Skip to content

Commit

Permalink
finalize changelog and release notes (#8804)
Browse files Browse the repository at this point in the history
Co-authored-by: Barrie Byron <barrie.byron@tendermint.com>
Co-authored-by: Cory <cjlevinson@gmail.com>
  • Loading branch information
3 people authored Mar 6, 2021
1 parent 3bbda14 commit a8ace5a
Show file tree
Hide file tree
Showing 2 changed files with 13 additions and 3 deletions.
1 change: 1 addition & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -41,6 +41,7 @@ Ref: https://keepachangelog.com/en/1.0.0/
### Improvements

* (x/ibc) [\#8624](https://github.com/cosmos/cosmos-sdk/pull/8624) Emit full header in IBC UpdateClient message.
* (x/crisis) [\#8621](https://github.com/cosmos/cosmos-sdk/issues/8621) crisis invariants names now print to loggers.

### Bug fixes

Expand Down
15 changes: 12 additions & 3 deletions RELEASE_NOTES.md
Original file line number Diff line number Diff line change
@@ -1,7 +1,16 @@
# Cosmos SDK v0.42.0 "Stargate" Release Notes

This release contains a single, but important security fix for all non "Cosmos Hub" chains (e.g. any chain that does not use the default `cosmos` bech32 prefix). The fix addresses a bug in evidence handling on the Cosmos SDK that rendered the `v0.41.x` and `v0.40.x` release series unsafe for most chains. Please see the PR below for more details.
This release includes an important security fix for all non "Cosmos Hub" chains (e.g. any chain that does not use the default `cosmos` bech32 prefix), and a few performance improvements.

## Bug Fixes
See the [Cosmos SDK v0.42.0 milestone](https://github.com/cosmos/cosmos-sdk/milestone/42?closed=1) on our issue tracker for further details.

- [#8461](https://github.com/cosmos/cosmos-sdk/pull/8461) Fix bech32 prefix in evidence validator address conversion
# Security fix: validator address conversion in evidence handling

The security fix resolves the issue regarding incorrect handling of validators' consensus addresses. Because of this incorrect handling, Cosmos SDK apps that were not using the default `cosmos` Bech32 address prefix were not able to jail validators that committed misbehaviors such as double signing.

Although the issue does **not** affect the Cosmos Hub, this issue potentially renders the `v0.41` and `v0.40` release series unsafe for most chains.

# Full header is emitted on IBC UpdateClient message event

The event emitted by the IBC UpdateClient message now contains the full header.
This change makes header tracking easier and improves the handling of misbehaviors.

0 comments on commit a8ace5a

Please sign in to comment.