From 08d63c2f050bf3f2b9aef6e4753fec14dd4388a7 Mon Sep 17 00:00:00 2001 From: selsta Date: Wed, 30 Dec 2020 18:30:21 +0100 Subject: [PATCH] blog: add v0.17.1.8 release notes (CLI / GUI) --- _posts/2020-12-30-monero-0.17.1.8-released.md | 81 +++++++++++++++++++ ...2020-12-30-monero-GUI-0.17.1.8-released.md | 60 ++++++++++++++ 2 files changed, 141 insertions(+) create mode 100644 _posts/2020-12-30-monero-0.17.1.8-released.md create mode 100644 _posts/2020-12-30-monero-GUI-0.17.1.8-released.md diff --git a/_posts/2020-12-30-monero-0.17.1.8-released.md b/_posts/2020-12-30-monero-0.17.1.8-released.md new file mode 100644 index 00000000..115107ab --- /dev/null +++ b/_posts/2020-12-30-monero-0.17.1.8-released.md @@ -0,0 +1,81 @@ +--- +layout: post +title: "Monero 0.17.1.8 'Oxygen Orion' Point Release" +summary: Point release containing mitigations against the ongoing memory exhaustion attack +tags: [releases] +author: selsta +image: /blog/assets/2020-09-17-monero-0.17-released/oxygen-orion.png +--- + +
+ +
+ +# Overview + +This is the v0.17.1.8 minor point release of the Monero software. This is a recommended release that contains mitigations against the ongoing memory exhaustion attack. + +Some highlights of this minor release are: + +- Protocol: drop nodes if they claim new data but only give stale data +- Add some sanity checks on data size (portable_storage) +- Fix some issues using connections after shutdown, add buffered SSL handshake detection +- Optional DNS based blocklist (\-\-enable-dns-blocklist) +- Ban lists may now include subnets +- The ban command can now load IPs from a file (ban @filename) +- RPC: add busy_syncing, synchronized fields to get_info +- RPC: limit the number of txes for get_blocks.bin +- P2P: ignore incoming peer list entries when we have them blocked +- P2P: remove peers from grey and anchors lists when blocked +- Restrict public node checks a little, warn about untrusted nodes +- Minor bug fixes + +The complete list of changes is [available on GitHub](https://github.com/monero-project/monero/compare/v0.17.1.7...v0.17.1.8), along with [the source code](https://github.com/monero-project/monero/tree/v0.17.1.8). + +# Contributors for this Release + +This release was the direct result of 7 people who worked, largely unpaid and altruistically, to put out 45 commits containing 530 new lines of code. We'd like to thank them very much for their time and effort. In no particular order they are: + +- TheCharlatan +- luigi1111 +- Snipa +- moneromooo +- vtnerd +- selsta +- anon + +# Download + +The new binaries can be downloaded from the [Downloads page]({{ site.baseurl }}/downloads/#cli) or from the direct links below. + +- [Windows, 64-bit](https://downloads.getmonero.org/cli/monero-win-x64-v0.17.1.8.zip) +- [Windows, 32-bit](https://downloads.getmonero.org/cli/monero-win-x86-v0.17.1.8.zip) +- [macOS, 64-bit](https://downloads.getmonero.org/cli/monero-mac-x64-v0.17.1.8.tar.bz2) +- [Linux, 64-bit](https://downloads.getmonero.org/cli/monero-linux-x64-v0.17.1.8.tar.bz2) +- [Linux, 32-bit](https://downloads.getmonero.org/cli/monero-linux-x86-v0.17.1.8.tar.bz2) +- [Linux, armv7](https://downloads.getmonero.org/cli/monero-linux-armv7-v0.17.1.8.tar.bz2) +- [Linux, armv8](https://downloads.getmonero.org/cli/monero-linux-armv8-v0.17.1.8.tar.bz2) +- [Android, armv7](https://downloads.getmonero.org/cli/monero-android-armv7-v0.17.1.8.tar.bz2) +- [Android, armv8](https://downloads.getmonero.org/cli/monero-android-armv8-v0.17.1.8.tar.bz2) +- [FreeBSD, 64-bit](https://downloads.getmonero.org/cli/monero-freebsd-x64-v0.17.1.8.tar.bz2) + +# Hashes + +If you would like to verify that you have downloaded the correct file, please use the following SHA256 hashes: + +``` +monero-win-x64-v0.17.1.8.zip, 55bafa33142b2aa979e5f6b4a6ddb60584bc9e9434e3a8c0a7fd8c9852bbcd7e +monero-win-x86-v0.17.1.8.zip, 4bd0c594c59de2815e91e7560be5b52370abb351f425c2ea1434a0ae4205c30a +monero-mac-x64-v0.17.1.8.tar.bz2, b969d7c8855d59b6962227a5a68f507f183253d06acd548b41673c647317de48 +monero-linux-x64-v0.17.1.8.tar.bz2, b566652c5281970c6137c27dd15002fe6d4c9230bc37d81545b2f36c16e7d476 +monero-linux-x86-v0.17.1.8.tar.bz2, 827e6e30296135494e80fcd54b0c8e64532b0ec8bdbbbec445860ce47d6f0d87 +monero-linux-armv8-v0.17.1.8.tar.bz2, e8580f776152757bf07b0ca9dc3c1fbb4033b0956ab76599ff642fdb84427d1e +monero-linux-armv7-v0.17.1.8.tar.bz2, 83f2d8fd32f17b1f6669736015ad25e613987e69c8b052600ac9b8942370ba19 +monero-android-armv8-v0.17.1.8.tar.bz2, 1598b73ac35e8c7f35a60cf4afc93d915954e0a3939d5d81ec040d3294eda162 +monero-android-armv7-v0.17.1.8.tar.bz2, 