doc: add missed advisory to 31.0 rel notes
What the developer wrote
Authored by fanquake
doc: add missed advisory to 31.0 rel notes
See https://github.com/bitcoin-core/bitcoincore.org/pull/1240 and
https://github.com/bitcoin/bitcoin/pull/35132.
What changed, and why it matters
This is a documentation-only edit to the Bitcoin Core 31.0 release notes. It adds a notice that older versions (28.x and below) are no longer supported and that details of one medium-or-high-severity vulnerability fixed in version 29.0 will be disclosed in two weeks. The commit itself does not change any code, nor does it describe the actual vulnerability.
Treat this commit as a release-process documentation update. Monitor the referenced bitcoincore.org advisory (to be published per the security policy) and the linked pull requests for actionable technical details. No immediate code-level mitigation is required from this commit alone.
Security signals we found
Documentation-only change
Mentions an upcoming disclosure of one medium/high severity vulnerability fixed in Bitcoin Core 29.0
No code, binary, or configuration changes present in the diff
Evidence from the diff
The patch appends a lifecycle/disclosure notice to doc/release-notes/release-notes-31.0.md. It states that 28.x is end-of-life, that one medium/high severity vulnerability fixed in 29.0 will be disclosed in two weeks, and that no low-severity vulnerabilities were fixed in 31.0. No source code, build system, or configuration is modified. The referenced pull requests (bitcoin-core/bitcoincore.org#1240 and bitcoin/bitcoin#35132) are not included in the supplied materials, so the nature of the underlying vulnerability cannot be assessed from the diff alone.
Changed components
doc/release-notes/release-notes-31.0.mdInspect captured patch +10 / −0
diff --git a/doc/release-notes/release-notes-31.0.md b/doc/release-notes/release-notes-31.0.md
index d5dd0f24..7246702a 100644
--- a/doc/release-notes/release-notes-31.0.md
+++ b/doc/release-notes/release-notes-31.0.md
@@ -16,6 +16,16 @@ To receive security and update notifications, please subscribe to:
<https://bitcoincore.org/en/list/announcements/join/>
+
+With the release of this new major version, versions `28.x` and
+older are at "End of Life" and will no longer receive updates.
+
+In accordance with the security policy, we will in two weeks disclose:
+
+* Medium and high severity vulnerabilities fixed in `29.0`. There is one of these.
+
+* Low severity vulnerabilities fixed in `31.0`. There are none of these.
+
How to Upgrade
==============
Why this scored 11/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.