[bitcoindev] 3 Bitcoin Core security advisories for easily discoverable vulnerabilities

[bitcoindev] 3 Bitcoin Core security advisories for easily discoverable vulnerabilities

['Antoine Poinsot' via Bitcoin Development Mailing List]

Hi,

We just published 4 new releases to patch 2 medium severity and 1 low severity security vulnerabilities.

Fixed releases are available for all past major versions [^0]:
  - 32.1: https://bitcoincore.org/en/2026/10/27/release-32.1/
  - 31.2: https://bitcoincore.org/en/2026/10/28/release-31.2/
  - 30.4: https://bitcoincore.org/en/2026/10/28/release-30.4/
  - 29.5: https://bitcoincore.org/en/2026/10/28/release-29.5/

The details for each vulnerability are available in the corresponding security advisory:
  - https://bitcoincore.org/en/2026/10/28/disclose-tcp-oom/
  - https://bitcoincore.org/en/2026/10/28/disclose-fpausesend-oom/
  - https://bitcoincore.org/en/2026/10/28/disclose-undo-overflow/

These advisories are following our accelerated process for easily discoverable vulnerabilities. The
release of fixed versions happens to coincide with the release of our latest major version, 32.1 [^1].

The 3 vulnerabilities pre-announced along with our latest major release, 32.1, are unrelated to the
easily discoverable vulnerabilities above. Their disclosure goes through our regular process, and we
will share the details for those in 2 weeks.

See https://bitcoincore.org/en/security-advisories/ for more information on our security policy
disclosure, or to consult historical security advisories.

Antoine Poinsot


[^0]: Including 29, which was then immediately made EOL by the release of major version 32.
[^1]: https://gnusha.org/pi/bitcoindev/c47ceea6-99de-41fe-a97c-928881963eccn@googlegroups.com/T/#u

-- 
You received this message because you are subscribed to the Google Groups "Bitcoin Development Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bitcoindev+unsubscribe@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/bitcoindev/vf_yceciSS4HUGwYYk6tuj8ndp-JKV5q2OBS9HKVaSRkO1ggCKxLEy3mS6rkL7tG3XLpRFS1pme4Niz83LUJeQNJNH8lHuyo_8ynAj_qRY4%3D%40protonmail.com.