electrum: 3.0.3 -> 3.0.4

From the release notes [1]:

 * Fix a vulnerability caused by Cross-Origin Resource Sharing (CORS)
   in the JSONRPC interface. Previous versions of Electrum are
   vulnerable to port scanning and deanonimization attacks from
   malicious websites. Wallets that are not password-protected are
   vulnerable to theft.

See this [2] for explanation.

[1] https://github.com/spesmilo/electrum/blob/3.0.4/RELEASE-NOTES
[2] https://github.com/spesmilo/electrum/issues/3374
This commit is contained in:
Justin Humm 2018-01-07 02:58:09 +01:00
parent d1c81e29c3
commit 207bf49c8d
No known key found for this signature in database
GPG key ID: 5F24E3BD56617EB2

View file

@ -2,11 +2,11 @@
python3Packages.buildPythonApplication rec {
name = "electrum-${version}";
version = "3.0.3";
version = "3.0.4";
src = fetchurl {
url = "https://download.electrum.org/${version}/Electrum-${version}.tar.gz";
sha256 = "09h3s1mbkliwh8758prbdk3sm19bnma7wy3k10pl9q9fkarbhp75";
sha256 = "03vvxbyci9acss9sfdjcvdp0ny1fvyj29q261lxqr416vvfparjj";
};
propagatedBuildInputs = with python3Packages; [