|
| 1 | +# 0.0.120 - Jan 17, 2024 - "Blinded Fuzzers" |
| 2 | + |
| 3 | +## API Updates |
| 4 | + * The `PeerManager` bound on `UtxoLookup` was removed entirely. This enables |
| 5 | + use of `UtxoLookup` in cases broken in 0.0.119 by #2773 (#2822). |
| 6 | + * LDK now exposes and fully implements the route blinding feature (#2812). |
| 7 | + * The `lightning-transaction-sync` crate no longer relies on system time |
| 8 | + without the `time` feature (#2799, #2817). |
| 9 | + * `lightning::onion_message`'s module layout has changed (#2821). |
| 10 | + * `Event::ChannelClosed` now includes the `channel_funding_txo` (#2800). |
| 11 | + * `CandidateRouteHop` variants were destructured into individual structs, |
| 12 | + hiding some fields which were not generally consumable (#2802). |
| 13 | + |
| 14 | +## Bug Fixes |
| 15 | + * Fixed a rare issue where `lightning-net-tokio` may not fully flush its send |
| 16 | + buffer, leading to connection hangs (#2832). |
| 17 | + * Fixed a panic which may occur when connecting to a peer if we opened a second |
| 18 | + channel with that peer while they were disconnected (#2808). |
| 19 | + * Retries for a payment which previously failed in a blinded path will now |
| 20 | + always use an alternative blinded path (#2818). |
| 21 | + * `Feature`'s `Eq` and `Hash` implementation now ignore dummy bytes (#2808). |
| 22 | + * Some missing `DiscardFunding` or `ChannelClosed` events are now generated in |
| 23 | + rare funding-related failures (#2809). |
| 24 | + * Fixed a privacy issue in blinded path generation where the real |
| 25 | + `cltv_expiry_delta` would be exposed to senders (#2831). |
| 26 | + |
| 27 | +## Security |
| 28 | +0.0.120 fixes a denial-of-service vulnerability which is reachable from |
| 29 | +untrusted input from peers if the `UserConfig::manually_accept_inbound_channels` |
| 30 | +option is enabled. |
| 31 | + * A peer that sent an `open_channel` message with the `channel_type` field |
| 32 | + unfilled would trigger a reachable `unwrap` since LDK 0.0.117 (#2808). |
| 33 | + * In protocols where a funding output is shared with our counterparty before |
| 34 | + it is given to LDK, a malicious peer could have caused a reachable panic |
| 35 | + by reusing the same funding info in (#2809). |
| 36 | + |
| 37 | +In total, this release features 67 files changed, 3016 insertions, 2473 |
| 38 | +deletions in 79 commits from 9 authors, in alphabetical order: |
| 39 | + * Elias Rohrer |
| 40 | + * Jeffrey Czyz |
| 41 | + * José A.P |
| 42 | + * Matt Corallo |
| 43 | + * Tibo-lg |
| 44 | + * Valentine Wallace |
| 45 | + * benthecarman |
| 46 | + * optout |
| 47 | + * shuoer86 |
| 48 | + |
1 | 49 | # 0.0.119 - Dec 15, 2023 - "Spring Cleaning for Christmas" |
2 | 50 |
|
3 | 51 | ## API Updates |
|
0 commit comments