GlcoinCore/clboss
1
0
Fork 0
mirror of https://github.com/ZmnSCPxj/clboss.git synced 2026-08-13 12:33:20 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 5

update version and CHANGELOG for v0.16.2

Browse source 
Bump AC_INIT to 0.16.2 and add the CHANGELOG entry for the FundsMover
self-payment amount-verification fix. (#322)
This commit is contained in:
Ken Sedgwick 2026-08-11 15:22:48 -07:00
parent 3c8dc3c16d
commit 9fb9115dd0
No known key found for this signature in database
GPG key ID: DBD2AF0849D711A9
2 changed files with 13 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

12
CHANGELOG.md
View file

@ -4,6 +4,18 @@ All notable changes to this project will be documented in this file.
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
## [0.16.2] - Unreleased
### Security
- Fixed a theft vector in `FundsMover` self-payments: the returning
HTLC was settled by matching only payment hash and payment secret,
without checking the amount. The last-hop peer relays our onion
(and thus the secret) intact but chooses the offered amount, so it
could settle a reduced amount, learn the preimage, and claim the
full amount upstream. The claim now requires the exact constructed
amount before the preimage is released. ([#322])
## [0.16.1] - 2026-08-06: "The Types That Bind"
### Fixed

2
configure.ac
View file

@ -2,7 +2,7 @@
# Process this file with autoconf to produce a configure script.
AC_PREREQ([2.69])
AC_INIT([clboss], [0.16.1], [ken@bonsai.com])
AC_INIT([clboss], [0.16.2], [ken@bonsai.com])
AC_CONFIG_AUX_DIR([auxdir])
AM_INIT_AUTOMAKE([subdir-objects tar-ustar])
AC_CONFIG_SRCDIR([main.cpp])