0](https://github.com/JoinMarket-Org/joinmarket-clientserver/blob/master/docs/release-notes/release-notes-0.4.0.md). + + + +Notable changes +=============== + +### Fix crash bug on receipt of invalid PoDLE proof + +286d306 fix crash on bad podle revelation + +This fixes an effective DOS vector against Makers (hence it's an immediately needed upgrade). +Because the PoDLEError was not caught in the Maker code, any invalidly formatted proof simply crashes the Maker before this fix (this bug has been present since July 2017). + +### Changes to gpg usage in install procedure + +69f898d check gpg signatures on travis +b102b5d use gpg for fetching pubkeys + +This should make it less likely to encounter errors when trying to install +libsodium as part of the Joinmarket installation process. However note: + +A known issue exists in install.sh in which the following error will be returned : + +... +gpg: can't open `libsodium-1.0.13.tar.gz.sig' +gpg: verify signatures failed: file open error +Libsodium was not built. Exiting. + +This issue might affect users who have installed Joinmarket previously using the --no-gpg-validation flag, and are now re-installing without the use of the flag (as is the default install method). +To work around this issue, remove the libsodium-1.0.13.tar.gz file from the ./deps/cache/ directory and re-run install.sh. + +### Update from txsocksx to txtorcon + +637911d Replace unmaintained txsocksx with txtorcon. +2313a8a Pass ClientContextFactory to TorSocksEndpoint + +This is purely backend and doesn't affect functionality. +Previously txsocksx was used to allow connections to hidden service +onions for IRC servers via a socks proxy. Unfortunately this package +is not maintained and breaks on Py3. So the dependency is changed to the +more up to date / maintained txtorcon. + +### Minor administrative changes + +Will not be of interest to non-developers (the key update is mentioned +on the main release page): + +55c9483 update to new code signing key for AdamISZ +e32ba20 Add Qt5 support to TODO list +a612ddb Make it possible to override default python version in install.sh +1d70783 Add miniircd.tar.gz to gitignore. +089f75c Replace deprecated py.test syntax with pytest. + +Credits +======= + +Thanks to everyone who directly contributed to this release - + +- @undeath +- @jameshilliard +- @fivepiece +- @AdamISZ +- @kristapsk + +And thanks also to those who submitted bug reports, tested and otherwise helped out. + + diff --git a/jmbase/setup.py b/jmbase/setup.py index 94db0ae..d747e2e 100644 --- a/jmbase/setup.py +++ b/jmbase/setup.py @@ -2,7 +2,7 @@ from setuptools import setup setup(name='joinmarketbase', - version='0.4.1', + version='0.4.2', description='Joinmarket client library for Bitcoin coinjoins', url='http://github.com/Joinmarket-Org/joinmarket-clientserver/jmbase', author='', diff --git a/jmbitcoin/setup.py b/jmbitcoin/setup.py index fb76c0b..4ca8cc3 100644 --- a/jmbitcoin/setup.py +++ b/jmbitcoin/setup.py @@ -2,7 +2,7 @@ from setuptools import setup setup(name='joinmarketbitcoin', - version='0.4.1', + version='0.4.2', description='Joinmarket client library for Bitcoin coinjoins', url='http://github.com/Joinmarket-Org/joinmarket-clientserver/jmbitcoin', author='', diff --git a/jmclient/setup.py b/jmclient/setup.py index 894881c..8ca077b 100644 --- a/jmclient/setup.py +++ b/jmclient/setup.py @@ -2,12 +2,12 @@ from setuptools import setup setup(name='joinmarketclient', - version='0.4.1', + version='0.4.2', description='Joinmarket client library for Bitcoin coinjoins', url='http://github.com/Joinmarket-Org/joinmarket-clientserver/jmclient', author='', author_email='', license='GPL', packages=['jmclient'], - install_requires=['joinmarketbase==0.4.1', 'mnemonic', 'qt4reactor', 'argon2_cffi', 'bencoder.pyx', 'pyaes'], + install_requires=['joinmarketbase==0.4.2', 'mnemonic', 'qt4reactor', 'argon2_cffi', 'bencoder.pyx', 'pyaes'], zip_safe=False) diff --git a/jmdaemon/setup.py b/jmdaemon/setup.py index b62d4f7..d381eb7 100644 --- a/jmdaemon/setup.py +++ b/jmdaemon/setup.py @@ -2,12 +2,12 @@ from setuptools import setup setup(name='joinmarketdaemon', - version='0.4.1', + version='0.4.2', description='Joinmarket client library for Bitcoin coinjoins', url='http://github.com/Joinmarket-Org/joinmarket-clientserver/jmdaemon', author='', author_email='', license='GPL', packages=['jmdaemon'], - install_requires=['txtorcon', 'pyopenssl', 'libnacl', 'joinmarketbase==0.4.1'], + install_requires=['txtorcon', 'pyopenssl', 'libnacl', 'joinmarketbase==0.4.2'], zip_safe=False) diff --git a/scripts/joinmarket-qt.py b/scripts/joinmarket-qt.py index 83865c7..dcc5663 100644 --- a/scripts/joinmarket-qt.py +++ b/scripts/joinmarket-qt.py @@ -47,7 +47,7 @@ pyqt4reactor.install() donation_address = "1AZgQZWYRteh6UyF87hwuvyWj73NvWKpL" #Underlying joinmarket code version (as per setup.py etc.) -JM_CORE_VERSION = '0.4.1' +JM_CORE_VERSION = '0.4.2' #Version of this Qt script specifically JM_GUI_VERSION = '7'