diff --git a/CHANGELOG.md b/CHANGELOG.md index b757c3f91..4f00d853f 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,6 +1,6 @@ # Changelog -## v0.34.5 +## v0.34.6 *February 18, 2021* @@ -23,7 +23,7 @@ The introduction of the typed logger meant that previously un-logged fields with interfaces are now sometimes logged, including the private key material inside the `FilePV` struct. -Tendermint Core v0.34.5 fixes this issue; however, we strongly recommend that all validators +Tendermint Core v0.34.6 fixes this issue; however, we strongly recommend that all validators use remote signer implementations instead of `FilePV` in production. Thank you to @joe-bowman for his assistance with this vulnerability and a particular @@ -35,6 +35,12 @@ Friendly reminder: We have a [bug bounty program](https://hackerone.com/tendermi - [consensus] [\#6128](https://github.com/tendermint/tendermint/pull/6128) Remove privValidator from log call (@tessr) +## v0.34.5 + +*February 18, 2021* + +_Tendermint Core v0.34.5 has been recalled._ + ## v0.34.4 *February 11, 2021*