myNode reports a vulnerability affecting all nodes; patch promised later the same day
The myNode vendor has announced a security vulnerability affecting all nodes, and a patch with mitigations and fixes “where available” later the same day. According to the vendor, switching to Tor-only in settings may help, but the best measure is to remove remote access to the node or temporarily shut it down; the message suggests a kernel update may not yet be available for Raspberry Pi. The vendor gives no details of the defect.
If you have a node running myNode: remove remote access to the node or temporarily shut it down right now — according to the vendor, this is the best measure; switching to Tor-only through the settings page may help as a mitigation. Bear in mind that shutting down the node makes services and channels unavailable. The vendor promises a patch later the same day — install it when it is released and follow further information; a kernel update may not yet be available for Raspberry Pi.
Source: x.com - mynodebtc
Incident history
- 30 OctmyNode reports a vulnerability affecting all nodes; patch promised later the same day
- 30 OctmyNode publishes a new mitigation: an iptables rule for the node
- 31 OctmyNode releases promised patch: v0.3.52 is available