v2.0.21-bitcore

Binaries

NOTE: The bitcore debian packages are built from the AddressIndexing branch and are intended for block explorers

Install

Debian package dependencies:

Depends amd64: libc6 (>= 2.18), libgcc1 (>= 1:4.2), libgomp1 (>= 4.9), libstdc++6 (>= 5.2)
Depends arm64: libc6 (>= 2.25), libgcc1 (>= 1:4.2), libgomp1 (>= 4.9), libstdc++6 (>= 7)

Notable Changes

• Fix for upstream CVE-2020-8806
  • Changes how nodes enforce timestamp requirements on block headers. Miners and pools should make sure the blocks they generate conform to the new stricter timestamp requirements. Getblocktemplate will always provide a valid timestamp. For details see https://electriccoin.co/blog/new-releases-2-1-1-and-hotfix-2-1-1-1/
  • This change will be deployed by soft-fork on mainnet block 740600 (v2.0.20 mainnet deprecation +8d) and on testnet block 651100 (v2.0.20 mainnet deprecation -7d), pools have the opportunity to test on testnet in the 2 weeks leading up to the mainnet soft-fork.
• Removal of time adjustment
  • Prior to v2.0.21, zend would adjust the local time that it used by up to 70 minutes, according to a median of the times sent by the first 200 peers to connect to it. This mechanism was inherently insecure, since an adversary making multiple connections to the node could effectively control its time within that +/- 70 minute window (this is called a "timejacking attack"). In the v2.0.21 release, in addition to other mitigations for timejacking attacks, as a simplification the time adjustment code has now been completely removed. Node operators should instead simply ensure that local time is set reasonably accurately. If it appears that the node has a significantly different time than its peers, a warning will still be logged and indicated on the metrics screen if enabled.
• Introduce new optional parameter sendChangeToSource to zen-cli z_sendmany

  (boolean, optional, default = false) If true and fromaddress is a taddress return the change to it
  

• The deprecation/release cycle has been changed to 26 weeks/bianually
  • next deprecation to occur 2 weeks before the next block reward halving

v2.0.21

Binaries

Windows and macOS binaries are signed with a valid certificate,
see included instructions.txt for Win/Mac command line wallets.

Install

Debian package dependencies:

Depends amd64: libc6 (>= 2.18), libgcc1 (>= 1:4.2), libgomp1 (>= 4.9), libstdc++6 (>= 5.2)
Depends arm64: libc6 (>= 2.25), libgcc1 (>= 1:4.2), libgomp1 (>= 4.9), libstdc++6 (>= 7)

Notable Changes

• Fix for upstream CVE-2020-8806
  • Changes how nodes enforce timestamp requirements on block headers. Miners and pools should make sure the blocks they generate conform to the new stricter timestamp requirements. Getblocktemplate will always provide a valid timestamp. For details see https://electriccoin.co/blog/new-releases-2-1-1-and-hotfix-2-1-1-1/
  • This change will be deployed by soft-fork on mainnet block 740600 (v2.0.20 mainnet deprecation +8d) and on testnet block 651100 (v2.0.20 mainnet deprecation -7d), pools have the opportunity to test on testnet in the 2 weeks leading up to the mainnet soft-fork.
• Removal of time adjustment
  • Prior to v2.0.21, zend would adjust the local time that it used by up to 70 minutes, according to a median of the times sent by the first 200 peers to connect to it. This mechanism was inherently insecure, since an adversary making multiple connections to the node could effectively control its time within that +/- 70 minute window (this is called a "timejacking attack"). In the v2.0.21 release, in addition to other mitigations for timejacking attacks, as a simplification the time adjustment code has now been completely removed. Node operators should instead simply ensure that local time is set reasonably accurately. If it appears that the node has a significantly different time than its peers, a warning will still be logged and indicated on the metrics screen if enabled.
• Introduce new optional parameter sendChangeToSource to zen-cli z_sendmany

  (boolean, optional, default = false) If true and fromaddress is a taddress return the change to it
  

• The deprecation/release cycle has been changed to 26 weeks/bianually
  • next deprecation to occur 2 weeks before the next block reward halving

v2.0.20-bitcore

Binaries

NOTE: The bitcore debian packages are built from the AddressIndexing branch and are intended for block explorers

Install

Debian package dependencies:

Depends amd64: libc6 (>= 2.18), libgcc1 (>= 1:4.2), libgomp1 (>= 4.9), libstdc++6 (>= 5.2)
Depends arm64: libc6 (>= 2.25), libgcc1 (>= 1:4.2), libgomp1 (>= 4.9), libstdc++6 (>= 7)

