Hi everyone,
Today we are releasing 2 security advisories for the Bitcoin Core
project. Those bugs affect versions of Bitcoin Core before (and not
including) v22.0.
This is part of the gradual adoption by the project of a new vulnerability disclosure policy.
The policy and the 2 security advisories can be found on the project's website at https://bitcoincore.org/en/security-advisories .
We will follow up later in August to publicly disclose vulnerabilities
fixed in version v23.0. And then in September to disclose those fixed in
version v24.0, and so on until we run out of unmaintained versions to
disclose vulnerabilities for. The announced policy will then start to
be observed for new versions.
Niklas Gögge