Security· ★★★· bearish·

Lightning Labs Urges Immediate Updates Over eMudhra Certificate Vulnerability

  • —New Lightning Labs binaries block trust in compromised eMudhra certificate keys
  • —Updating Go on a host does not patch already installed software
  • —eMudhra previously exited the TLS certificate market after eight keys were blocked
Why it matters: The certificate compromise affects Lightning nodes and wallets, so operators must reinstall software rather than just update Go.
Source: The Defiant