X-Git-Url: http://git.bitcoin.ninja/index.cgi?a=blobdiff_plain;f=CHANGELOG.md;h=3e473a22a1cd0b86fe1dc18d0c1c0f98ff58f6d2;hb=113b0f1a0eb503181ed5d5b4d07f0ef83ab30770;hp=60b5dd233757d31e81d354ae6f487266c9068eb9;hpb=5592378de27eb7453ccc70ac2d0b5c8d9b10e091;p=rust-lightning diff --git a/CHANGELOG.md b/CHANGELOG.md index 60b5dd23..3e473a22 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,4 +1,23 @@ -# 0.0.120 - Jan 17, 2024 - "Blinded Fuzzers" +# 0.0.121 - Jan 22, 2024 - "Unwraps are Bad" + +## Bug Fixes + * Fix a deadlock when calling `batch_funding_transaction_generated` with + invalid input (#2841). + +## Security +0.0.121 fixes a denial-of-service vulnerability which is reachable from +untrusted input from peers in rare cases if we have a public channel or in +common cases if `P2PGossipSync` is used. + * A peer that failed to complete its handshake would cause a reachable + `unwrap` in LDK since 0.0.119 when LDK attempts to broadcast gossip to all + peers (#2842). + +In total, this release features 4 files changed, 52 insertions, 10 +deletions in 4 commits from 2 authors, in alphabetical order: + * Jeffrey Czyz + * Matt Corallo + +# 0.0.120 - Jan 17, 2024 - "Unblinded Fuzzers" ## API Updates * The `PeerManager` bound on `UtxoLookup` was removed entirely. This enables