3 Bitcoin Core security advisories for easily discoverable vulnerabilities

Hi,

We just published 4 new releases to patch 2 medium severity and 1 low severity security vulnerabilities.

Fixed releases are available for all past major versions [^0]:
  - 32.1: https://bitcoincore.org/en/2026/10/27/release-32.1/
  - 31.2: https://bitcoincore.org/en/2026/10/28/release-31.2/
  - 30.4: https://bitcoincore.org/en/2026/10/28/release-30.4/
  - 29.5: https://bitcoincore.org/en/2026/10/28/release-29.5/

The details for each vulnerability are available in the corresponding security advisory:
  - https://bitcoincore.org/en/2026/10/28/disclose-tcp-oom/
  - https://bitcoincore.org/en/2026/10/28/disclose-fpausesend-oom/
  - https://bitcoincore.org/en/2026/10/28/disclose-undo-overflow/

These advisories are following our accelerated process for easily discoverable vulnerabilities. The release of fixed versions happens to coincide with the release of our latest major version, 32.1 [^1].

The 3 vulnerabilities pre-announced along with our latest major release, 32.1, are unrelated to the easily discoverable vulnerabilities above. Their disclosure goes through our regular process, and we will share the details for those in 2 weeks.

See https://bitcoincore.org/en/security-advisories/ for more information on our security policy disclosure, or to consult historical security advisories.

Antoine Poinsot

[^0]: Including 29, which was then immediately made EOL by the release of major version 32. [^1]: https://gnusha.org/pi/bitcoindev/c47ceea6-99de-41fe-a97c-928881963eccn@googlegroups.com/T/#u