Skip to main content

2 posts tagged with "security-advisory"

View All Tags

Distribution `2513` is now available

· 2 min read
Mithril Team

Distribution 2513 is now available​

The 2513.0 distribution has been released, introducing the following changes:

  • ⚠️ Breaking changes in Mithril nodes:
    • The minimum required glibc version for pre-built Linux binaries has been upgraded from 2.31 to 2.35
    • Mithril signers running versions <=0.2.200 must be updated due to the removal of Thales era legacy code
    • The with_snapshot_uploader function in the Mithril client library has been renamed to with_file_uploader
  • Added support for Cardano node 10.2.1 in the signer and aggregator
  • Ended support for macOS x64 pre-built binaries for the client CLI
  • Bug fixes and performance improvements.

This new distribution has been deployed to the Mithril aggregator on the release-mainnet and release-preprod networks.

If you are running a Mithril signer:

  • pre-release-preview network: no action is required at this time
  • release-preprod network: upgrade your signer node binary to version 0.2.237 – no configuration updates are required
  • release-mainnet network: upgrade your signer node binary to version 0.2.237– no configuration updates are required.

You can update the Mithril signer using the one-line command below. It downloads to the current directory by default, but you can specify a custom folder using the -p option:

curl --proto '=https' --tlsv1.2 -sSf https://raw.githubusercontent.com/input-output-hk/mithril/refs/heads/main/mithril-install.sh | sh -s -- -c mithril-signer -d 2513.0 -p $(pwd)

For any inquiries or assistance, contact the team on the Discord channel.

Distribution `2506` is now available

· 2 min read
Mithril Team

Distribution 2506 is now available​

warning
  • This distribution embeds a fix for the Mithril certificate chain could be manipulated by an adversarial signer security advisory GHSA-724h-fpm5-4qvr
  • All users running a client library, client CLI, or client WASM are strongly encouraged to update to the latest versions.

We have released the 2506.0 distribution, which includes the following:

  • Support for certifying protocol parameters and epochs in the certificate chain in clients
  • Stable support for Cardano node v.10.1.4 in the signer and aggregator
  • Removal of support for the Thales era in the signer and aggregator
  • Stable support for aggregator HTTP response compression in the signer, aggregator, and clients
  • Building and publication of both a stable version (for release networks) and an unstable version (for testing networks) of the explorer.

This new distribution has been deployed to the Mithril aggregator of the release-mainnet and release-preprod networks.

If you are running a Mithril signer:

  • pre-release-preview network: no action is required at this time
  • release-preprod network: upgrade your signer node binary to version 0.2.228 – no configuration updates are required
  • release-mainnet network: upgrade your signer node binary to version 0.2.228 – no configuration updates are required.

You can easily update the Mithril signer with this one-line command. It downloads to the current directory by default, but a custom folder can be specified using the -p option:

curl --proto '=https' --tlsv1.2 -sSf https://raw.githubusercontent.com/input-output-hk/mithril/refs/heads/main/mithril-install.sh | sh -s -- -c mithril-signer -d 2506.0 -p $(pwd)

For any inquiries or assistance, feel free to contact the team on the Discord channel.