Weekly Edition for Thursday, Jul 14

Newsletters

Releases

project release date
BTC Pay Server v1.6.1
This fix a critical issue introduced by 1.6.0. If you are using altcoins integration, you need to update urgently as some change rate may be inverted for some pairs.

Bug fixes:

  • Fix stack overflow if ripio rate provider is unavailable @NicolasDorier
  • Fix: For some asset pair the kraken rate was inverted (#3957) @NicolasDorier
2022-07-11
BTC Pay Server v1.6.0

In the past six months, we fixed a critical security vulnerability in one of BTCPay's versions. The security vulnerability has been disclosed responsibly, and we granted a bounty to the security researcher who discovered it. As far as we know, this particular vulnerability has not been exploited in the wild as it depends on multiple factors. For security reasons, we will not publicly disclose details yet. Timeframe for public disclosure is 6-12 months. We already have a CVE number reserved for it.

It's very likely that by updating BTCPay Server in the past six months, you've already patched this vulnerability. To be safe, update your instance if you haven't done so in a long time.

New features:

  • Dashboard: Add Lightning balances and easy access to lightning services (#3838) @dennisreimann
  • Dashboard: Add Point Of Sale data (#3897) @dennisreimann @dstrukt
  • Greenfield: Basic API Get and Delete operations for apps (#3894) @bolatovumar
  • Greenfield: Add Lightning balance endpoint (#3887) @dennisreimann
  • Greenfield: Allow excluding unconfirmed UTXOs when creating a new transaction (#3737) @bolatovumar
  • Checkout: Public invoice's receipt (#3612) @Kukks
  • Can disable TLS certificate check for email servers @NicolasDorier
  • Can add sender's name to any field accepting an email destination, for example Nicolas Dorier <blah@example.com> rather than just blah@example.com (#3891) @NicolasDorier
  • Support LNURL Withdraw in payouts (#3709) @Kukks
  • Can send parametized emails based on invoice events (#3611) @Kukks
  • Dashboard: Added toggle button to switch to store default currency (#3752) @SakshamSolanki @dennisreimann
  • Support Lightning node connection string with onion addresses (#3845) @Kukks
  • New rate provider: BUDA a chilean exchange (#3766) @Kukks
  • Add Refunds list to Invoice details page (#3815) @Kukks

Bug fixes:

  • UI: Fix cancel plugin command (#3903) @dennisreimann
  • Crowdfunding: Fix the links for the default Quake sounds (#3745) @dennisreimann
  • UI: Fix nav height issue on mobile devices (#3888) @bolatovumar
  • UI: Fix mark all notifications as seen return URL (#3848) @dennisreimann
  • UI: When disabling a user, then it as an admin, attempting to remove or enable the user would fail while showing success in the UI (#3829 #3832) @rustywave
  • Deleting an admin gives a 500 error, and cannot disable the same user (#3785 #3818) @rustywave
  • Fix some rate providers (#3813) @Kukks
  • Dashboard: Do not display archived invoices in recent invoices (#3783) @dennisreimann
  • Error happening when broadcasting transactions weren't shown in the UI @NicolasDorier
  • If LNURL for standard invoice was disabled, and PoS print view used, the QR code would throw error 404 (#3930) @Kukks

Improvements:

  • Don't show "Set up a Lightning node" when LN is not supported (#3935) @bolatovumar
  • Redirect to invoice details instead of list upon creation (#3936) @bolatovumar
  • Better UI/UX for on-chain send and receive (#3921) @dennisreimann @dstrukt
  • Add refund badge to invoice lists (#3918) @Kukks
  • Creating and editing a payment request now redirect to the payment request list (#3825) @rustywave
  • Crowdfunding: Several UI/UX improvement for the settings (#3708 #3488) @dennisreimann @dstrukt
  • Improve the refund flow (#3715 #3731) @dstrukt @dennisreimann
  • Improve email settings validation and UX (#3891) @NicolasDorier
  • Add spam rate limits for public invoice endpoints (#3782 #3889) @NicolasDorier
  • Greenfield doc: Adding description to speedPolicy parameter (#3877) @ndeet
  • UI: Improvement of Crowdfund & PoS Modal (#3806) @dstrukt @dennisreimann
  • Server Settings: Consolidate Storage and Files (#3863) @dennisreimann
  • Move View action to the Name column in Payouts & Payment Requests (#3873) @dstrukt @dennisreimann
  • UI: Properly report Shopify errors when testing new settings (#3853) @NicolasDorier
  • Mobile header improvements (#3826) @dennisreimann
  • Notification modal improvements (#3784) @dstrukt
  • Improve payouts UI (#3792) @dstrukt @dennisreimann
  • Update language to explicitly request view-only wallet files (b1f62f74cde09d124fe308f5af9e255522add288) @sethforprivacy
  • Open public app views in new tab/window (#3920) @dennisreimann/blah@example.com
2022-07-08
WalletWasabi v2.0.1.2

Summary

PRIVACY IS YOUR ABILITY TO SELECTIVELY REVEAL YOURSELF TO THE WORLD

This release includes a couple of stabilization improvements mostly around network communication, but also adds new features.

  • Fixing the problem when Tor gets stuck with TtlExpired error.
  • Adds RedCoinIsolation feature.
  • Minor improvement in CoinJoin coin selector algorithm.
  • Crash fixes.

Newbie Guide

While setting up Wasabi is straightforward, even a Linux wizard with the longest beard can get stuck on the most basic tasks. Consider taking a look at the How To Use guide.

Advanced Guide

If you want to build Wasabi from source code or update the source code check out these instructions.

From version 1.1.3 Wasabi also introduces reproducible builds: Deterministic Build Guide

Build with .NET 6.0.300.

FAQ

  • Frequently asked questions here.
  • Requirements? x64, Linux, >Win10, >macOS 10.15.

What's Changed

Full Changelog: https://github.com/zkSNACKs/WalletWasabi/compare/v2.0.1.1...v2.0.1.2

2022-07-13

RFC

type rfc # title date status
bip X 179: Remove my email due to spam 2022-07-12 Merged
bip X Promote Draft->Final BIPs: 60 and 64 2022-07-08 Update
bip X Enable secure protocol 2022-07-08 Update
slip slip-0044 slip-0044: add coin 2022-07-13 Merged
slip slip-0044 slip-0044: Add PLCUX 2022-07-12 Merged
slip X Add Omniflix 2022-07-08 Merged