| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/ethereum/go-ethereum | < 1.9.24 | 1.9.24 |
| go ethereum | < 1.9.24 | 1.9.24 |
An ethash mining DAG generation flaw in Geth could cause miners to erroneously calculate PoW in an upcoming epoch (estimated early January, 2021). This happened on the ETC chain on 2020-11-06. This issue is relevant only for miners, non-mining nodes are unaffected.
This issue is also fixed as of 1.9.24. Thanks to @slavikus for bringing the issue to our attention and writing the fix.
This PR implements a patch: https://github.com/ethereum/go-ethereum/pull/21793
https://blog.ethereum.org/2020/11/12/geth_security_release/
If you have any questions or comments about this advisory:
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free