Memory Stealer (v1.9.5)

This is a security-critical release that fixes a regression in v1.9.4 where blocks
with invalid state were created by the miner component.

---

As with all our previous releases, you can find the:

• Pre-built binaries for all platforms on our downloads page.
• Docker images published under ethereum/client-go.
• Ubuntu packages in our Launchpad PPA repository.
• OSX packages in our Homebrew Tap repository.

Frozen Pyjak (v1.9.4)

Geth v1.9.4 is a special maintenance release, that besides fixing issues as usual, also locks in the Istanbul hard fork block numbers for the Ropsten, Rinkeby and Görli test networks:

• Ropsten: 6485846, scheduled October 2, 2019 (ref).
• Rinkeby: 5435345, scheduled November 13, 2019 (ref).
• Görli: 1561651, scheduled October 30, 2019 (ref).

Please update your nodes on the above test networks before the deadlines, otherwise you will end up either on a wrong chain (Ropsten), or stuck altogether (Rinkeby and Görli). The --override.istanbul CLI flag can be used to bail out of the fork even last minute if things go sour.

---

Improvements:

• Accumulate state writes post-Byzantium and only push into the trie at block end (#19953).
• Smarter locking in the transaction pool to avoid some contention (#20080, #20081, #20085).

Bugfixes:

• Fix a USB HID discovery regression on Windows (#20092).
• Various stability and balancing fixes for light servers (#20079).
• Fix some RLP decoding issues around nils for discv5 (#20064).
• Expose the GraphQL port (8547) from our docker images (#20033).
• Fix GraphQL UI serving regression caused by gzip encoding (#20046).
• Fix GraphQL address type decoding to reject invalid strings (#20046).
• Fix P2P metric types so they work properly with Influx/Grafana (#20047).

For a full rundown of the changes please consult the Geth 1.9.4 release milestone.

---

As with all our previous releases, you can find the:

• Pre-built binaries for all platforms on our downloads page.
• Docker images published under ethereum/client-go.
• Ubuntu packages in our Launchpad PPA repository.
• OSX packages in our Homebrew Tap repository.

Tasty Tankard (v1.9.3)

Geth v1.9.3 is a regular maintenance release, highlights being finalization of the Istanbul EIPs.

New Features:

• Add eth.fillTransaction to create-but-not-sign a transaction (#19915).
• Support DNS names in enode URLs during admin.addPeer (#18524).
• Enable gzip compression on the HTTP RPC API endpoint (#19997).
• Reduce light client default peer count from 100 to 10 (#19933).
• Align CLI flags and descriptions a bit better (#19956).

Istanbul changes (progress tracker):

• Implement EIP-152: Blake2B F compression function precompile (#19972).
• Implement EIP-2028: Transaction data gas cost reduction (#19931).
• Implement EIP-2200: Net SSTORE optimizations (#19964).
• Add --override.istanbul flag as a failsafe (#20004).
• Enable Istanbul EIPs in the EVM jumptable (#19993).

Fixed Bugs:

• Update README with the latest fork configs for private networks (#19983, #20002).
• Separate light client and light server P2P handlers internally (#19639, #20010).
• Fix an import crash caused by a data loss from a previous crash (#19986).
• Deprecate Ubuntu Cosmic and enable builders for Ubuntu Eoan (#19955).
• Fix an annoying log in geth attach about cache sanitation (#19911).
• Fix admin.exportChain to forbid overwriting existing file (#20019).
• Update Clef's 4byte database to the most recent version (#19957).
• Add more verbose logging to even small chain reorgs (#18950).
• Fix iOS builds broken from a gomobile update (#19995).

For a full rundown of the changes please consult the Geth 1.9.3 release milestone.

---

As with all our previous releases, you can find the:

• Pre-built binaries for all platforms on our downloads page.
• Docker images published under ethereum/client-go.
• Ubuntu packages in our Launchpad PPA repository.
• OSX packages in our Homebrew Tap repository.

