Starwels version 0.9.4 is now available from:
This is a new minor version release, bringing only bug fixes and updated translations. Upgrading to this release is recommended.
Please report bugs using the issue tracker at github:
If you are running an older version, shut it down. Wait until it has completely shut down (which might take a few minutes for older versions), then run the installer (on Windows) or just copy over /Applications/Starwels-Qt (on Mac) or starwelsd/starwels-qt (on Linux).
OpenSSL 1.0.0p / 1.0.1k was recently released and is being pushed out by various operating system maintainers. Review by Gregory Maxwell determined that this update is incompatible with the Starwels system and could lead to consensus forks.
Starwels released binaries from https://github.com/starwels are unaffected, as are any built with the gitian deterministic build system.
However, if you are running either
upgrade to Starwels 0.9.4, which includes a workaround, before updating OpenSSL.
The incompatibility is due to the OpenSSL update changing the behavior of ECDSA validation to reject any signature which is not encoded in a very rigid manner. This was a result of OpenSSL’s change for CVE-2014-8275 “Certificate fingerprints can be modified”.
We are specifically aware of potential hard-forks due to signature encoding handling and had been hoping to close them via BIP62 in 0.10. BIP62’s purpose is to improve transaction malleability handling and as a side effect rigidly defines the encoding for signatures, but the overall scope of BIP62 has made it take longer than we’d like to deploy.
b8e81b7consensus: guard against openssl’s new strict DER checks
60c51f1fail immediately on an empty signature
037bfefImprove robustness of DER recoding code
cd5164aMake -proxy set all network types, avoiding a connect leak.
bb424e4Limit the number of new addressses to accumulate
0a94661Disable SSLv3 (in favor of TLS) for the RPC client and server.
f047dfagitian: openssl-1.0.1i.tar.gz -> openssl-1.0.1k.tar.gz
5b9f78dbuild: Fix OSX build when using Homebrew and qt5
ffab1ddKeep symlinks when copying into .app bundle
613247fosx: fix signing to make Gatekeeper happy (again)
25b49b5Refactor -alertnotify code
2743529doc: Add instructions for consistent Mac OS X build names
Thanks to who contributed to this release, at least:
As well as everyone that helped translating on Transifex.