Core Lightning 26.06.7 Fix Is Out; Current Docker Images Do Not Contain It
Core Lightning has released 26.06.7 to fix confirmed vulnerabilities, but its current release note warns that the automatically published `elementsproject/lightningd:v26.06.7` and `:latest` Docker images do not contain the fixes even though they report the new version. Operators are told not to use those images as an upgrade; use signed tarballs, verify the checksums and signatures, and restart—or keep the daemon running with `--offline` until they can upgrade. The vulnerability details and source remain under embargo until September 11. The project has committed the later source archive hash in the signed release manifest, but the exact flaw, severity, affected-version range and exploitation status remain undisclosed.
Primary record: github.com