Liana 16.0 fixes an RBF attack by malicious Electrum servers
The vendor announced Liana v16.0 and listed among its changes a fix for an RBF attack that a malicious Electrum server could carry out. The announcement does not explain how the attack works; the vendor points to its blog post for details. The release also adds BIP138 encrypted descriptor backups, Taproot by default, address labels inherited by coins and transactions, a reworked interface, and new interface languages (French, Italian, Brazilian and European Portuguese).
If you use Liana, especially if you connect to third-party or untrusted Electrum servers, update to v16.0, which contains the fix. Installations that already include it need no action. The vendor did not indicate urgency, so update in your normal planned course. Before updating, make sure you have a working backup of your descriptor and seed. Key replacement is not needed: no exposure of secrets is mentioned.