Release 2.4.0.0.3: high-priority hotfix
9 views
Skip to first unread message
Jude Nelson
Oct 24, 2023, 10:56:37 PM10/24/23
to announce
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Hello,
We have released a security patch related to a bug report filed with the Stacks Foundation following responsible disclosure guidelines. Although this vulnerability has not been exploited, we are asking that you upgrade your nodes to 2.4.0.0.3 immediately.
You can follow your usual upgrade process - no sync from genesis is required. This release is compatible with chainstate directories from 2.4.0.0.x
Changelog:
## [2.4.0.0.3]
This is a high-priority hotfix that addresses a bug in transaction processing which
could impact miner availability
Git commit hash: e53ba10e75dc26f3dfe92226df2862f1167f806b
SHA512SUMS:
ecf1ce8da9908acce71d5c40eb36e841eb0dd3ea7b0f276ddd72461e6a3c6966f0afc73ff0311bc469a0aca01465620bfec00e653608b08dc32ac2fe695ec180 linux-glibc-arm64.zip
f75d08730296a03984919c8070bd5832b6386f73fcf3585c9586a3afa333e42cd8fa3bd42973579f27061eb50d880361a73a854fc4cb75cfee769f388c0cb20a linux-glibc-x64.zip
463141e9839f15d56fc44324317babef6c13a963238af9a7dbe9bdd4e345704a79dddda5e8ddd9bb6320ef8e332efe54b352439506d44a9181e9cdaf50e2c76d linux-musl-arm64.zip
dec9b245424a0e5436c3ce46d3d96345794a947dea77a86e66f03731a3dd6c28c0aaaa402432be327ad3d304e9ff41f38009c1cc9ed7166d17ddabc18383ddb9 linux-musl-x64.zip
ff286202db448e655c874f12e3597791d04c909f5c6b36b717fec8de245f504df0eba4f42626e248818409d6b33c517d961b55b1add3b5cb95c748ee08ae65e9 macos-arm64.zip
0832593d0702b7c966ae698afcbfe561bab367c98b5be534b5fed28714ec69fd471f35c8ae43ac86e9a79826bff377876782252144cd4a2d83f8a4c4b1470f18 macos-x64.zip
722bd6f74230530fb5dd7ce7f7a2758607a29c72dd05353a2382f3b1b564b428139ac5d8e3f12a1b28941ee8289dd0d249b36b039db2bb14195fa8c20de4d4d6 stacks-blockchain-2.4.0.0.3.tar.gz
9df1a509f41756c56b4311512dd734e2354b9eaacbf31c2ff2076ccf58d4c046d02446792a46b91bc398da76f0b63df8f1b25be4bab8e56531139a23ac9df329 stacks-blockchain-2.4.0.0.3.zip
fd801384c9aec14b4b92a7b8a5d8ec6eb7b4a80171c9bb6504e571ad9fb1ec73ed2a10b80549eba9f97f04e63bb9ff282fad9c0592fbe7f94ffd3891ba04e919 windows-x64.zip
Best,
Jude Nelson
Research Scientist, Stacks Foundation
-----BEGIN PGP SIGNATURE-----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=p0n1
-----END PGP SIGNATURE-----
Hash: SHA512
Hello,
We have released a security patch related to a bug report filed with the Stacks Foundation following responsible disclosure guidelines. Although this vulnerability has not been exploited, we are asking that you upgrade your nodes to 2.4.0.0.3 immediately.
You can follow your usual upgrade process - no sync from genesis is required. This release is compatible with chainstate directories from 2.4.0.0.x
Changelog:
## [2.4.0.0.3]
This is a high-priority hotfix that addresses a bug in transaction processing which
could impact miner availability
Git commit hash: e53ba10e75dc26f3dfe92226df2862f1167f806b
SHA512SUMS:
ecf1ce8da9908acce71d5c40eb36e841eb0dd3ea7b0f276ddd72461e6a3c6966f0afc73ff0311bc469a0aca01465620bfec00e653608b08dc32ac2fe695ec180 linux-glibc-arm64.zip
f75d08730296a03984919c8070bd5832b6386f73fcf3585c9586a3afa333e42cd8fa3bd42973579f27061eb50d880361a73a854fc4cb75cfee769f388c0cb20a linux-glibc-x64.zip
463141e9839f15d56fc44324317babef6c13a963238af9a7dbe9bdd4e345704a79dddda5e8ddd9bb6320ef8e332efe54b352439506d44a9181e9cdaf50e2c76d linux-musl-arm64.zip
dec9b245424a0e5436c3ce46d3d96345794a947dea77a86e66f03731a3dd6c28c0aaaa402432be327ad3d304e9ff41f38009c1cc9ed7166d17ddabc18383ddb9 linux-musl-x64.zip
ff286202db448e655c874f12e3597791d04c909f5c6b36b717fec8de245f504df0eba4f42626e248818409d6b33c517d961b55b1add3b5cb95c748ee08ae65e9 macos-arm64.zip
0832593d0702b7c966ae698afcbfe561bab367c98b5be534b5fed28714ec69fd471f35c8ae43ac86e9a79826bff377876782252144cd4a2d83f8a4c4b1470f18 macos-x64.zip
722bd6f74230530fb5dd7ce7f7a2758607a29c72dd05353a2382f3b1b564b428139ac5d8e3f12a1b28941ee8289dd0d249b36b039db2bb14195fa8c20de4d4d6 stacks-blockchain-2.4.0.0.3.tar.gz
9df1a509f41756c56b4311512dd734e2354b9eaacbf31c2ff2076ccf58d4c046d02446792a46b91bc398da76f0b63df8f1b25be4bab8e56531139a23ac9df329 stacks-blockchain-2.4.0.0.3.zip
fd801384c9aec14b4b92a7b8a5d8ec6eb7b4a80171c9bb6504e571ad9fb1ec73ed2a10b80549eba9f97f04e63bb9ff282fad9c0592fbe7f94ffd3891ba04e919 windows-x64.zip
Best,
Jude Nelson
Research Scientist, Stacks Foundation
-----BEGIN PGP SIGNATURE-----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=p0n1
-----END PGP SIGNATURE-----
Reply all
Reply to author
Forward
This conversation is locked
You cannot reply and perform actions on locked conversations.
0 new messages