Skip to content

release-notes.md

Latest commit

 

History

History
92 lines (67 loc) · 4.71 KB

release-notes.md

File metadata and controls

92 lines (67 loc) · 4.71 KB
Raw

Dash Core version v23.1.7

This is a new patch version release, bringing security hardening and build fixes for newer compiler toolchains. This release is recommended for all nodes, and especially for masternodes.

Please report bugs using the issue tracker at GitHub:

https://github.com/dashpay/dash/issues

Upgrading and downgrading

How to Upgrade

If you are running an older version, shut it down. Wait until it has completely shut down (which might take a few minutes for older versions), then run the installer (on Windows) or just copy over /Applications/Dash-Qt (on Mac) or dashd/dash-qt (on Linux).

Downgrade warning

Downgrade to a version < v23.0.0

Downgrading to a version older than v23.0.0 is not supported, and will require a reindex.

Release Notes

Security

This release hardens several peer-to-peer message handlers against denial-of-service from remote peers. These issues do not affect consensus and do not put funds at risk, but they could be used to crash or degrade nodes - masternodes in particular - so upgrading is recommended.

  • Networking: a peer whose receive buffer filled up could keep the socket-handler thread spinning at 100% CPU for the duration of the backpressure. The thread now falls back to its normal poll wait while such peers are paused.
  • LLMQ / DKG: pushed DKG messages are now accepted only from verified masternodes, are bounded in size, and are structurally validated before being retained; malformed signatures can no longer trigger an assertion failure during batch signature verification.
  • BLS: verifying a DKG contribution share whose verification vector was never received no longer dereferences a null pointer.
  • InstantSend: locks with an oversized input set are now rejected before any expensive processing, and the queues holding not-yet-verified and awaiting-transaction locks are bounded to prevent unbounded memory growth.
  • Governance: vote-sync requests carrying a bloom filter outside the permitted size are rejected, preventing a CPU-amplification stall of P2P message processing.

Build

  • Fixed GCC 16 build failures in warning-enabled builds by tightening header includes and initializing LevelDB compaction output size.

v23.1.7 Change log

See detailed set of changes.

Credits

Thanks to everyone who directly contributed to this release:

  • knst
  • PastaPastaPasta

As well as everyone that submitted issues, reviewed pull requests and helped debug the release candidates.

Older releases

These releases are considered obsolete. Old release notes can be found here: