Bitcoin Core tiết lộ lỗ hổng rủi ro trung bình ảnh hưởng đến xử lý khối trong các phiên bản trước 29.2 và trước 30.0

The ME News report states that on November 11 (UTC+8), a Bitcoin Core security advisory disclosed that the medium-severity vulnerability CVE-2025-62859 was made public on November 10, 2026. This vulnerability exists in versions prior to 29.2 and 30.0, where a malicious node can exploit witness data manipulation within compact blocks to cause a victim's block processing to stall under specific conditions. Affected nodes clear their download state after reconstructing a compact block but before verifying the witness data; if verification fails, the node instead requests a full block from the same peer and waits for a 10-minute timeout. If the attacker controls three high-bandwidth peer nodes of the victim, or if the victim is running in -blockonly mode, the attack can be repeated indefinitely. The fix is included in versions 29.2 and 30.0. (Source: ODAILY)