Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 505096 - net-p2p/bitcoin{d,-qt}-0.9.2 version bump
Summary: net-p2p/bitcoin{d,-qt}-0.9.2 version bump
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal enhancement (vote)
Assignee: Anthony Basile
URL: https://github.com/bitcoin/bitcoin/bl...
Whiteboard:
Keywords:
: 505530 (view as bug list)
Depends on: 505320 506184
Blocks:
  Show dependency tree
 
Reported: 2014-03-19 16:21 UTC by Eric Chatellier
Modified: 2014-07-30 14:13 UTC (History)
8 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Eric Chatellier 2014-03-19 16:21:59 UTC
Bitcoin QT (and bitcoind) has just been released : https://bitcointalk.org/index.php?topic=522014.0

Reproducible: Always
Comment 1 Luke-Jr 2014-03-19 21:21:41 UTC
Isn't there a policy of waiting at least a week before filing a bug for bumps? :P
Comment 2 Alex Xu (Hello71) 2014-03-19 21:27:32 UTC
It's a stupid policy, and I've gotten yelled at for warning people, not warning people, and filing such bugs. I just don't bother at this point.
Comment 3 Alex Xu (Hello71) 2014-03-19 21:27:59 UTC
And it's never been a policy, just that a certain subset (relatively small) of maintainers go all up in arms about it.
Comment 4 Hanno Böck gentoo-dev 2014-03-21 10:32:48 UTC
This should probably go to security, as it fixes an important vulnerability. From release notes:
Transaction malleability-related fixes
This release contains a few fixes for transaction ID (TXID) malleability issues:
-nospendzeroconfchange command-line option, to avoid spending zero-confirmation change
IsStandard() transaction rules tightened to prevent relaying and mining of mutated transactions
Additional information in listtransactions/gettransaction output to report wallet transactions that conflict with each other because they spend the same outputs.
Bug fixes to the getbalance/listaccounts RPC commands, which would report incorrect balances for double-spent (or mutated) transactions.
New option: -zapwallettxes to rebuild the wallet's transaction information
Comment 5 Luke-Jr 2014-03-21 12:34:01 UTC
Um, there are/were no vulnerabilities in net-p2p/bitcoin* related to transaction malleability.
Comment 6 Francesco Turco 2014-04-24 14:45:42 UTC
0.9.1 is out: https://bitcoin.org/en/release/v0.9.1
Comment 7 Luke-Jr 2014-04-24 14:52:06 UTC
(In reply to Francesco Turco from comment #6)
> 0.9.1 is out: https://bitcoin.org/en/release/v0.9.1

With zero changes. Though maybe we should bump the version just to avoid alerts.
Comment 8 Francesco Turco 2014-06-19 17:18:21 UTC
Three days ago version 0.9.2 has been released: https://bitcoin.org/en/release/v0.9.2
Comment 9 Anthony Basile gentoo-dev 2014-06-19 18:31:53 UTC
(In reply to Francesco Turco from comment #8)
> Three days ago version 0.9.2 has been released:
> https://bitcoin.org/en/release/v0.9.2

Luke-jr bump?
Comment 10 Luke-Jr 2014-06-19 19:13:44 UTC
(In reply to Anthony Basile from comment #9)
> (In reply to Francesco Turco from comment #8)
> > Three days ago version 0.9.2 has been released:
> > https://bitcoin.org/en/release/v0.9.2
> 
> Luke-jr bump?

Bumped in overlay, still waiting on LevelDB for main tree.. :/

P.S. There's a 0.9.2.1 coming through the pipeline too.
Comment 11 Alex Xu (Hello71) 2014-06-19 21:13:42 UTC
(In reply to Luke-Jr from comment #10)
> (In reply to Anthony Basile from comment #9)
> > (In reply to Francesco Turco from comment #8)
> > > Three days ago version 0.9.2 has been released:
> > > https://bitcoin.org/en/release/v0.9.2
> > 
> > Luke-jr bump?
> 
> Bumped in overlay, still waiting on LevelDB for main tree.. :/

bug?
Comment 12 Luke-Jr 2014-06-19 21:15:53 UTC
Bug 506184 and bug 505320.
Comment 13 Alex Xu (Hello71) 2014-06-19 21:17:42 UTC
blueness, is there even a vulnerability applicable to net-p2p/*?
Comment 14 Anthony Basile gentoo-dev 2014-06-30 01:18:23 UTC
(In reply to Alex Xu (Hello71) from comment #13)
> blueness, is there even a vulnerability applicable to net-p2p/*?