0ce30e0882dbdf4fd12d29c556bd805c1ff6e7012a9f028a742726a6e57374a6 +monero-freebsd-x64-v0.17.1.8.tar.bz2, 2911c3b605262edaa8e634067c2ba04069990d2bb668b990bfd1a5c35858aaf3 +``` + +A GPG-signed list of the hashes is at [https://getmonero.org/downloads/hashes.txt]({{ site.baseurl_root }}/downloads/hashes.txt) and should be treated as canonical, with the signature checked against the appropriate GPG key in the source code (in /utils/gpg_keys). To ensure that the files you download are those originally posted by the maintainers, you should both check that the hashes of your files match those on the signed list, and that the signature on the list is valid. + +Two guides are available to guide you through the verification process: [Verify binaries on Windows (beginner)]({{ site.baseurl }}/resources/user-guides/verification-windows-beginner.html) and [Verify binaries on Linux, Mac, or Windows command line (advanced)]({{ site.baseurl }}/resources/user-guides/verification-allos-advanced.html). diff --git a/_posts/2020-12-30-monero-GUI-0.17.1.8-released.md b/_posts/2020-12-30-monero-GUI-0.17.1.8-released.md new file mode 100644 index 00000000..31b4f9a5 --- /dev/null +++ b/_posts/2020-12-30-monero-GUI-0.17.1.8-released.md @@ -0,0 +1,60 @@ +--- +layout: post +title: "Monero GUI 0.17.1.8 'Oxygen Orion' released" +summary: Point release containing mitigations against the ongoing memory exhaustion attack +tags: [releases] +author: selsta +image: /blog/assets/2020-09-17-monero-0.17-released/oxygen-orion.png +--- + +
+ +
+ +# Overview + +This is the v0.17.1.8 minor point release of the Monero GUI software. This is a recommended release that contains mitigations against the ongoing memory exhaustion attack. + +[The latest CLI release notes can be found on the precedent blog post]({{ site.baseurl_root }}/2020/12/30/monero-0.17.1.8-released.html) + +Some highlights of this minor release are: + +- Update monero submodule to v0.17.1.8 +- UI tweaks to LineEdit component +- Minor bug fixes + +The complete list of changes is [available on GitHub](https://github.com/monero-project/monero-gui/compare/v0.17.1.6...v0.17.1.8), along with [the source code](https://github.com/monero-project/monero-gui/tree/v0.17.1.8). + +# Contributors for this Release + +This release was the direct result of 3 people who worked, largely unpaid and altruistically, to put out 12 commits containing 99 new lines of code. We'd like to thank them very much for their time and effort. In no particular order they are: + +- xiphon +- Snipa +- selsta + +# Download + +The new binaries can be downloaded from the [Downloads page]({{ site.baseurl }}/downloads/#gui) or from the direct links below. + +- [Windows, 64-bit](https://downloads.getmonero.org/gui/monero-gui-win-x64-v0.17.1.8.zip) +- [Windows, 64-bit (Installer)](https://downloads.getmonero.org/gui/monero-gui-install-win-x64-v0.17.1.8.exe) +- [macOS, 64-bit](https://downloads.getmonero.org/gui/monero-gui-mac-x64-v0.17.1.8.dmg) +- [Linux, 64-bit](https://downloads.getmonero.org/gui/monero-gui-linux-x64-v0.17.1.8.tar.bz2) + +A complete guide for the GUI wallet is included in the archives, but [an online version is available](https://github.com/monero-ecosystem/monero-GUI-guide/blob/master/monero-GUI-guide.md). + +# Download Hashes + +If you would like to verify that you have downloaded the correct file, please use the following SHA256 hashes: + +``` +monero-gui-win-x64-v0.17.1.8.zip, 0c4ce3953824e6e65e2913fb1cb246ebe2742386821d2b92b4a6b6251c66f901 +monero-gui-install-win-x64-v0.17.1.8.exe, 81dcefcf42127101568357f56afdbe0c92d1f8b153dff09ae2d062ba96579f4e +monero-gui-mac-x64-v0.17.1.8.dmg, f9ad5567e6e1e4a88213190cbde6d974265640438e9f2de41ce0d4839cb021f4 +monero-gui-linux-x64-v0.17.1.8.tar.bz2, b9ea5890033a3d67f14abe401c223c5b33947689abaeacf9905e57b811840853 +``` + +A GPG-signed list of the hashes is at [https://getmonero.org/downloads/hashes.txt]({{ site.baseurl_root }}/downloads/hashes.txt) and should be treated as canonical, with the signature checked against the appropriate GPG key in the source code (in /utils/gpg_keys). To ensure that the files you download are those originally posted by the maintainers, you should both check that the hashes of your files match those on the signed list, and that the signature on the list is valid. + +Two guides are available to guide you through the verification process: [Verify binaries on Windows (beginner)]({{ site.baseurl }}/resources/user-guides/verification-windows-beginner.html) and [Verify binaries on Linux, Mac, or Windows command line (advanced)]({{ site.baseurl }}/resources/user-guides/verification-allos-advanced.html).