Skip to content

Emergency release to fix an exploitable bug

Latest
Latest
Compare
Choose a tag to compare
@PeterSurda PeterSurda released this 13 Feb 16:36
· 1435 commits to v0.6 since this release
v0.6.3
This tag was signed with the committer’s verified signature.
PeterSurda Peter Šurda
GPG key ID: 0C5F50C0B5F37D87
Learn about vigilant mode.
4cd36ec
This commit was signed with the committer’s verified signature.
PeterSurda Peter Šurda
GPG key ID: 0C5F50C0B5F37D87
Learn about vigilant mode.

Version 0.6.2 has a bug that can be exploited for remote code execution. This is an emergency release, and 0.6.4 will be released in a couple of days with cleanup originally intended for 0.6.3, and full release notes. Everyone who uses 0.6.2 should upgrade (or, if upgrade is not possible, downgrade).

Apart from the emergency fix, this release contains a new network subsystem which requires less resources (CPU and memory) and the Dandelion++ protocol extension for enhanced privacy.

Windows and OSX binaries follow soon.

Assets 2