EN ▼
Favorites
My Favorites
View All
Market Cap Price 24h%

Disclaimer: Content does not constitute investment advice. Trading involves risks—please invest with caution!

比特币核心软件更新旨在提升速度与安全性补丁

2026-09-17 04:14:24
Bookmark

比特币核心软件即将迎来重大更新:提升验证速度并修复安全漏洞

旨在加速交易验证流程并修补安全缺陷的比特币独立验证软件即将迎来版本更新,预计将于十月正式发行。根据项目时间表,比特币核心(Bitcoin Core)32.0 版本已于周一进入候选发布测试阶段。开发者目标是在10月10日交付最终版本,但测试结果可能会影响这一时间线。

比特币核心软件允许计算机验证比特币的交易和区块。此次更新主要影响使用该软件运行钱包及其他服务的节点运营商和开发人员。

性能优化与新格式支持

根据草案发布说明,此次更新通过并行读取数据库信息,能够加快区块检查速度,而不会影响比特币生成区块的速度。此外,四个钱包命令将默认采用较新的格式,用于在钱包和签名设备之间交换部分签名交易,尽管应用程序仍可选择请求旧版格式。

关键安全修复

一项安全修复措施防止了恶意构造的钱包名称触发节点计算机上的命令。此前,该漏洞影响了非 Windows 系统,其中经过身份验证的用户可以创建钱包,并且当配置了“walletnotify”功能时,钱包交易发生时就会执行相关命令。

Another patch addresses excessive memory consumption in the new HTTP server, which handles requests from connected applications. Contributor Matthew Zipkin (user name pinheadmz) described a "memory exhaustion scenario" in his patch proposal. His initial assessment was that the risk was limited to authenticated clients.

Zipkin said he discovered the vulnerability while using Kimi K3, an AI model also used by the Bitcoin Red Team to search for vulnerabilities in Bitcoin software, to audit Bitcoin core's new HTTP server. He explained that previous fixes solved some of the problems, but the condition that caused the computer to run out of available memory-the "OOM"(Out of Memory) condition-still existed.

During a review of the same patch, GitHub user jeanpablojp found that when the REST interface is enabled, even requests without credentials can cause memory growth. After Zipkin revised the patch, reviewers reported that in 90 seconds, 16 unauthenticated connections only resulted in approximately 3 MB of memory growth, compared with a figure of 3.2 GB before the fix.

The patch was merged into Bitcoin Core version 32.0 on September 5 as part of an ongoing effort to improve software security.

Other Industry News

近期,其他比特币软件开发团队也处理了各自的安全漏洞。硬件钱包制造商 BitBox 在8月修复了两项严重的固件漏洞,并表示未发现被利用的证据。支付软件 Core Lightning 的开发人员也在准备修复方案的同时,警告节点运营商注意已确认的漏洞。

Disclaimer:

All content published on this website, including hyperlinks, related applications, forums, blogs, and other media accounts, originates from third-party platforms and their users. CoinMarketInsight makes no representations or warranties of any kind regarding the website or its content. All blockchain-related data and materials are provided for informational and research purposes only and do not constitute financial, legal, or investment advice. Users and third parties are solely responsible for the content they publish. CoinMarketInsight shall not be liable for any losses arising from the use of this website. You should exercise caution and conduct your own independent research, review, analysis, and verification before making any decisions.

Read Full Article
More News
TOP

TOP