[110752] trunk/dports/finance/bitcoin/Portfile

easieste at macports.org easieste at macports.org
Thu Sep 5 01:13:00 PDT 2013


Revision: 110752
          https://trac.macports.org/changeset/110752
Author:   easieste at macports.org
Date:     2013-09-05 01:13:00 -0700 (Thu, 05 Sep 2013)
Log Message:
-----------
Upgrade to finance/bitcoin-0.8.4.

0.8.4 Release notes
===================

Security issues
---------------

An attacker could send a series of messages that resulted in
an integer division-by-zero error in the Bloom Filter handling
code, causing the Bitcoin-Qt or bitcoind process to crash.
Bloom filters were introduced with version 0.8, so versions 0.8.0
through 0.8.3 are vulnerable to this critical denial-of-service attack.

A constant-time algorithm is now used to check RPC password
guess attempts; fixes https://github.com/bitcoin/bitcoin/issues/2838
(CVE-2013-4165)

Implement a better fix for the fill-memory-with-orphan-transactions
attack that was fixed in 0.8.3. See
https://bitslog.wordpress.com/2013/07/18/buggy-cve-2013-4627-patch-open-new-vectors-of-attack/
for a description of the weaknesses of the previous fix.
(CVE-2013-4627)

Modified Paths:
--------------
    trunk/dports/finance/bitcoin/Portfile

Modified: trunk/dports/finance/bitcoin/Portfile
===================================================================
--- trunk/dports/finance/bitcoin/Portfile	2013-09-05 05:25:15 UTC (rev 110751)
+++ trunk/dports/finance/bitcoin/Portfile	2013-09-05 08:13:00 UTC (rev 110752)
@@ -4,8 +4,8 @@
 PortSystem          1.0
 name                bitcoin
 categories          finance crypto
-version             0.8.3
-revision            1
+version             0.8.4
+revision            0
 platforms           darwin
 license             MIT
 maintainers         yopmail.com:sami.laine easieste openmaintainer
@@ -18,9 +18,9 @@
 homepage            http://www.bitcoin.org/
 master_sites        sourceforge
 distname            ${name}-${version}-linux
-checksums           md5     1f0e1e55be710e3f9aaee4a025b2cb7e \
-                    sha1    78f9fc2d5f2b225846bf12803b22c4a2b3e2d1ba \
-                    rmd160  e9329f89a47697c546cd2ff30ce2cefb46caea42
+checksums           md5     f16f5e578972ce69ddf07787922a06a0 \
+                    sha1    a86003bca1461e8d68c36fee75230899640d3613 \
+                    rmd160  7a01acc01e8207de3515ace81c1b59b77e5e707f
 
 depends_lib         port:boost \
                     port:openssl \
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.macosforge.org/pipermail/macports-changes/attachments/20130905/8c59ed9d/attachment.html>


More information about the macports-changes mailing list