Delivery-date: Thu, 19 Sep 2024 05:37:23 -0700
Sender: bitcoindev@googlegroups.com
Date: Thu, 19 Sep 2024 01:12:58 -0700 (PDT)
From: Antoine Riard <antoine.riard@gmail.com>
To: Bitcoin Development Mailing List <bitcoindev@googlegroups.com>
Message-Id: <950859e2-e548-4361-8e5b-2595c0ed7a43n@googlegroups.com>
In-Reply-To: <WhFGS_EOQtdGWTKD1oqSujp1GW-v_ZUJemlNePPGaGBgzpmu6ThpqLwJpUVei85OiMu_xxjEzt_SeOWY7547C72BVISLENOd_qrdCwPajgk=@protonmail.com>
References: <WhFGS_EOQtdGWTKD1oqSujp1GW-v_ZUJemlNePPGaGBgzpmu6ThpqLwJpUVei85OiMu_xxjEzt_SeOWY7547C72BVISLENOd_qrdCwPajgk=@protonmail.com>
Subject: [bitcoindev] Re: Public disclosure of 1 vulnerability affecting
 Bitcoin Core <24.0.1
MIME-Version: 1.0
Content-Type: multipart/mixed; 
	boundary="----=_Part_11462_849771626.1726733578755"
Precedence: list
Mailing-list: list bitcoindev@googlegroups.com; contact bitcoindev+owners@googlegroups.com

------=_Part_11462_849771626.1726733578755
Content-Type: multipart/alternative; 
	boundary="----=_Part_11463_472927724.1726733578755"

------=_Part_11463_472927724.1726733578755
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hi Darosior,

Thanks for writing the report.

"With that, Bitcoin Core no longer relies on having checkpoints to protect=
=20
against any known attacks."

I think it's good time to get that back on track:
https://github.com/bitcoin/bitcoin/pull/25725

As of commit ab0b5706b, it sounds checkpoints are still there.

Best,
Antoine (the other one)
ots hash: e4888dbb9983b541649f66bb23665e25fa22c47deeec5a294cf6e7624911cd07

Le jeudi 19 septembre 2024 =C3=A0 08:27:23 UTC+1, Antoine Poinsot a =C3=A9c=
rit :

> Hi everyone,
>
> Today we are releasing 1 security advisory for the Bitcoin Core project.=
=20
> This vulnerability affects versions of Bitcoin Core before (and not=20
> including) 24.0.1.
>
> The details for this vulnerability are available at=20
> https://bitcoincore.org/en/2024/09/18/disclose-headers-oom.
>
> This is part of the gradual adoption by the project of a new vulnerabilit=
y=20
> disclosure policy. The policy is available at=20
> https://bitcoincore.org/en/security-advisories/#policy. We will follow up=
=20
> next month with vulnerabilities affecting Bitcoin Core versions before (a=
nd=20
> not including) 25.0, if any.
>
> Antoine Poinsot
>

--=20
You received this message because you are subscribed to the Google Groups "=
Bitcoin Development Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to bitcoindev+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/=
bitcoindev/950859e2-e548-4361-8e5b-2595c0ed7a43n%40googlegroups.com.

------=_Part_11463_472927724.1726733578755
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hi Darosior,<br /><br />Thanks for writing the report.<br /><br />"With tha=
t, Bitcoin Core no longer relies on having checkpoints to protect against a=
ny known attacks."<br /><br />I think it's good time to get that back on tr=
ack:<br />https://github.com/bitcoin/bitcoin/pull/25725<br /><br />As of co=
mmit ab0b5706b, it sounds checkpoints are still there.<br /><br />Best,<br =
/>Antoine (the other one)<br />ots hash: e4888dbb9983b541649f66bb23665e25fa=
22c47deeec5a294cf6e7624911cd07<br /><br /><div class=3D"gmail_quote"><div d=
ir=3D"auto" class=3D"gmail_attr">Le jeudi 19 septembre 2024 =C3=A0 08:27:23=
 UTC+1, Antoine Poinsot a =C3=A9crit=C2=A0:<br/></div><blockquote class=3D"=
gmail_quote" style=3D"margin: 0 0 0 0.8ex; border-left: 1px solid rgb(204, =
204, 204); padding-left: 1ex;">Hi everyone,
<br>
<br>Today we are releasing 1 security advisory for the Bitcoin Core project=
. This vulnerability affects versions of Bitcoin Core before (and not inclu=
ding) 24.0.1.
<br>
<br>The details for this vulnerability are available at <a href=3D"https://=
bitcoincore.org/en/2024/09/18/disclose-headers-oom" target=3D"_blank" rel=
=3D"nofollow" data-saferedirecturl=3D"https://www.google.com/url?hl=3Dfr&am=
p;q=3Dhttps://bitcoincore.org/en/2024/09/18/disclose-headers-oom&amp;source=
=3Dgmail&amp;ust=3D1726818482230000&amp;usg=3DAOvVaw1BJzRNP4tEcM851k20aKGu"=
>https://bitcoincore.org/en/2024/09/18/disclose-headers-oom</a>.
<br>
<br>This is part of the gradual adoption by the project of a new vulnerabil=
ity disclosure policy. The policy is available at <a href=3D"https://bitcoi=
ncore.org/en/security-advisories/#policy" target=3D"_blank" rel=3D"nofollow=
" data-saferedirecturl=3D"https://www.google.com/url?hl=3Dfr&amp;q=3Dhttps:=
//bitcoincore.org/en/security-advisories/%23policy&amp;source=3Dgmail&amp;u=
st=3D1726818482230000&amp;usg=3DAOvVaw0CcRt0WgDJeM3A9srnlS8x">https://bitco=
incore.org/en/security-advisories/#policy</a>. We will follow up next month=
 with vulnerabilities affecting Bitcoin Core versions before (and not inclu=
ding) 25.0, if any.
<br>
<br>Antoine Poinsot
<br></blockquote></div>

<p></p>

-- <br />
You received this message because you are subscribed to the Google Groups &=
quot;Bitcoin Development Mailing List&quot; group.<br />
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to <a href=3D"mailto:bitcoindev+unsubscribe@googlegroups.com">bitcoind=
ev+unsubscribe@googlegroups.com</a>.<br />
To view this discussion on the web visit <a href=3D"https://groups.google.c=
om/d/msgid/bitcoindev/950859e2-e548-4361-8e5b-2595c0ed7a43n%40googlegroups.=
com?utm_medium=3Demail&utm_source=3Dfooter">https://groups.google.com/d/msg=
id/bitcoindev/950859e2-e548-4361-8e5b-2595c0ed7a43n%40googlegroups.com</a>.=
<br />

------=_Part_11463_472927724.1726733578755--

------=_Part_11462_849771626.1726733578755--