A study published on October 21 found that 71% of 550 public LND nodes flagged after an August 11 security disclosure were still running vulnerable software on October 13. Fixes for six vulnerabilities had been available since LND version 0.19.0, released 446 days before the warning, while only about 10% of nodes upgraded during the period. The study detected no statistically measurable acceleration in updates following the nine vulnerability disclosures analyzed. Software distributors such as Umbrel did observe major update waves, with at least 87% of participating nodes adopting new features within 48 hours of a release, but those versions reached users 19 to 41 days after they became available.
Source: Read the original article


