From aa086bcbe0a385c169ae551f12418e0e720b881c Mon Sep 17 00:00:00 2001 From: Robert Zaremba Date: Tue, 12 Oct 2021 15:48:00 +0200 Subject: [PATCH 1/2] v0.44.1 Release Notes --- CHANGELOG.md | 4 ++++ RELEASE_NOTES.md | 22 ++++------------------ 2 files changed, 8 insertions(+), 18 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index b15bcfaf9f9e..79b9c8152281 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -37,6 +37,10 @@ Ref: https://keepachangelog.com/en/1.0.0/ ## [Unreleased] +## [v0.44.2](https://github.com/cosmos/cosmos-sdk/releases/tag/v0.44.2) - 2021-10-12 + +Security Release. No braking changes related to 0.44.x. + ## [v0.44.1](https://github.com/cosmos/cosmos-sdk/releases/tag/v0.44.1) - 2021-09-29 ### Improvements diff --git a/RELEASE_NOTES.md b/RELEASE_NOTES.md index 0795e40c5be5..4c0059e5fcba 100644 --- a/RELEASE_NOTES.md +++ b/RELEASE_NOTES.md @@ -1,21 +1,7 @@ -# Cosmos SDK v0.44.1 Release Notes +# Cosmos SDK v0.44.2 Release Notes -This release introduces bug fixes and improvements on the Cosmos SDK v0.44 series. +Recently, the Cosmos-SDK team became aware of a high-severity security vulnerability that impacts Cosmos-SDK v0.43.x and v0.44.x and can result in a consensus halt. User funds are NOT at risk; however, the vulnerability can result in a chain halt. This vulnerability does not impact the current Cosmos Hub, though other Cosmos-SDK based blockchains using v0.43.x or v0.44.x may be affected and are advised to update to v0.44.2 immediately. -The main bug fix concerns all users performing in-place store migrations from v0.42 to v0.44. A source of non-determinism in the upgrade process has been [detected and fixed](https://github.com/cosmos/cosmos-sdk/pull/10189) in this release, causing consensus errors. As such, **v0.44.0 is not safe to use when performing v0.42->v0.44 in-place store upgrades**, please use this release v0.44.1 instead. This does not impact genesis JSON dump upgrades nor fresh chains starting with v0.44. +Nodes can update their software independently of each other (no coordinated chain restart necessary), but should do so as soon as they are able. -Another bug fix concerns calling the ABCI `Query` method using `client.Context`. We modified ABCI queries to use `abci.QueryRequest`'s `Height` field if it is non-zero, otherwise continue using `client.Context`'s height. This is a minor client-breaking change for users of the `client.Context`. - -Some CLI fixes are also included, such as: - -- using pre-configured data for the CLI `add-genesis-account` command ([\#9969](https://github.com/cosmos/cosmos-sdk/pull/9969)), -- ensuring the `init` command reads the `--home` flag value correctly ([#10104](https://github.com/cosmos/cosmos-sdk/pull/10104)), -- fixing the error message when `period` or `period-limit` flag is not set on a feegrant grant transaction [\#10049](https://github.com/cosmos/cosmos-sdk/issues/10049). - -v0.44.1 also includes performance improvements, namely: - -- IAVL update to v0.17.1 which includes performance improvements on a batch load [\#10040](https://github.com/cosmos/cosmos-sdk/pull/10040), -- Speedup coins.AmountOf(), by removing many intermittent regex calls [\#10021](https://github.com/cosmos/cosmos-sdk/pull/10021), -- Improve CacheKVStore datastructures / algorithms, to no longer take O(N^2) time when interleaving iterators and insertions [\#10026](https://github.com/cosmos/cosmos-sdk/pull/10026). - -See the [Cosmos SDK v0.44.1 milestone](https://github.com/cosmos/cosmos-sdk/milestone/56?closed=1) on our issue tracker for the exhaustive list of all changes. +The full disclosure will be announced a week after the release. From b5b5c3b876719f9d37f4460ae6d4b96c84b892c9 Mon Sep 17 00:00:00 2001 From: Robert Zaremba Date: Tue, 12 Oct 2021 15:57:14 +0200 Subject: [PATCH 2/2] Apply suggestions from code review Co-authored-by: Aaron Craelius --- CHANGELOG.md | 2 +- RELEASE_NOTES.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 79b9c8152281..ba0290bd11a6 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -39,7 +39,7 @@ Ref: https://keepachangelog.com/en/1.0.0/ ## [v0.44.2](https://github.com/cosmos/cosmos-sdk/releases/tag/v0.44.2) - 2021-10-12 -Security Release. No braking changes related to 0.44.x. +Security Release. No breaking changes related to 0.44.x. ## [v0.44.1](https://github.com/cosmos/cosmos-sdk/releases/tag/v0.44.1) - 2021-09-29 diff --git a/RELEASE_NOTES.md b/RELEASE_NOTES.md index 4c0059e5fcba..0ef92ff1d4d7 100644 --- a/RELEASE_NOTES.md +++ b/RELEASE_NOTES.md @@ -4,4 +4,4 @@ Recently, the Cosmos-SDK team became aware of a high-severity security vulnerabi Nodes can update their software independently of each other (no coordinated chain restart necessary), but should do so as soon as they are able. -The full disclosure will be announced a week after the release. +A full disclosure will be published a week after the release.