Skip to content

2.4.2:0

Choose a tag to compare

View all tags
@github-actions github-actions released this 07 Aug 16:26
· 25 commits to master since this release
v2.4.2_0
128d763
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

Updated BTCPay Server to 2.4.2 and NBXplorer to 2.6.10.

This is a critical security release — upstream reports the vulnerability is being actively exploited, so update as soon as possible.

  • Fixed a two-factor authentication (TOTP) bypass through the Greenfield API's Basic authentication
  • Basic authentication on the Greenfield API is now disabled by default five minutes after account creation; it can be re-enabled in account settings if an integration needs it
  • More reliable multisig PSBT signing and finalization, including with newer HWI and Jade firmware
  • Right-to-left (RTL) stylesheets now load correctly
  • Wallet transaction table columns can be hidden, shown, and reordered
  • Cleaner store settings pages; public invoice creation for payment requests is now rate limited

NBXplorer 2.6.10 is the version upstream recommends alongside this release. Full release notes: https://github.com/btcpayserver/btcpayserver/releases/tag/v2.4.2

Downloads

SHA256 Hashes

fa624a6541af59ac2ae88804d52c6aa22c2f61c048e94327d30bfa74969f8e2f  btcpayserver_aarch64.s9pk
4aa460bb9802482db90e281c36282901fcb991781a75a8c9450589b55202d998  btcpayserver_x86_64.s9pk
Assets 4
Loading