Core Lightning (CLN) developers have asked node operators to make a security decision before the team can fully assess the threat posed by multiple newly reported vulnerabilities.
An Aug. 23 message posted on Stacker News urged operators to install new binaries that fix the reported bugs. Operators who decline the upgrade were told to run their nodes offline instead. The CLN team said it plans to keep the technical details of the vulnerabilities under embargo for two weeks.
To help operators verify the update, CLN plans to attach team signatures to the binaries so users can check provenance and reproducibility.
