Skip to content

Commit c4ab559

Browse files
bitschmidtyLarryRuanekevkevinpal
authored
Taking news segment suggestions from feedback
Co-authored-by: Larry Ruane <larryruane@gmail.com> Co-authored-by: kevkevin <oapallikunnel@gmail.com>
1 parent a07fd76 commit c4ab559

File tree

1 file changed

+8
-9
lines changed

1 file changed

+8
-9
lines changed

_posts/en/newsletters/2025-10-31-newsletter.md

Lines changed: 8 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -15,11 +15,10 @@ Bitcoin infrastructure software.
1515

1616
## News
1717

18-
- **Disclosure of four low severity vulnerabilities in Bitcoin Core:**
19-
Antoine Poinsot recently [posted][poinsot disc] to the Bitcoin Development
20-
Mailing List four Bitcoin Core security advisories for low severity
18+
- **Disclosure of four low-severity vulnerabilities in Bitcoin Core:**
19+
Antoine Poinsot recently [posted][poinsot disc] to the Bitcoin-Dev mailing list four Bitcoin Core security advisories for low severity
2120
vulnerabilities that were fixed in [Bitcoin Core 30.0][]. According to the
22-
[disclosure policy][disc pol], a low severity vulnerability is disclosed two
21+
[disclosure policy][disc pol], a low-severity vulnerability is disclosed two
2322
weeks after the release of a major version containing the fix. The four
2423
disclosed vulnerabilities are the following:
2524

@@ -29,16 +28,16 @@ Bitcoin infrastructure software.
2928

3029
- [CVE-2025-54605][]: Disk filling from invalid blocks. This bug would allow
3130
an attacker to fill up the disk space of a victim node by repeatedly sending
32-
invalid blocks.
31+
invalid blocks. This bug was disclosed responsibly by Niklas Goegge in May 2022 and also independently by Eugene Siegel. Eugene Siegel and Niklas Goegge merged the mitigation in July 2025.
3332

3433
- [CVE-2025-46597][]: Highly unlikely remote crash on 32-bit systems. This bug
35-
may cause a node to crash when receiving a pathological block, in a rare
36-
edge case.
34+
may cause a node to crash when receiving a pathological block in a rare
35+
edge case. This bug was disclosed responsibly by Pieter Wuille in April 2025. Antoine Poinsot implemented and merged the mitigation in June 2025.
3736

3837
- [CVE-2025-46598][]: CPU DoS from unconfirmed transaction processing. This
3938
bug would cause resource exhaustion when processing an unconfirmed
40-
transaction. Patches for the first three vulnerabilities have been included
41-
also in [Bitcoin Core 29.1][] and later minor releases.
39+
transaction. Patches for the first three vulnerabilities have also been included
40+
in [Bitcoin Core 29.1][] and later minor releases.
4241

4342
## Selected Q&A from Bitcoin Stack Exchange
4443

0 commit comments

Comments
 (0)