2.4.2

This release contains fix of a critical vulnerability that is being actively exploited. You need to update as fast as you can.
We recommend integrators to also update NBXplorer to version 2.6.10. See our blog post for more details.

Those have been reported to us by @brunoerg and @benthecarman from the Bitcoin Red Team effort.

Breaking change

• Greenfield: Disable Basic authentication by default five minutes after account creation, with opt-in available through account settings and the API (#7492) @NicolasDorier

We are not aware of any user impacted by this breaking change, as API Keys authentication is generally used.

New features

• Wallet: Allow hiding, showing, and reordering transaction table columns (#7474) @dstrukt

Fixes

• Wallet: Improve multisig PSBT signing and finalization reliability, including compatibility with newer HWI and Jade firmware versions (#7484 #7488) @rockstardev
• Fix RTL stylesheets not loading correctly (#7482) @teamssUTXO
• Fix TOTP two-factor authentication bypass via Greenfield Basic authentication (#7491) @NicolasDorier

Improvements

• Improve the layout and readability of store settings pages (#7448) @dstrukt
• Payment Requests: Rate limit public invoice creation @NicolasDorier