From eff1b16a0c5c8ea6cc9160da6bae3f6aca1c8b5b Mon Sep 17 00:00:00 2001 From: Tess Rinearson Date: Tue, 19 Jan 2021 18:01:59 +0100 Subject: [PATCH] changelog: update changelog for v0.34.3 (#5927) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit (No changelog pending updates, since we all forgot to update the changelog pending with all these changes 🤡 ) --- CHANGELOG.md | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 02c0c2e08..aaa6a51f3 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,23 @@ # Changelog +## v0.34.3 + +*January 19, 2021* + +This release includes a fix for a high-severity security vulnerability. +More information on this vulnerability will be released on January 26, 2021 +and this changelog will be updated. + +It also updates GoGo Protobuf to 1.3.2 in order to pick up the fix for +https://nvd.nist.gov/vuln/detail/CVE-2021-3121. + +Friendly reminder: We have a [bug bounty program](https://hackerone.com/tendermint). + +### BUG FIXES + +- [evidence] [N/A] Use correct source of evidence time (@cmwaters) +- [proto] [\#5886](https://github.com/tendermint/tendermint/pull/5889) Bump gogoproto to 1.3.2 (@marbar3778) + ## v0.34.2 *January 12, 2021*