Bitcoin Core Enhances Security Patching Process

Bitcoin Core developers have implemented a new policy aimed at bolstering network security by streamlining the process of patching vulnerabilities. The change, merged on October 22, allows for security fixes to be backported to all actively maintained release lines of Bitcoin Core. This means that even older versions of the software that are still in use will receive critical security updates more rapidly.

This policy adjustment comes as a significant portion of the network was found to be running outdated software. A snapshot taken on October 18 revealed that approximately 43.6% of surveyed Bitcoin Core nodes, totaling 3,671 out of 8,422, were operating on release lines that had already reached their end of life. Running unsupported software exposes these nodes, and by extension the network, to potential security risks and exploits.

The new procedure also includes the publication of advisories alongside these backported fixes. This transparency is crucial for node operators to understand the nature of the vulnerabilities addressed and the importance of updating their software promptly. By making it easier to patch older versions, developers aim to reduce the attack surface and maintain a more robust and secure Bitcoin network for all participants.