mynode · myNode
Update to incident: myNode reports a vulnerability affecting all nodes; patch promised later the same day
myNode releases promised patch: v0.3.52 is available
The vendor reports that v0.3.52 is now available: it includes kernel updates where available and mitigations for other platforms, as well as LND v0.21.6 with an additional fix. The vendor still provides no details of the defect; on platforms without a kernel update, the release provides mitigation rather than an updated kernel.
Actions to take
If your node runs myNode, install v0.3.52 — this is the version the vendor identified as the promised release with fixes and mitigations. The vendor has not withdrawn its previously stated measures, so the release's availability alone is no reason to remove them.
Source: x.com - mynodebtc
Incident history
- 30 OctmyNode reports a vulnerability affecting all nodes; patch promised later the same day
- 30 OctmyNode publishes a new mitigation: an iptables rule for the node
- 31 OctmyNode releases promised patch: v0.3.52 is available