-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

0xCERT Security Advisory 0xCERT-2026-0256
============================================================

Advisory-ID:  0xCERT-2026-0256
Severity:     High
Published:    2026-10-19T10:12:23.000Z
Updated:      2026-10-19T11:07:17.938Z
Chains:       Ethereum
URL:          https://www.0xcert.com/advisory/0xCERT-2026-0256

Title: Lighthouse v8.3.0: security release for Ethereum node operators

Summary
- -------
Lighthouse v8.3.0 (released 2026-10-19) includes security fixes according to its release notes. Ethereum node operators running Lighthouse should review and upgrade.

Details
- -------
Summary
Lighthouse v8.3.0 (released 2026-10-19) includes security fixes according to its release notes. Ethereum node operators running Lighthouse should review and upgrade.

Affected
- - Lighthouse (sigp/lighthouse) versions before v8.3.0

From the release notes
d fork on Hoodi 🎉. It also introduces the Fast Confirmation Rule (FCR), enables partial data columns by default on all networks, and adds new builder configuration and validator features, along with security fixes and many other improvements since v8.2.3.
Hoodi operators must upgrade before 26 October 2026 at 17:42:48 UTC. Update both the beacon node and validator client, together with a compatible execution client.
This release is suitable for mainnet, and we recommend that all mainnet users upgrade. The Gloas fork is not yet scheduled on mainnet, so another release (v9.0.0) will be required for Gloas.
This release fixes several security issues. We will publish the details at a later date.
If you are upgrading from v8.2.x, please read the upgrade notes below. In particular:
- - The database is migrated automatically to schema v32.
- - Pre-built Linux binaries now require glibc 2.34 o

Recommended actions
- - Upgrade Lighthouse to v8.3.0 or later
- - Check the release notes for any coordinated upgrade deadline or required configuration change

Source & attribution
This 0xCERT advisory relays the Lighthouse v8.3.0 release notes: https://github.com/sigp/lighthouse/releases/tag/v8.3.0. Refer to the upstream project for the authoritative record and any follow-up security advisories.

References
- ----------
- - https://github.com/sigp/lighthouse/releases/tag/v8.3.0

Verify with the 0xCERT OpenPGP key: https://www.0xcert.com/pgp.asc
Fingerprint: 5F94 3ED1 1E50 CF31 2128  C493 CCC7 D9EC 9415 723D

-----BEGIN PGP SIGNATURE-----

wrsEARYKAG0FgmrWqA4JEDe9Tbcr+ZxrRRQAAAAAABwAIHNhbHRAbm90YXRp
b25zLm9wZW5wZ3Bqcy5vcmdMqqxa6XXwHD512f0OVP/cWHVv4w0Gp/o2P8jE
dahbthYhBGCkkFZbJcT5QWu27ze9Tbcr+ZxrAAARbgD/Tvj4n1zvHRvaemHg
KQjGpPCCu8YkIki+7FwugKlFNQ4BAPp+8ChuUSkyWPjc//0rEH5leJDstrk0
zIvLQYERx0QN
=hkDO
-----END PGP SIGNATURE-----