commit f8fad2fd2970a171acb5cf89ceb590fb259db2ca parent 6be7bda0230ee1d4bf3aa4ac0db604a7eeb6ea34 Author: ThomasV <thomasv@electrum.org> Date: Sat, 6 Jan 2018 22:45:41 +0100 release 3.0.4 Diffstat:
| M | RELEASE-NOTES | | | 10 | ++++++++++ |
| M | lib/version.py | | | 2 | +- |
2 files changed, 11 insertions(+), 1 deletion(-)
diff --git a/RELEASE-NOTES b/RELEASE-NOTES @@ -1,3 +1,13 @@ +# Release 3.0.4 : (Security update) + + * Fix a vulnerability caused by Cross-Origin Resource Sharing (CORS) + in the JSONRPC interface. Previous versions of Electrum are + vulnerable to port scanning and deanonimization attacks from + malicious websites. Wallets that are not password-protected are + vulnerable to theft. + * Bundle QR scanner with Android app + * Minor bug fixes + # Release 3.0.3 * Qt GUI: sweeping now uses the Send tab, allowing fees to be set * Windows: if using the installer binary, there is now a separate shortcut diff --git a/lib/version.py b/lib/version.py @@ -1,4 +1,4 @@ -ELECTRUM_VERSION = '3.0.3' # version of the client package +ELECTRUM_VERSION = '3.0.4' # version of the client package PROTOCOL_VERSION = '1.1' # protocol version requested # The hash of the mnemonic seed must begin with this