31 Oct 2023 [mining]

SChernykh releases P2Pool v3.8 with fix for curl's CVE-2023-38545

SChernykh1 has released P2Pool2 version 3.83 with two new features and important bug fixes, including curl’s CVE-2023-385454.

Changes overview

Bugfixes:
- StratumServer: fixed memory leak on shutdown
- Fixed CVE-2023-38545
- Fixed crashes when compiled with latest macOS SDK on Apple silicon
New Features: 
- status and version commands will also show a message if a new P2Pool version is detected
- P2Pool can now detect new versions [..]

The full list of changes is available on Github3.

Before using the software, you should verify the SHA256 sums with SChernykh’s GPG key5.

The README6 has valuable information about features, defaults, how pool shares work, build instructions and a short mining guide.

If you need assistance, read the FAQ7 and join the project’s IRC channels8.

Note that all wallet addresses are public on P2Pool and only primary wallet addresses are supported (no subaddresses or integrated addresses).


  1. https://github.com/SChernykh 

  2. https://p2pool.io/ 

  3. https://github.com/SChernykh/p2pool/releases/tag/v3.8  2

  4. /sech1-3/ 

  5. https://p2pool.io/SChernykh.asc, https://github.com/monero-project/gitian.sigs/blob/master/gitian-pubkeys/SChernykh.asc 

  6. https://github.com/SChernykh/p2pool/blob/master/README.md 

  7. https://p2pool.io/#faq 

  8. #monero-pools (irc), #p2pool-log (irc/libera)