Were the fixes for CVE-2025-54604, CVE-2025-54605, CVE-2025-46597, and CVE-2025-46598 back-ported to any Bitcoin Core 29.x or 28.x release?
Question
The Bitcoin Core Project disclosure on October 24 2025 lists several low-severity vulnerabilities: CVE-2025-54604, CVE-2025-54605, CVE-2025-46597, CVE-2025-46598.
Each entry indicates that fixes were included in Bitcoin Core v30.0 (released October 10 2025). However, the disclosure pages do not specify whether any of these fixes were also back-ported to the v29.x or v28.x maintenance branches (e.g., v29.2 or v28.3).
I haven’t found any authoritative confirmation from official release notes or GitHub commit histories.
Could someone confirm:
Whether each of these four CVE fixes was back-ported to any Bitcoin Core v29.x or v28.x point release?
If so, which commits or pull-requests contain the relevant patches?
No answers available yet.
Read Original ← Back to Home