fluencelabs/tendermint
1
0
Fork 0
mirror of https://github.com/fluencelabs/tendermint synced 2025-04-25 14:52:17 +00:00
Code Issues Projects Releases Wiki Activity

Merge pull request #4032 from tendermint/v0.32.5-backport

Browse Source 
V0.32.5 backport
This commit is contained in:
Anton Kaliaev 2019-10-02 11:11:13 -07:00 committed by GitHub
commit 004ff3ac38
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 23 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
CHANGELOG.md
View File

@ -1,5 +1,23 @@
# Changelog # Changelog
## v0.32.5
*September 30, 2019*
This release fixes a major security vulnerability found in the `p2p` package.
All clients are recommended to upgrade. See [TODO](hxxp://githublink) for
details.
Special thanks to [fudongbai](https://hackerone.com/fudongbai) for discovering
and reporting this issue.
Friendly reminder, we have a [bug bounty
program](https://hackerone.com/tendermint).
### SECURITY:
- [p2p] [TODO](hxxp://githublink) Fix for panic on nil public key send to a peer
## v0.32.4 ## v0.32.4
*September 19, 2019* *September 19, 2019*

2
CHANGELOG_PENDING.md
View File

@ -1,4 +1,4 @@
## v0.32.5 ## v0.32.6
\*\* \*\*

2
version/version.go
View File

@ -20,7 +20,7 @@ const (
// Must be a string because scripts like dist.sh read this file. // Must be a string because scripts like dist.sh read this file.
// XXX: Don't change the name of this variable or you will break // XXX: Don't change the name of this variable or you will break
// automation :) // automation :)
TMCoreSemVer = "0.32.4" TMCoreSemVer = "0.32.5"
// ABCISemVer is the semantic version of the ABCI library // ABCISemVer is the semantic version of the ABCI library
ABCISemVer = "0.16.1" ABCISemVer = "0.16.1"