The recommendation is to upgrade now.
This 26.06.9 point release includes a set of bug fixes alongside fixes for vulnerabilities responsibly reported by a number of sources, and fixes a gossip regression introduced in 26.06.8. We strongly recommend upgrading to this release.
As with 26.06.8, there is no embargo period: the release and its fixes are available immediately. We have again temporarily withheld the tests for the security fixes, to make it harder to quickly turn the fixes into working exploits and to give users and network participants more time to upgrade before more technical detail is published.
If I were running this, I'd update. Now.
#1590560
Third times the charm, right?
Geeze , CLN ...
blockstream related projects are a shitshow
no, they are not. CLN is actually the best lightning implementation. The fact they are identifying ways to security harden it is good. I'm actulaly zapping from CLN right now.
People who say CLN is insecure, that is not true, they are security hardening it constantly and why we see all these security updates. CLN keeps getting more secure and still remains the best LN implementation for various reasons.
By the way, LND is very insecure because it is written in golang, anything written in golang should be treated as compromised.