I'm putting some pressure on leveldb to get those patches in.
Comment 15 Manuel Rüger (RETIRED) gentoo-dev 2014-07-16 00:33:21 UTC
*** Bug 505530 has been marked as a duplicate of this bug. ***
Comment 16 Anthony Basile gentoo-dev 2014-07-29 17:41:52 UTC
I added bitcoin{d,-qt}-0.9.2.1 from the bitcoin overlay, master branch.  I also added the virtual/bitcoin-leveldb although I really think that might be overkill.  Was there no other way to do that by a DEPEND string?

Note bitcoin-qt-0.9.2.1 added the following locales which are not in profiles/desc/linguas.desc.  I was not able to identify them to add them.  Please let me know what these linguas are.  Some of them look wrong so please give me a source:

   linguas_ach
   linguas_cmn
   linguas_es_DO
   linguas_es_UY
   linguas_kk_KZ
   linguas_pam
   linguas_sah
   linguas_uz@Cyrl
Comment 17 Luke-Jr 2014-07-29 18:59:01 UTC
(In reply to Anthony Basile from comment #16)
> I added bitcoin{d,-qt}-0.9.2.1 from the bitcoin overlay, master branch.  I
> also added the virtual/bitcoin-leveldb although I really think that might be
> overkill.  Was there no other way to do that by a DEPEND string?

It's easier to update this way...

> Note bitcoin-qt-0.9.2.1 added the following locales which are not in
> profiles/desc/linguas.desc.  I was not able to identify them to add them. 
> Please let me know what these linguas are.  Some of them look wrong so
> please give me a source:
> 
>    linguas_ach
>    linguas_cmn
>    linguas_es_DO
>    linguas_es_UY
>    linguas_kk_KZ
>    linguas_pam
>    linguas_sah
>    linguas_uz@Cyrl

ach = Acoli
cmn = Chinese (Mandarin)
es_DO = Spanish (Dominican Republic)
es_UY = Spanish (Uruguay)
kk_KZ = Kazakh (Kazakhstan)
pam = Kapampangan
sah = Sakha (Yakut)
uz@Cyrl = Uzbek (Cyrillic)
Comment 18 Anthony Basile gentoo-dev 2014-07-29 19:37:58 UTC
(In reply to Luke-Jr from comment #17)
> (In reply to Anthony Basile from comment #16)
> > I added bitcoin{d,-qt}-0.9.2.1 from the bitcoin overlay, master branch.  I
> > also added the virtual/bitcoin-leveldb although I really think that might be
> > overkill.  Was there no other way to do that by a DEPEND string?
> 
> It's easier to update this way...
> 
> > Note bitcoin-qt-0.9.2.1 added the following locales which are not in
> > profiles/desc/linguas.desc.  I was not able to identify them to add them. 
> > Please let me know what these linguas are.  Some of them look wrong so
> > please give me a source:
> > 
> >    linguas_ach
> >    linguas_cmn
> >    linguas_es_DO
> >    linguas_es_UY
> >    linguas_kk_KZ
> >    linguas_pam
> >    linguas_sah
> >    linguas_uz@Cyrl
> 
> ach = Acoli
> cmn = Chinese (Mandarin)
> es_DO = Spanish (Dominican Republic)
> es_UY = Spanish (Uruguay)
> kk_KZ = Kazakh (Kazakhstan)
> pam = Kapampangan
> sah = Sakha (Yakut)
> uz@Cyrl = Uzbek (Cyrillic)

Thanks!  We're done.