ACINQ releases Eclair 0.14.5 with security fixes and strongly recommends updating

ACINQ's official channel announced the Eclair 0.14.5 release, which includes security fixes, and explicitly recommended that node operators update. The message contains no details about the nature of the issues or whether they were exploited. Operators of Eclair Lightning nodes are affected: channel funds and node availability depend on this software.

Actions to take

Update Eclair to version 0.14.5 during the next maintenance window, without waiting for a detailed analysis: the contents of the fixes have not been disclosed, and until you update the node remains on a vulnerable build. See the links in the post for the list of changes.

Sources:

x.com - acinq_co
github.com