Public disclosure of one vulnerability affecting Bitcoin Core <26.0

Hi everyone,

Today we are releasing one security advisory for the Bitcoin Core project. This vulnerability affects Bitcoin Core versions before (and not including) 26.0. A fix was also included in 25.1.

The details are available on our website: https://bitcoincore.org/en/2024/11/05/cb-stall-hindering-propagation.

This is the last batch of security advisories for historical issues. For all new reported vulnerabilities we will now start following our advertised public disclosure policy, previously announced in [0] and available on our website at https://bitcoincore.org/en/security-advisories.

This concludes the gradual adoption of this new policy by the project, initiated back in July [1].

Antoine Poinsot

[0] https://groups.google.com/g/bitcoindev/c/Q2ZGit2wF7w/m/RqqmU2B9AAAJ  |  https://gnusha.org/pi/bitcoindev/rALfxJ5b5hyubGwdVW3F4jtugxnXRvc-tjD_qwW7z73rd5j7lXGNdEHWikmSdmNG3vkSOIwEryZzOZr_DgmVDDmt9qsX0gpRAcpY9CfwSk4=@protonmail.com/
[1] https://groups.google.com/g/bitcoindev/c/_ys3Eu8-ORA/m/VnVWV5yIAAAJ  |  https://gnusha.org/pi/bitcoindev/xsylfaVvODFtrvkaPyXh0mIc64DWMCchxiVdTApFqJ_0Q5v0bOoDpS_36HwDKmzdDO9U2RKMzESEiVaq47FTamegi2kCNtVZeDAjSR4G7Ic=@protonmail.com