Only the latest release is supported. Fixes are not backported to earlier versions.
Please do not file a public issue or pull request that describes the vulnerability.
Report it through GitHub's private vulnerability reporting for this repository: https://github.com/etclabscore/core-geth/security/advisories/new
If you cannot use GitHub, email the maintainer, encrypted with the PGP key below if the report is sensitive.
You will get an acknowledgement in the report thread, and the fix is coordinated there until a release that contains it is published. Published advisories are listed at https://github.com/etclabscore/core-geth/security/advisories.
If the vulnerable code is shared with upstream go-ethereum, report it to upstream as well, following https://github.com/ethereum/go-ethereum/blob/master/SECURITY.md. Upstream's process takes precedence for that code and core-geth ships upstream's fix.
Fixed vulnerabilities are named, with their CVE identifiers when they have one, in the notes of the release that fixes them.
The following key may be used to communicate sensitive information to developers.
Fingerprint: 22C0 9951 D82D 607C CBC7 0615 3C65 E81A 085B 84FB
-----BEGIN PGP PUBLIC KEY BLOCK-----
Comment: https://github.com/diega.gpg
Comment: 22C0 9951 D82D 607C CBC7 0615 3C65 E81A 085B 84FB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=kdyN
-----END PGP PUBLIC KEY BLOCK-----