Eclair 0.14.3 fixes vulnerabilities that malicious nodes could exploit

ACINQ has released Eclair 0.14.3, a patch release with security fixes. Most of the fixes were found through the Loupe project. According to the developers, some of these issues could be exploited by malicious Lightning nodes. The message does not say exactly which bugs were fixed or what their consequences could be. Operators of Eclair nodes running versions before 0.14.3 are affected.

Actions to take

Update Eclair to version 0.14.3 as soon as possible: the developers strongly recommend updating. Before installation, verify the release signatures and checksums with key E434ED292E85643A. Channels do not need to be closed: stop eclair, update it and start it again. Details are at the release link in the post.

Source: github.com