Summary
⚠️ Lighthouse v8.3.3 is a high-priority patch release containing security fixes. All Lighthouse beacon nodes should be upgraded as soon as possible. Details of the vulnerabilities will be disclosed at a later date.
There are no breaking changes in this release. If you are upgrading from v8.2.x or earlier, please read the v8.3.0 release notes.
Update Priority
| User Class | Beacon Node | Validator Client |
|---|---|---|
| Staking Users | High | Low |
| Non-Staking Users | High | --- |
See Update Priorities for more information about this table.
Security Content
Links to security advisories will be provided here once network operators have had time to upgrade.
You can read a blog post about our handling of vulnerabilities here: https://sigmaprime.io/blog/bug-reports/
All Changes
- Release v8.3.3
- Update libp2p
- Bump crypto-bigint
- Build slasher tests as C17 to fix mdbx on GCC 15 (#10518)
- Bump libz-sys to 1.1.31 (#10499)
- Improve accuracy of is_infinity method
- Fix commit hash not showing in release build (#10406)
- Count inbound requests as active until their substream closes
- reclaim timed-out inbound RPC substreams (#10486)
- Use keys from state as well as pubkey cache
Binaries
See pre-built binaries documentation.
The binaries are signed with Sigma Prime's PGP key: 15E66D941F697E28F49381F426416DC3F30674B0
| System | Architecture | Binary | PGP Signature |
|---|---|---|---|
| | aarch64 | lighthouse-v8.3.3-aarch64-apple-darwin.tar.gz | PGP Signature |
| | x86_64 | lighthouse-v8.3.3-x86_64-unknown-linux-gnu.tar.gz | PGP Signature |
| | aarch64 | lighthouse-v8.3.3-aarch64-unknown-linux-gnu.tar.gz | PGP Signature |
| System | Option | - | Resource |
| | Docker | v8.3.3 | sigp/lighthouse |