Blue Thessia (v1.9.2)

Geth v1.9.2 is a small maintenance release. It introduces some minor features, fixes some minor bugs and starts to lay the groundwork for the Istanbul hard fork.

Features added:

• Rework client tracking for light servers to better prioritize requests, making it fairer for everyone (#19745).
• Avoid retrieving full blocks for GraphQL queries on light clients if the query relies on headers (#19886).
• Support closing a simulated backends, avoiding a goroutine leak during log running tests (#19902).
• Support eth_call overriding chain state before execution, see API docs for details (#19917).
• Replace all user facing passphrase labels with password to avoid confusion (#19932).

Bugs fixed:

• Fix an RPC annoyance where inclusion info for pending transactions was 0, not null (#19901).
• Fix an RPC regression from v1.9.1 where the block size was not hex encoded (#19885).
• Fix the builder to extract commit hashes from detached git branches too (#18315).
• Fix storage trie value encoding when running geth dump (#19943).
• Fix console output coloring for Clef on Windows (#19889).

Istanbul changes (progress tracker):

• Refactor the internal chain configuration to allow enabling EIPs individually in tests (#19735).
• Implement EIP-1884: Repricing for trie-size-dependent opcodes (#19743).
• Implement EIP-1108: Reduce alt_bn128 precompile gas costs (#19904).
• Implement EIP-1344: ChainID opcode (#19921).

For a full rundown of the changes please consult the Geth 1.9.2 release milestone.

---

As with all our previous releases, you can find the:

• Pre-built binaries for all platforms on our downloads page.
• Docker images published under ethereum/client-go.
• Ubuntu packages in our Launchpad PPA repository.
• OSX packages in our Homebrew Tap repository.

Lucky Leprechaun (v1.9.1)

Geth v1.9.1 is a small biweekly maintenance release. For all the major new features in the 1.9 family, please see our blog post from two weeks ago.

• Add eth_getHeaderByNumber and eth_getHeaderByHash to get headers without bodies (#19669).
• Update the go-ethereum list of authors to July 22nd state, bringing up the count to 367 (#19873).
• Switch out the websocket library, adding support for pings and continuation frames (#19866).
• Implement a 1/288th grace period for the faucet to avoid request drift (5m for 24h) (#18105).
• Add debug_accountRange to query all or part of the accounts at a given root (#17438).
• Fix a crash in the transaction pool caused by the 1.9.0 internal rework (#19835).
• Fix a crash in geth dumpconfig caused by the release oracle fields (#19825).
• Fix the reported derivation paths of hardware wallet accounts in Clef (#19827).
• Fix geth --dev thinking it's mainnet and requesting 4GB memory (#19875).
• Fix debug_chaindbProperty, which returns an internal error (#19856).
• Fix build script on OpenBSD (#17966).

For a full rundown of the changes please consult the Geth 1.9.1 release milestone.

---

As with all our previous releases, you can find the:

• Pre-built binaries for all platforms on our downloads page.
• Docker images published under ethereum/client-go.
• Ubuntu packages in our Launchpad PPA repository.
• OSX packages in our Homebrew Tap repository.

Full Biotic Kick (v1.9.0)

After many months of silence, we're proud to announce the v1.9.0 release of Go Ethereum! Although this release has been in the making for a lot longer than we anticipated, we're confident there will be some juicy feature for everyone to enjoy!

Posting a list of changes here wouldn't do this release justice, so we've prepared an entire blog post to walk through all the major features: Geth v1.9.0 - Six months distilled.

---

As with all our previous releases, you can find the:

• Pre-built binaries for all platforms on our downloads page.
• Docker images published under ethereum/client-go.
• Ubuntu packages in our Launchpad PPA repository.
• OSX packages in our Homebrew Tap repository.

Punisher (v1.8.27)

Geth v1.8.27 is a hotfix release to counter an active attack on mainnet, mounted against newly joining Geth nodes doing fast sync (#19473).

• If you are already in sync with the network, you don't need to update.
• Archive nodes, light clients and full-sync full nodes don't need to update.
• If you are joining the network with a new node, then you do need to update.

