Geth 1.17.8 is a security release: DoS fixes, most of them for after Amsterdam

Serguey Asael Shinder09 October 2026, 07:532 min read

The go-ethereum team released Geth 1.17.8 ("Protein Sludge Pack") on 8 October and called it a security-focused release fixing several denial-of-service risks. The team notes that most of the fixes concern bugs that only become possible after the Amsterdam fork activates — so they close attack paths before the upgrade exposes them, rather than patching an active exploit on mainnet today.

Security and DoS hardening.

• DoS resistance improved for multiple packet handlers in the eth and snap p2p protocols.
• JUMPDEST analysis caching hardened against attack cases after Amsterdam.
• A post-Amsterdam DoS vector related to block access list (BAL) accounts resolved.
• The IP address predictor now requires verification before accepting statements from peers.
• A rogue STUN server could crash the node with an invalid response — fixed.

Correctness, mostly around Amsterdam.

• eth_simulateV1 now reports ETH transfer logs correctly post-Amsterdam, and its virtual blocks align with the Amsterdam spec.
• For eth_call and related calls, the transaction gas limit is no longer applied after Amsterdam.
• A crash in journaled live tracers after Amsterdam (creator nonce change without an open frame) is fixed, as is a correctness issue in the EIP-8070 sparse blobpool.
• eth_createAccessList works when the sender has no balance; eth_capabilities reports receipt availability bounded by the transaction-hash index.

Operational fixes. Beacon-head processing after an unclean shutdown, a stuck blsync when its server is overloaded, IPv4/IPv6 transitions for DNS-resolved static nodes, sequential nonces when abigen deploys library dependencies, and — worth noting for testnet operators — an incorrect hard-coded genesis time for the Hoodi beacon chain. The PPA now also publishes for Ubuntu 26.04.

Who should upgrade. Anyone running Geth ahead of Amsterdam: the DoS fixes matter most once the fork is live, and upgrading now avoids doing it under time pressure. Binaries are on the downloads page and Docker images under ethereum/client-go with the stable tag.

Source: go-ethereum release "Protein Sludge Pack (v1.17.8)", 8 October 2026 — https://github.com/ethereum/go-ethereum/releases/tag/v1.17.8