mainnet v1.52.3 emergency private release
45 views
Skip to first unread message
Eugene Boguslavsky
Jul 28, 2025, 4:50:37 PMJul 28
to Node Operators
We have an emergency mainnet-v1.52.3 private release for you to install on your mainnet node today. This release contains an upgrade to protocol version 89, which can be applied as early as tomorrow at the epoch change if 2f+1+0.5f validators by stake have upgraded.
An internal audit conducted by the Mysten Labs security team found two issues:
During multisig validation, a potential mismatch may occur between the key type as declared on the multisig public key and as provided in the combined signature. That could cause, for instance, a secp256k1 key to be interpreted as a secp256r1 key, resulting in signature validation failure. The signature validation was made stricter out of an abundance of caution.
The computation for determining a linkage for packages at publication could potentially determine an invalid linkage.
Since this is a private security upgrade, please follow the guide at https://github.com/MystenLabs/sui/blob/main/nre/sui_for_node_operators.md#private-security-fixes to verify these binaries in this release.
Commit Sha: 2ae3516a77d8f3083d7bc24b5228b6bfd4a83117
Branch: private branch, the branch and release notes will be published after we successfully upgrade protocol versions tomorrow
Release Tag: mainnet-v1.52.3 (to be created tomorrow after epoch change)
Release Notes: (to be created tomorrow after epoch change)
Binary download: https://sui-releases.s3-accelerate.amazonaws.com/2ae3516a77d8f3083d7bc24b5228b6bfd4a83117/sui-node
Docker download: docker pull mysten/sui-node:2ae3516a77d8f3083d7bc24b5228b6bfd4a83117
An internal audit conducted by the Mysten Labs security team found two issues:
During multisig validation, a potential mismatch may occur between the key type as declared on the multisig public key and as provided in the combined signature. That could cause, for instance, a secp256k1 key to be interpreted as a secp256r1 key, resulting in signature validation failure. The signature validation was made stricter out of an abundance of caution.
The computation for determining a linkage for packages at publication could potentially determine an invalid linkage.
Since this is a private security upgrade, please follow the guide at https://github.com/MystenLabs/sui/blob/main/nre/sui_for_node_operators.md#private-security-fixes to verify these binaries in this release.
Commit Sha: 2ae3516a77d8f3083d7bc24b5228b6bfd4a83117
Branch: private branch, the branch and release notes will be published after we successfully upgrade protocol versions tomorrow
Release Tag: mainnet-v1.52.3 (to be created tomorrow after epoch change)
Release Notes: (to be created tomorrow after epoch change)
Binary download: https://sui-releases.s3-accelerate.amazonaws.com/2ae3516a77d8f3083d7bc24b5228b6bfd4a83117/sui-node
Docker download: docker pull mysten/sui-node:2ae3516a77d8f3083d7bc24b5228b6bfd4a83117
Reply all
Reply to author
Forward
0 new messages