Background

Fast sync is susceptible to a grieving version of an eclipse attack, where a malicious remote node attempts to get a new Geth node to fast sync to some small chain, before a real heavy chain is discovered in the network. This results in Geth falling back to full sync for the main chain, taking too much time.

This attack can only be meaningfully mounted against nodes which are properly exposed on a public IP address (i.e. not firewalled, not NATed). Even then, it's a race against the node finding good peers fast enough, in which case the attack doesn't work any more.

There is no economic advantage in pulling this attack off, only causing sync annoyance. That said, there is currently a number of (at least 4 identified, maybe more) Parity nodes at 207.148.5.229, which are doing variations of this attack. It might be deliberate, or it might also be leftover nodes from some experiment that only have a few blocks on their chain and subsequently disabled sync. A bit unprobable.

Solution

This release repurposes the DAO challenge to do a checkpoint challenge based on the recently hard coded CHTs. It also makes the challenge stricter, in that while the node is doing a fast-sync, remote peers are not permitted to be synced below the checkpoint block. This should also help sync the chain faster, getting rid of stalling or useless peers.

---

Geth binaries and mobile libraries are available on the Geth download page.

Light Ball (v1.8.26)

Geth v1.8.26 is a tiny light client DoS hotfix. We've dropped support for les/1 on master (v1.9.0 unstable) and after some light servers updated, v1.8.x light clients started crashing. Turned out that les/2 on the v1.8.x release family relied on some les/1 throttling data (#19437).

If you don't use the light client, you don't need to update. Light servers don't need to update either.

Geth binaries and mobile libraries are available on the Geth download page.

White Ball (v1.8.25)

Geth v1.8.25 is a tiny hotfix on top of the recently released v1.8.24. During back-porting PRs into v1.8.24, one was merged incorrectly and resulted disabling 2 CLI flags (--rpccorsdomain and --rpcvhosts). You can see the fix in #19416. If you are not using these flag, you're fine to remain on the v1.8.24 release.

---

To recap our original notes, Geth v1.8.24 v1.8.25 is a small maintenance release aiming to be the final version of the 1.8.x family before rolling out our next major milestone (v1.9.0). As the previous release, v1.8.24 v1.8.25 only back-ports stability fixes. A grab bag of the changes included are:

• Add --rpc.gascap to limit the gas eth_call and eth_estimateGas may use.
• Baked in the Rinkeby Petersburg fork block 4321234 (~4th May, 2019).
• Updated light client CHTs for quicker sync times on all built-in networks.
• Fixes the builders and macos file descriptors if using with Go 1.12+.
• Fixes a log filtering issue that didn't report reorged EVM events.
• Fixes a couple of networking issues in the DHT and eth.
• Memory optimizations around timestamp handling.

For a full rundown of the changes please consult the originally Geth 1.8.24 back-port pull request.

Geth binaries and mobile libraries are available on the Geth download page.

Pointy Eightball (v1.8.24)

We've found a tiny issue in this release which accidentally disabled two CLI flags around RPC CORS and VHosts handling. If you rely on these, please see the Geth v1.8.25 hotfix release.

---

Geth v1.8.24 is a small maintenance release aiming to be the final version of the 1.8.x family before rolling out our next major milestone (v1.9.0). As the previous release too, v1.8.24 only back-ports stability fixes. A grab bag of the changes included are:

• Add --rpc.gascap to limit the gas eth_call and eth_estimateGas may use.
• Baked in the Rinkeby Petersburg fork block 4321234 (~4th May, 2019).
• Updated light client CHTs for quicker sync times on all built-in networks.
• Fixes the builders and macos file descriptors if using with Go 1.12+.
• Fixes a log filtering issue that didn't report reorged EVM events.
• Fixes a couple of networking issues in the DHT and eth.
• Memory optimizations around timestamp handling.

For a full rundown of the changes please consult the Geth 1.8.24 back-port pull request.

Geth binaries and mobile libraries are available on the Geth download page.