Changelog

Jack Grigg (1):
Cast uint8* in InterruptibleRecv to char* for recv

MarcoOl94 (25):
Added fix for deadlock issue (208) and introduced GUnit test to verify it
leftover from previous commit
Made lisstransactions filterable by address
Modified and reintroduced test_foundersreward
Made changes suggested by @abi87
Reversed the txes' order returned by listtransactions
Changed requested by albi87
Introduced changes requested from albi87
Reintroduced Account for backward compatibility
Made changes proposed by @alsala
modified help of listtransactions
Refactored wallet.cpp
Modified test_foundersreward with albi87's changes
Implemented changes requested by alsala
Removed useless asserts
Extended test_checkblock to verify correct send of rewards after the halving
Removed GetFilteredTransaction and modified OrderedTxItems
Removed GetFilteredTransaction and modified orederedTxItems to match previous serialization
Merged listtransactions' test
Some refactor on listtransactions test
Some changed comments
Removed unused variable
changed passing-parameter in OrderderTxItems
Fixed test wallet_shieldcoinbase
Introduced break in orderedTxItems

Miles Manley (1):
Update libsodium download-path

Sean Bowe (1):
Fix of CVE-2017-18350

abi87 (5):
cleaned up useless includes
minor gtest cleanup
minor gtest cleanup
fixed compilation error and cleaned formatting
removed commented out test deemed useless

cronicc (13):
Bump version to 2.0.19-1
Fix socket.settimeout python error on MacOS
Workaround for 'Connection reset by peer' rpc test failures
fetch-params.sh bugfix
Add test for fetch-params.sh using all supported DL methods
Refactor rpc-tests.sh
Add --rpc-exclude --rpc-split options for refactored rpc-tests.sh
Add travis-ci CI/CD pipeline part1
Set mainnet/testnet checkpoint blocks
Set deprecation block 736000
Add test instructions to README.md
Set version to 2.0.20
Generate manpages

v2.0.20

Binaries

Windows and macOS binaries are signed with a valid certificate,
see included instructions.txt for Win/Mac command line wallets.

Install

Debian package dependencies:

Depends amd64: libc6 (>= 2.18), libgcc1 (>= 1:4.2), libgomp1 (>= 4.9), libstdc++6 (>= 5.2)
Depends arm64: libc6 (>= 2.25), libgcc1 (>= 1:4.2), libgomp1 (>= 4.9), libstdc++6 (>= 7)

Changelog

Jack Grigg (1):
Cast uint8* in InterruptibleRecv to char* for recv

MarcoOl94 (25):
Added fix for deadlock issue (208) and introduced GUnit test to verify it
leftover from previous commit
Made lisstransactions filterable by address
Modified and reintroduced test_foundersreward
Made changes suggested by @abi87
Reversed the txes' order returned by listtransactions
Changed requested by albi87
Introduced changes requested from albi87
Reintroduced Account for backward compatibility
Made changes proposed by @alsala
modified help of listtransactions
Refactored wallet.cpp
Modified test_foundersreward with albi87's changes
Implemented changes requested by alsala
Removed useless asserts
Extended test_checkblock to verify correct send of rewards after the halving
Removed GetFilteredTransaction and modified OrderedTxItems
Removed GetFilteredTransaction and modified orederedTxItems to match previous serialization
Merged listtransactions' test
Some refactor on listtransactions test
Some changed comments
Removed unused variable
changed passing-parameter in OrderderTxItems
Fixed test wallet_shieldcoinbase
Introduced break in orderedTxItems

Miles Manley (1):
Update libsodium download-path

Sean Bowe (1):
Fix of CVE-2017-18350

abi87 (5):
cleaned up useless includes
minor gtest cleanup
minor gtest cleanup
fixed compilation error and cleaned formatting
removed commented out test deemed useless

cronicc (13):
Bump version to 2.0.19-1
Fix socket.settimeout python error on MacOS
Workaround for 'Connection reset by peer' rpc test failures
fetch-params.sh bugfix
Add test for fetch-params.sh using all supported DL methods
Refactor rpc-tests.sh
Add --rpc-exclude --rpc-split options for refactored rpc-tests.sh
Add travis-ci CI/CD pipeline part1
Set mainnet/testnet checkpoint blocks
Set deprecation block 736000
Add test instructions to README.md
Set version to 2.0.20
Generate manpages

v2.0.19-1

Minor

• Hotfix release fixing bitcoin upstream CVE-2017-18350

Binaries

Windows and MacOS binary releases will not be provided for this hotfix release.

NOTE: the bitcore debian packages are built from the AddressIndexing branch and are intended for block explorers

Install

Debian package dependencies:

Depends amd64: libc6 (>= 2.18), libgcc1 (>= 1:4.2), libgomp1 (>= 4.9), libstdc++6 (>= 5.2)
Depends arm64: libc6 (>= 2.25), libgcc1 (>= 1:4.2), libgomp1 (>= 4.9), libstdc++6 (>= 7)

v2.0.19

Minor

• New mainnet/testnet DNS Seeders 5b0c1ca
• Fix for upstream vulnerability CVE-2019-17048 aka “PING” #192
• Dependency updates: OpenSSL 1.1.1d 48619a1

Binaries

Windows and macOS binaries are signed with a valid certificate,
see included instructions.txt for Win/Mac command line wallets.

