Bitcoin Core (Bitcoin-Qt) 0.9.1 released - update required

[theymos]

If you are using the graphical version of 0.9.0 on any platform, you must update immediately. Download here. If you can't update immediately, shut down Bitcoin until you can. If you ever used the payment protocol (you clicked a bitcoin: link and saw a green box in Bitcoin Core's send dialog), then you should consider your wallet to be compromised. Carefully generate an entirely new wallet (not just a new address) and send all of your bitcoins there. Do not delete your old wallet.

If you are using any other version of Bitcoin-Qt/Bitcoin Core, including bitcoind 0.9.0, you are vulnerable only if the rpcssl command-line option is set. If it is not, then no immediate action is required. If it is, and if an attacker could have possibly communicated with the RPC port, then you should consider your wallet to be compromised.

This vulnerability is caused by a critical bug in the OpenSSL library used by Bitcoin Core. Successfully attacking Bitcoin Core by means of this bug seems to be difficult in most cases, and it seems at this point that even successful attacks may be limited, but I recommend taking the above actions just in case.

If you are using a binary version of Bitcoin Core obtained from bitcoin.org or SourceForge, then updating your system's version of OpenSSL will not help. OpenSSL is packaged with the binary on all platforms.

Download 0.9.1
Announcement

Other software (including other wallet software) may also be affected by this bug. OpenSSL is extremely common.

[1715168616]

1715168616

[1715168616]

1715168616

[alani123]

If you ever used the payment protocol (you clicked a bitcoin: link and saw a green box in Bitcoin Core's send dialog), then you should consider your wallet to be compromised.

This vulnerability is caused by a critical bug in the OpenSSL library used by Bitcoin Core. Successfully attacking Bitcoin Core by means of this bug seems to be difficult in most cases, and it seems at this point that even successful attacks may be limited, but I recommend taking the above actions just in case.

I shivered for a monent. Next time try mentioning the good news first.

Thanks for the heads up!

[CoinLearn]

This is incredible... who found the bug ? Wladimir ?




_______________________________________________________________________________ _____________
www.CoinLearn.org - Learn and Earn Free Bitcoins

[firejuan]

The article I read and this subsequent website states the Heart bleed bug has been around since 12-11.

http://heartbleed.com/

This is incredible... who found the bug ? Wladimir ?

[poordeveloper]

If you ever used the payment protocol (you clicked a bitcoin: link and saw a green box in Bitcoin Core's send dialog), then you should consider your wallet to be compromised.

Does ever mean in the 0.9.0 version, or at any point of time?

[mammix2]

If you ever used the payment protocol (you clicked a bitcoin: link and saw a green box in Bitcoin Core's send dialog), then you should consider your wallet to be compromised.

This vulnerability is caused by a critical bug in the OpenSSL library used by Bitcoin Core. Successfully attacking Bitcoin Core by means of this bug seems to be difficult in most cases, and it seems at this point that even successful attacks may be limited, but I recommend taking the above actions just in case.

I shivered for a monent. Next time try mentioning the good news first.

Thanks for the heads up!

Exactly, we're not talking about a few £ or $ here and there...LOL!

[Joshuar]

This applies to Multibit Bitcoin wallets? Multibit vs 0.5.17?

[theymos]

Does ever mean in the 0.9.0 version, or at any point of time?

The payment protocol only exists in 0.9.

[knight22]

Do I need to uninstall 0.9.0?

[awesomeami]

This is incredible... who found the bug ? Wladimir ?

https://bitcointalk.org/index.php?topic=561923.msg6133060#msg6133060

Do I need to uninstall 0.9.0?

Nope.
Just QUIT NOW and
https://bitcointalk.org/index.php?topic=562388.msg6132859#msg6132859

[BittBurger]

you must update immediately. Download here.

Theymos -

I have a number of people I need to tell to update.

Can I tell them to just go to bitcoin.org and update yet?

(the front end website I mean)

Updte:  Looks like here has 0.9.1?  https://bitcoin.org/en/download

-B-

[awesomeami]

Theymos -

I have a number of people I need to tell to update.

Can I tell them to just go to bitcoin.org and update yet?

-B-

What about to use ALERT
https://en.bitcoin.it/wiki/Alerts

[poordeveloper]

Theymos -

I have a number of people I need to tell to update.

Can I tell them to just go to bitcoin.org and update yet?

-B-

What about to use ALERT
https://en.bitcoin.it/wiki/Alerts

My exact thoughts. I think this is serious enough.

[alani123]

Theymos -

I have a number of people I need to tell to update.

Can I tell them to just go to bitcoin.org and update yet?

-B-

What about to use ALERT
https://en.bitcoin.it/wiki/Alerts

Maybe he's talking about non techincal users. To answer his original question, YES the website seems to have updated the download links to the latest version.

https://bitcoin.org/en/download

[BittBurger]

Exactly.  Thanks.

[awesomeami]

Sure. Thats good & OK.
But we should(??) alarm all users ASAP to at least shutdown bitcoin core and don't use it and upg. ASAP.

[bronan]

the new client crashes pretty nasty
ok found its my antivirus trying to avoid another bitcoin virus
people who use windows make sure when the program crashes to set any antivirus to allow the data
its a false positive

[awesomeami]

the new client crashes pretty nasty

pls what OS do u use?
No crashes with 0.9.0??

[/dev/null]

Edit: using electrum is safe.

[madmadmax]

That's exactly what all those three letter organizations doing within the Bitcoin Foundation, introducing vulnerabilities to the protocol.