wavesplatform/Waves v1.1.5

Version 1.1.5 (Mainnet + Testnet + Stagenet)

on GitHub

Security Fix

This release contains a security fix which has been released with version 1.1.4. The only difference is that this release is built from github sources after the fix had been published. If you have already updated to 1.1.4, you can skip this release. However, if you have not updated yet, make sure to update both the node and gRPC server extension to 1.1.5.

An issue in gRPC server extension allowed signing transactions with node's private key via gRPC without requiring API key (or any other authentication token). This issue only affects the nodes which expose gRPC interface to a third party (by default, the server binds to local address only). The method has been disabled in the extension, it will respond with NOT_IMPLEMENTED to all requests. We might re-enable this method when we find a viable gRPC equivalent of an API key.

Node Improvements

• Improved /addresses/data/{address} now accepts the list of keys to retrieve values for. These keys can be specified as:
  • repeated query params in a GET request: key=first_key&key=second_key
  • JSON object with the keys field in a POST body: {"keys": ["first_key", "second_key"]}
  • multipart/form-data or application/x-www-form-urlencoded in a POST body.
    Please note that appropriate content types and param encoding is required.
• A hard time limit has been imposed on UTX transaction validation duration. All transactions which are received from network or API and take longer than 5 seconds to validate are rejected. This rule is not a part of consensus and only affects unconfirmed transactions.
• NFT list API endpoint has been fixed to return only tokens which are currently in posession of the specified address
• Smart contract execution has been sped up thanks to Waves context reuse
• gRPC Server can now be built on Windows hosts
• Posting account data via /addresses/data has been deprecated and will be removed in one of the future releases. Please explicitly broadcast signed Data Transactions by POSTing to /transactions/broadcast instead.

Update Notes

If you are running version 1.1.4, you may skip this release, because it has been built from the same source. Also there's no need to rebuild state if you are updating from 1.1.3. Please make sure to update both the node and gRPC server extension.

SHA256 Checksums

c01c126577dc15c2446b93f3b02c0b4b8f38f52bfa59cabcd24b7d8c9993640d  grpc-server-1.1.5.tgz
f76a73d737ce05dbeaa7e9708ea56908311d3939cad457fadfd99a8f150127f9  grpc-server-stagenet-1.1.5.tgz
73e610d2156ffa3f19844985ac14ae0b5114c7dcb7bd70d9e6a57a0e23488cfb  grpc-server-stagenet_1.1.5_all.deb
602e60a3579b3678cff5a71d9c4bca7b86879e02c70e1edb42cab024cb402746  grpc-server-testnet-1.1.5.tgz
233fb007d5fb3178c66993e051f0c04fc27e8582e16e0ee6be9fe937cfe9eb10  grpc-server-testnet_1.1.5_all.deb
9b186c450aecad9aaad8a7b74bb716f14508053a0e62aa4062daf815e8442b90  grpc-server_1.1.5_all.deb
1ddea4c72e512f71feb2c70b3aee286c4a0ff66126214c7c49f43e617add1240  waves-all-1.1.5.jar
9503d8e739c42402796920adedc448074d17c22f04ff4e8ddfcba9bfcfbdfbbf  waves-stagenet_1.1.5_all.deb
2edffbcf3441cd2d9a25ae2d3a45e924037f624a451273d45c53d05be0769bb7  waves-testnet_1.1.5_all.deb
a2d81613d98f733aa5c41167719f21a211ba8f64f97bca3f2e958eff6f365da9  waves_1.1.5_all.deb