Blockstream on Nostr: If you run Core Lightning: when the release is published: upgrade with signed ...

If you run Core Lightning: when the release is published: upgrade with signed binaries, or start your node with `--offline`.

Details stay under embargo for two weeks. Previous releases, including 26.04, are unsupported.

Full details when the embargo lifts. The 26.09 release is still planned for late September.

quoting
nevent1q…r5qk

Like many open source Bitcoin projects, Core Lightning has received a number of AI-generated CVE reports from multiple sources over the past 10 days. Our small team, together with several invaluable open source contributors, has been working intensively to validate and triage these reports and develop fixes where needed.

We’re now working through a broader remediation strategy. The first step is a point release containing many of these fixes, and we will strongly recommend upgrading. We’re aiming to have an initial version of the point release available within the next few days.