Duniter v2.3.0: security update
Version 2.3.0 of Duniter is out. It fixes several vulnerabilities of varying severity, found by elois during a code audit.
Updating
New Docker images:
- Ğ1:
duniter/duniter-g1-1100:1100-2.3.0 - ĞTest:
duniter/duniter-gtest-1000:1100-2.3.0
Details of the vulnerabilities
They will only be published once the majority of nodes have been updated, so as not to make an attack easier in the meantime.
Users
Nothing to do: this update only concerns node operators.
How these flaws were found
Through an AI-assisted code audit, via OpenAI's Daybreak cyberdefence programme, which lifts the usual restrictions on vulnerability research.
Source and discussion: Duniter v2.3.0, mise à jour de sécurité pour Ğ1 et ĞTest (Duniter forum, in French).