From 063ec0a758ddc80bb6d9a9c126e9461007dfb0ce Mon Sep 17 00:00:00 2001 From: ThomasV Date: Sat, 6 Jan 2018 22:45:41 +0100 Subject: [PATCH] release 3.0.4 --- RELEASE-NOTES | 10 ++++++++++ lib/version.py | 2 +- 2 files changed, 11 insertions(+), 1 deletion(-) diff --git a/RELEASE-NOTES b/RELEASE-NOTES index a0894e0a4..5f14a4465 100644 --- a/RELEASE-NOTES +++ b/RELEASE-NOTES @@ -1,3 +1,13 @@ +# Release 3.0.4 : (Security update) + + * Fix a vulnerability caused by Cross-Origin Resource Sharing (CORS) + in the JSONRPC interface. Previous versions of Electrum are + vulnerable to port scanning and deanonimization attacks from + malicious websites. Wallets that are not password-protected are + vulnerable to theft. + * Bundle QR scanner with Android app + * Minor bug fixes + # Release 3.0.3 * Qt GUI: sweeping now uses the Send tab, allowing fees to be set * Windows: if using the installer binary, there is now a separate shortcut diff --git a/lib/version.py b/lib/version.py index 304ebef51..687527d69 100644 --- a/lib/version.py +++ b/lib/version.py @@ -1,4 +1,4 @@ -ELECTRUM_VERSION = '3.0.3' # version of the client package +ELECTRUM_VERSION = '3.0.4' # version of the client package PROTOCOL_VERSION = '1.1' # protocol version requested # The hash of the mnemonic seed must begin with this