fort-nix/nix-bitcoin v0.0.139

nix-bitcoin-0.0.139

on GitHub

This is the final release of nix-bitcoin.

Highlights

• NixOS: 25.11 -> 26.05
• Security: two fixes for hosts that have a second, unprivileged user account. netns-exec was executable by every normal user instead of only the operator, letting any of them enter the joinmarket netns and reach joinmarketd's unauthenticated control port (#846); and lnd's admin macaroon, which grants full RPC authority including moving funds, was passed in curl's argv and was therefore readable from world-readable /proc on every lnd start (#848). These affect only configurations with netns-isolation enabled, and with a non-empty services.lnd.macaroons (set automatically by charge-lnd and by btcpayserver with the lnd backend), respectively. Both issues were discovered by @haoxucu (Thank you!).
• bitcoind: 31.0 -> 31.1
• btcpayserver: 2.3.4 -> 2.4.2
• clboss: 0.16.0 -> 0.16.1
• joinmarket is deprecated

Change Log

#844 NixOS 25.11 -> 26.05 (@jonasnick)
#846 netns-isolation: fix netns-exec being executable by all normal users (@jonasnick)
#847 update nixpkgs (@jonasnick)
#848 lnd: don't pass the admin macaroon in curl argv (@jonasnick)