Ethereum Blog

Security Alert – cpp-ethereum’s account unlocking problem not yet fixed [Now fixed]

Introduction

user

Christian Reitwiessner


LATEST POSTS

An Update on Integrating Zcash on Ethereum (ZoE) 19th January, 2017

zkSNARKs in a nutshell 05th December, 2016

Uncategorized

Security Alert – cpp-ethereum’s account unlocking problem not yet fixed [Now fixed]

Posted on .

Affected configurations: cpp-ethereum (eth, AlethZero, …) version 1.2.0 up to 1.2.6
Note: Neither “geth” nor “Mist” nor the “Ethereum Wallet” (unless explicitly used together with cpp-ethereum) are affected by this, they lock accounts correctly again.

This is just a quick head’s up that cpp-ethereum’s security issue around account security is not yet properly fixed. The fix that is part of cpp-ethereum version 1.2.6 did not decrease the security, but it also did not fix the bug completely. We will work towards another bugfix release and announce it once the fix is properly verified.

A fix is now available: Release 1.2.7 – https://github.com/ethereum/webthree-umbrella/releases/tag/v1.2.7

profile

Christian Reitwiessner

There are no comments.

Leave a Reply

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>

View Comments (0) ...
Navigation