Public disclosure of 1 vulnerability affecting Bitcoin Core <24.0.1

Public disclosure of 1 vulnerability affecting Bitcoin Core <24.0.1
2024-09-19  8:12 ` [bitcoindev] " Antoine Riard
  
From: 'Antoine Poinsot' via Bitcoin Development Mailing List @ 2024-09-19  5:15 UTC (permalink / raw)
  To: Bitcoin Development Mailing List

Hi everyone,

Today we are releasing 1 security advisory for the Bitcoin Core project. This vulnerability affects versions of Bitcoin Core before (and not including) 24.0.1.

The details for this vulnerability are available at https://bitcoincore.org/en/2024/09/18/disclose-headers-oom.

This is part of the gradual adoption by the project of a new vulnerability disclosure policy. The policy is available at https://bitcoincore.org/en/security-advisories/#policy. We will follow up next month with vulnerabilities affecting Bitcoin Core versions before (and not including) 25.0, if any.

Antoine Poinsot

-- 



 permalink raw reply	[|nested]
2024-09-19  5:15 [bitcoindev] Public disclosure of 1 vulnerability affecting Bitcoin Core <24.0.1 'Antoine Poinsot' via Bitcoin Development Mailing List

  
From: Antoine Riard @ 2024-09-19  8:12 UTC (permalink / raw)
  To: Bitcoin Development Mailing List


[-- Attachment #1.1: Type: text/plain, Size: 1563 bytes --]

Hi Darosior,

Thanks for writing the report.

"With that, Bitcoin Core no longer relies on having checkpoints to protect 
against any known attacks."

I think it's good time to get that back on track:
https://github.com/bitcoin/bitcoin/pull/25725

As of commit ab0b5706b, it sounds checkpoints are still there.

Best,
Antoine (the other one)
ots hash: e4888dbb9983b541649f66bb23665e25fa22c47deeec5a294cf6e7624911cd07

Le jeudi 19 septembre 2024 à 08:27:23 UTC+1, Antoine Poinsot a écrit :

> Hi everyone,
>
> Today we are releasing 1 security advisory for the Bitcoin Core project. 
> This vulnerability affects versions of Bitcoin Core before (and not 
> including) 24.0.1.
>
> The details for this vulnerability are available at 
> https://bitcoincore.org/en/2024/09/18/disclose-headers-oom.
>
> This is part of the gradual adoption by the project of a new vulnerability 
> disclosure policy. The policy is available at 
> https://bitcoincore.org/en/security-advisories/#policy. We will follow up 
> next month with vulnerabilities affecting Bitcoin Core versions before (and 
> not including) 25.0, if any.
>
> Antoine Poinsot
>

-- 
2: Type: text/html, Size: 2683 bytes --]

 permalink raw reply	[|nested]