P2Pool v4.8 released with security fixes

SChernykh¹ has released P2Pool² version 4.8³ with important security fixes, new features, and various other bugfixes:

A number of security issues were found and fixed in the console commands code. It is recommended to update to v4.8. [..] Special thanks to Low-power⁴ for contributions to this release.

Changes overview

* Console: limit access via local TCP port
* Console: don't listen on a local TCP port when local API is not enabled
* Console: don't let random unformatted data end up in the log
* Added --stratum-ban-time option
* Tari: added "block push via gRPC" functionality
* TCPServer: fixed SOCKS5 error checking logic
* Fixed host ping time calculation when using SOCKS5 proxy

The full list of changes since v4.7 is available on Github⁵.

Before using the software, you should verify the SHA256 sums with SChernykh’s GPG key⁶.

The README⁷ has valuable information about features, defaults, how pool shares work, build instructions and a short mining guide. If you need assistance, read the FAQ⁸ and join the project’s IRC channels⁹.

Note that it is strongly recommended to synchronize your system clock before you start mining.

This is an ongoing story and the report will be updated when new information is available.