trelease 3.0.4 - electrum - Electrum Bitcoin wallet HTML git clone https://git.parazyd.org/electrum DIR Log DIR Files DIR Refs DIR Submodules --- DIR commit f8fad2fd2970a171acb5cf89ceb590fb259db2ca DIR parent 6be7bda0230ee1d4bf3aa4ac0db604a7eeb6ea34 HTML Author: ThomasV <thomasv@electrum.org> Date: Sat, 6 Jan 2018 22:45:41 +0100 release 3.0.4 Diffstat: M RELEASE-NOTES | 10 ++++++++++ M lib/version.py | 2 +- 2 files changed, 11 insertions(+), 1 deletion(-) --- DIR diff --git a/RELEASE-NOTES b/RELEASE-NOTES t@@ -1,3 +1,13 @@ +# Release 3.0.4 : (Security update) + + * Fix a vulnerability caused by Cross-Origin Resource Sharing (CORS) + in the JSONRPC interface. Previous versions of Electrum are + vulnerable to port scanning and deanonimization attacks from + malicious websites. Wallets that are not password-protected are + vulnerable to theft. + * Bundle QR scanner with Android app + * Minor bug fixes + # Release 3.0.3 * Qt GUI: sweeping now uses the Send tab, allowing fees to be set * Windows: if using the installer binary, there is now a separate shortcut DIR diff --git a/lib/version.py b/lib/version.py t@@ -1,4 +1,4 @@ -ELECTRUM_VERSION = '3.0.3' # version of the client package +ELECTRUM_VERSION = '3.0.4' # version of the client package PROTOCOL_VERSION = '1.1' # protocol version requested # The hash of the mnemonic seed must begin with this