Litecoin Core v0.21.4 Release

Posted On January 2, 2025

Follow our Twitter for the latest dev news.

This is a new patch version release that includes, new features and important security updates.

Please report bugs using the issue tracker at GitHub: https://github.com/litecoin-project/litecoin/issues

This release contains fixes for the following security vulnerabilities:

CVE-2024-35202: which allows remote attackers to cause a denial of service (blocktxn message-handling assertion and node exit)
by including transactions in a blocktxn message that are not committed to in a block’s merkle root.
FillBlock can be called twice for one PartiallyDownloadedBlock instance.
5d4a2e5: backported from Bitcoin Core (a8897f6)
Hindered block propagation due to mutated blocks: where a peer could send mutated blocks which could clear the download state of other peers that also announced block, hindering block propagation.
dab3bb7: backported from Bitcoin Core (dbfc748)
Infinite loop bug in miniupnp dependency: which could be exploited by an attacker on the local network to trigger an OOM.
16ba8b8: backported from Bitcoin Core (fa2a5b8)

0d04e75: default -peerblockfilters and -blockfilterindex to off when pruning is enabled

Thanks to everyone who directly contributed to this release:

Litecoin Core v0.21.4 Release was originally published in Litecoin Project on Medium, where people are continuing the conversation by highlighting and responding to this story.