Eclair 0.14.4: patch fixes vulnerabilities that malicious nodes can exploit
ACINQ has released Eclair v0.14.4, a patch release containing security fixes, most of which came through the Loupe project. According to the developers, some of the issues can be exploited by malicious nodes, and updating is strongly recommended. Operators of their own Eclair Lightning nodes are affected: a neighboring node with malicious intent has a way to affect your node until it is updated.
Update Eclair to version 0.14.4 now, without waiting for a scheduled window: the release is fully compatible with previous versions, and channels do not need to be closed — simply stop eclair, update and start it again. Verify the archive's signatures and checksums according to the instructions in the release (linked in the post), rather than those on a third-party mirror.
Source: github.com