NOTE: the bitcore debian packages are built from the AddressIndexing branch and are intended for block explorers

Install

Debian package dependencies:

Depends amd64: libc6 (>= 2.18), libgcc1 (>= 1:4.2), libgomp1 (>= 4.9), libstdc++6 (>= 5.2)
Depends arm64: libc6 (>= 2.25), libgcc1 (>= 1:4.2), libgomp1 (>= 4.9), libstdc++6 (>= 7)

v2.0.18

Major

• Replay Protection improvements #176
• TLS1.3 support #177

Minor

• Fix getblockfinality RPC method #170
• New mainnet and testnet checkpoint blocks #179
• Adopt RD-Crypto-Spec/Responsible-Disclosure standard #178
• Bilateral Responsible Disclosure Agreement with Zcash #178
• Dependency updates #177

Binaries

Windows and macOS binaries are signed with a valid certificate,
see included instructions.txt for Win/Mac command line wallets.

The "disable-mining" binaries are compiled with --disable-mining in an attempt to reduce Antivirus false positives, use them if you're packaging GUI wallets.

NOTE: the bitcore debian packages are built from the AddressIndexing branch and are intended for block explorers

Install

Debian package dependencies:

Depends amd64: libc6 (>= 2.18), libgcc1 (>= 1:4.2), libgomp1 (>= 4.9), libstdc++6 (>= 5.2)
Depends arm64: libc6 (>= 2.25), libgcc1 (>= 1:4.2), libgomp1 (>= 4.9), libstdc++6 (>= 7)

v2.0.17

Major

• -blockmaxcomplexity switch, limit transactions to be included into blocks based on block complexity.
• -deprecatedgetblocktemplate switch, disable block complexity calculation and use the previous GetBlockTemplate implementation.
• getblockfinalityindex RPC method, display contextual confidence value of needed confirmations for block to be considered final, taking into account possible parallel penalized chains
• getglobaltips utility RPC method, display known chaintips including possible parallel penalized chains
• Additions to the 51% attack prevention implementation adjusting block propagation of penalized chains
• Multiple test cases added for all new features

Minor

• Update zeromq dependency fixing CVE-2019-6250
• Fix libsodium fall-back dl-path
• Backport of zcash/zcash#3897, fixes security issue https://z.cash/support/security/announcements/security-announcement-2019-03-19/ reported to Zcash by Alexis Enston, thanks to the original reporter and the Zcash team for notifying us about the issue!
• Updates to documentation addressing DNS rebinding attacks with ZMQ/AMQP, Zcash PR zcash/zcash#3890, credit to @zebambam.
• New mainnet and testnet checkpoint blocks
• Aria2 added to fetch-params.sh DL methods, wget resume support more robust

Install

Debian package dependencies:

Depends amd64: libc6 (>= 2.18), libgcc1 (>= 1:4.2), libgomp1 (>= 4.9), libstdc++6 (>= 5.2)
Depends arm64: libc6 (>= 2.25), libgcc1 (>= 1:4.2), libgomp1 (>= 4.9), libstdc++6 (>= 7)

Binaries

Windows and macOS binaries are signed with a valid certificate,
see included instructions.txt for Win/Mac command line wallets.

NOTE: the bitcore binaries are built from the AddressIndexing branch and are intended for block explorers

UPDATE 2019-04-15: Zen_Win_binaries_v2.0.17.zip repackaged fixing HTTPS not working with included wget.exe

v2.0.16-1-bitcore

Security release for explorers fixing CVE-2019-6250

Minor

• Update zeromq dependency fixing CVE-2019-6250
• fix libsodium fall-back dl-path

Install

Debian package dependencies:

Depends: libc6 (>= 2.17), libgcc1 (>= 1:3.0), libgomp1 (>= 4.9), libstdc++6 (>= 5.2)

Binaries

NOTE: the bitcore binary contains AddressIndexing, and is intended to be used by explorers.
Currently there is no normal binary release for 2.0.16-1 planned.
If you make use of the zmq functionality and don't need AddressIndexing support please rebuild from the development branch.

v2.0.16

Major

• Sprout Groth16 circuit, new shielded transaction type -3
• Community Fund increase to 20% of block rewards
• mandatory network upgrade at mainnet block 455555

Minor

• added Groth16 specific tests
• adjusted tests for CF increase
• mainnet and testnet checkpoint blocks added
• upgrade OpenSSL to 1.1.0j
• no more separate build scripts for Windows and ARM64 builds, now using build.sh

Install

Debian package dependencies:

Depends: libc6 (>= 2.17), libgcc1 (>= 1:3.0), libgomp1 (>= 4.9), libstdc++6 (>= 5.2)

Binaries

NOTE: the bitcore binary contains AddressIndexing, and is intended to be used by explorers.

• Windows and macOS binaries are signed with a valid certificate

See included instructions.txt for Win/Mac command line wallets.

Update 2019-01-08: Zen_Mac_binaries_v2.0.16.zip repackaged, wrong EOL characters were used in fetch-params.sh