Validation bug fixed - please upgrade to nc0.3.24.64

[vinced]

A validation bug was found by lukejr. The code was not checking that the proof of work is attached to the parent coinbase and allowed it to be attached to any transaction. An attacker can create multiple namecoin blocks per parent block.

I have a fix in my repository.

khal - can you please update the official repository from my branches mergedmine and master?

[vinced]

To be clear: an immediate upgrade is required by everybody.

This is not a change to the validation rules. It is a missing validation rule and that is why it has to be applied immediately.

If you don't upgrade an attacker can cause you to get on an invalid fork of the chain and can rewrite the past since the last checkpoint.

Once the patch is applied that kind of fork will be ignored.

[khal]

I've updated the master branch of namecoin/namecoin (You should have done it yourself in this case.) and updated the linux binaries on the HP.

The mergedmine branch is not in namecoin/namecoin. Should i add it ?


Vinced, please, could delete bitcoin tags on your local repo :

Code: Select all

git tag -d v0.3.19 v0.3.20 v0.3.21 v0.3.21.91 v0.3.21rc v0.3.22 v0.3.22rc1 v0.3.22rc2 v0.3.22rc3 v0.3.22rc4 v0.3.22rc5 v0.3.22rc6 v0.3.23 v0.3.23rc1 v0.3.24.51-rc1 v0.3.24rc1 v0.3.24rc2 v0.3.20.2

And remote :

Code: Select all

git :refs/tags/tag :refs/tags/-d :refs/tags/v0.3.19 :refs/tags/v0.3.20 :refs/tags/v0.3.21 :refs/tags/v0.3.21.91 :refs/tags/v0.3.21rc :refs/tags/v0.3.22 :refs/tags/v0.3.22rc1 :refs/tags/v0.3.22rc2 :refs/tags/v0.3.22rc3 :refs/tags/v0.3.22rc4 :refs/tags/v0.3.22rc5 :refs/tags/v0.3.22rc6 :refs/tags/v0.3.23 :refs/tags/v0.3.23rc1 :refs/tags/v0.3.24.51-rc1 :refs/tags/v0.3.24rc1 :refs/tags/v0.3.24rc2 :refs/tags/v0.3.20.2

[Luke-Jr]

Actually, only a majority of miners need to upgrade. Once that happens, those who don't will just be subject to a higher rate of invalids. Users who don't will need to wait for more confirmations.

[supra]

Would love to upgrade but no binary for OS X.

[Reiko]

Thanks for the information, I guess I better upgrade then...