Veil Core mandatory wallet update v1.4.5 is available
A MANDATORY upate has been released to fix a potential security vulnerability, where an attacker may be able to relay a valid block and mark it as invalid, thereby stalling a node that runs old code.
This MANDATORY update 1.4.5.0 Veil core wallet update — download from Github fixes a potential vulnerability by refusing relayed mutations of fields that the block hash does not cover.
After the PoW update (from X16RT to the current three mining algorithms), stake type, the proof-of-full-node fields, pre-update hashVeilData on stake blocks, and the post-update accumulator body can be rewritten without moving the hash.
This is fixed by rejecting those copies as a possible corruption before storage, and only connecting the copy that this call stored.
We wish to thank the people involved in coding, testing, and reviewing this wallet, especially ohcee.
Updating the wallet software is as simple as replacing the program files veild, veil-qt, veil-cli, …. There is no need to touch your data files. Normal data backup procedures apply.
If you have not already updated to the previous v1.4.4.0 release you will be pleased to discover a great many improvements to the wallet. (See the News post about v1.4.4.0.)
Download Veil Core wallet v1.4.5.0 and read the full release notes here. Check our Veil support article for how to update your Veil wallet.
For any assistance, join the Veil community on Discord or refer to the Veil Knowledgebase at https://veil.freshdesk.com/!