TALOS-2015-0035 / CVE-2015-6031 MiniUPnP Internet Gateway Device Protocol XML Parser Buffer Overflow The releases in this directory contain known security flaws and should not be used. Information about known flaws can be found at the following links: (<0.10.3 & <0.11.1) UPnP vulnerability: https://bitcoin.org/en/alert/2015-10-12-upnp-vulnerability As the vulnerability is in a dependency that is linked into the pre-built binaries, and not in Bitcoin Core's code itself, building from source (against a recent version of libupnp) mitigates it as well.