v1.39.3

Important

This is a mandatory update for all node operators. Please upgrade at your earliest convenience.

Release notes

A patch release on top of 1.39.2 with reliability and hardening fixes across block processing, networking, and request decoding. No consensus or database-format changes, so it's a drop-in upgrade from any 1.39.x version.

Overview

3 changes since 1.39.2:

• Hardened ABI decoding against malformed input (#12588)
• Fixed pooled-memory cleanup in block processing and networking (#12034)
• Reduced allocations in EIP-6110 deposit-request decoding (#12185)

What's Changed

• Validate ABI decode allocation bounds by @flcl42 in #12588
• Fix undisposed array-pool list leaks by @batrr in #12034
• perf(requests): reuse a stack buffer for deposit request decoding by @AnkushinDaniil in #12185
• chore: update Directory.Build.props for 1.39.3 by @stdevMac in 28cbe2a0

Full Changelog: 1.39.2...1.39.3

Build signatures

The packages are signed with the following OpenPGP key: AD12 7976 5093 C675 9CD8 A400 24A7 7461 6F1E 617E