Skip to content

Newsletters: add 405 (2026-05-15)#2752

Open
bitschmidty wants to merge 17 commits into
bitcoinops:masterfrom
bitschmidty:2026-05-15-newsletter
Open

Newsletters: add 405 (2026-05-15)#2752
bitschmidty wants to merge 17 commits into
bitcoinops:masterfrom
bitschmidty:2026-05-15-newsletter

Conversation

@bitschmidty bitschmidty self-assigned this May 11, 2026
Comment thread _posts/en/newsletters/2026-05-15-newsletter.md Outdated
bitschmidty and others added 2 commits May 13, 2026 13:41
Co-authored-by: Mike Schmidt <schmidty@gmail.com>
Comment thread _posts/en/newsletters/2026-05-15-newsletter.md Outdated
Comment thread _posts/en/newsletters/2026-05-15-newsletter.md Outdated
Comment thread _posts/en/newsletters/2026-05-15-newsletter.md Outdated
@murchandamus
Copy link
Copy Markdown
Collaborator

Oh. I just see now that BIP322 was on the todo-list. Sorry about that.

@bitschmidty
Copy link
Copy Markdown
Contributor Author

Pushed a few commits to fix the build.

Dropping the 322 news item, since its already merged and we are covering it in the notable code segment.

completed. For specially-crafted invalid blocks, it was possible for this data
to be destroyed while it was still being accessed by background threads.

An attacker able to mine a valid block could specially craft it to crash a
Copy link
Copy Markdown
Contributor

@jirijakes jirijakes May 15, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I know you want to say that the attacker needs to have enough PoW (“able to mine”) but this makes it sound like the specially-crafted block is valid.

Suggested change
An attacker able to mine a valid block could specially craft it to crash a
An attacker with sufficient proof of work could, using the specially-crafted invalid block, crash a


- [Bitcoin Core #35209][] now constructs the `txsdata` vector before the
`CCheckQueueControl` object, addressing the root cause of
[CVE-2024-52911][topic cves] (see the news section above). Since C++ destroys
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
[CVE-2024-52911][topic cves] (see the news section above). Since C++ destroys
[CVE-2024-52911][topic cve disclosure] (see the news section above). Since C++ destroys

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

7 participants