Hi All,
I am using the Start9 Hosted BTCPayserver and just saw the active vulnerability. There is no Update available in the Start9 UI - Luckily I dont have LN enabled and I use a hardware wallet. But I assume that there are other vulnerabilities. What do I do? Is the newer version being loaded to Start9?
You need to be on StartOS v0.4.0.1 otherwise the update won’t appear. If you don’t have an up-to-date OS, you should stop BTCPay until you do.
We’ll do a one-off update for retired v0.3.5.1 too, just this once.
Appreciate the Prompt reply! I had a hunch that may be it. I am still on the older version since I am remote at the moment. I believe that i can accomodate the Start9 update remotely but need to dive into the guide. Im running CLN, RTL also so just need to be careful. (not connected to BTCPay, just a routing Node) - Great news on the One off update for v0.3.5.1 is that coming out soon?
I would imagine you now have it installed. Don’t forget to also update LND and stomp the old macaroons.
Thank you! I see the update now and applied it. - Luckily I wasnt using LND or any lightning payments in my BTCPay instance