TREE NEWS reports: Ethereum client Besu has patched five security vulnerabilities discovered by CertiK in version 26.7.1, released on July 27, with detailed advisories published on August 14. The delayed disclosure gave node operators an 18-day buffer to upgrade. The flaws could have allowed attackers to exhaust node memory or threads, impacting availability and consensus.
Besu Fixes 5 Security Flaws Found by CertiK in v26.7.1
The 18-day gap between release and disclosure is the real signal here: it turns a patch into a coordination test for node operators, and availability flaws in an execution client ultimately touch consensus, not just individual uptime. This matters most for teams running Besu in production, where an unpatched node is a liveness risk rather than a data-loss one. Whether that delayed-disclosure window becomes standard practice across clients is the open question.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.