Core Lightning fix reaches StartOS: update already available in Marketplace

Start9 reports that a Core Lightning build with security fixes is available in the StartOS Marketplace and asks users to update immediately. This is the same release that fixes a vulnerability capable of causing loss of funds on nodes running earlier versions. Owners of StartOS servers no longer need to wait for packaging: it can be installed right now.

Actions to take

Open the Marketplace in StartOS and update Core Lightning today without waiting for a maintenance window; release details are at the links below.

Sources:

Incident history

15 SeptCore Lightning investigates reports of a possible issue in experimental features that may affect funds
15 SeptStart9 identifies the specific experimental Core Lightning feature to disable on StartOS: dual funding and liquidity ads
22 SeptCore Lightning releases 26.06.8 with vulnerability fixes; no embargo, update available immediately
02 OctCore Lightning reports receiving reports of attacks on unpatched nodes running 26.06.7 and earlier
07 OctCore Lightning releases 26.06.9: another set of security fixes and a fix for the gossip regression in 26.06.8
07 OctCore Lightning: 26.06.9 fixes a vulnerability that could lead to loss of funds
07 OctCore Lightning fix reaches BTCPay Server: bundled version now 26.06.9
07 OctCore Lightning fix reaches StartOS: update already available in Marketplace