Bitcoin Core will disclose some bugs sooner. Can node operators update in time?

Bitcoin Core has changed its security disclosure policy after developers found that some vulnerabilities can be rediscovered with minimal effort, including a simple prompt to an AI model. Summary Bitcoin Core merged its revised security policy on October 22, adding a fast disclosure route for flaws that are easy to rediscover. The new route promises a fix for each of the three maintained major versions alongside a public advisory. Other low severity bugs remain on a two week disclosure schedule after a major release, while medium and high severity flaws may wait longer. Version 32.0’s notes identify three medium or high severity flaws fixed in version 30.0 whose details are due after the newer release. Bitcoin Core tagged version 32.0 on October 21, leaving versions 30.x, 31.x and 32.x inside its three version maintenance window. The project’s October 22 policy update creates a faster route for those bugs. Maintainers plan to ship a point release for every supported major version as soon as possible and publish a security advisory alongside the fixes. Other vulnerabilities retain the existing disclosure timetable. No particular new flaw was announced with the policy change, and an ...