Skip to content

Commit

Permalink
Problem: vulnerable ibc-go dependency (#633)
Browse files Browse the repository at this point in the history
Solution: updated the ibc-go dependency to 1.0.1
  • Loading branch information
tomtau authored Aug 26, 2021
1 parent 4bc28eb commit b4b4d97
Show file tree
Hide file tree
Showing 4 changed files with 13 additions and 6 deletions.
7 changes: 7 additions & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,12 @@
# Changelog

*August 26, 2021*

## v3.0.1
This version is identical to the v3.0.0, but updated the IBC dependency to 1.0.1 which contains a security patch.
*WARNING*: DO NOT upgrade to this binary yet; instructions are going to be published later
on https://crypto.org/docs/getting-started/upgrade_guide.html .

*August 23, 2021*

## v3.0.0
Expand Down
2 changes: 1 addition & 1 deletion go.mod
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ go 1.16
require (
github.com/confluentinc/bincover v0.1.0
github.com/cosmos/cosmos-sdk v0.43.0
github.com/cosmos/ibc-go v1.0.0
github.com/cosmos/ibc-go v1.0.1
github.com/cosmos/ledger-go v0.9.2 // indirect
github.com/gogo/protobuf v1.3.3
github.com/golang/protobuf v1.5.2
Expand Down
4 changes: 2 additions & 2 deletions go.sum
Original file line number Diff line number Diff line change
Expand Up @@ -167,8 +167,8 @@ github.com/cosmos/go-bip39 v1.0.0/go.mod h1:RNJv0H/pOIVgxw6KS7QeX2a0Uo0aKUlfhZ4x
github.com/cosmos/iavl v0.15.3/go.mod h1:OLjQiAQ4fGD2KDZooyJG9yz+p2ao2IAYSbke8mVvSA4=
github.com/cosmos/iavl v0.16.0 h1:ICIOB8xysirTX27GmVAaoeSpeozzgSu9d49w36xkVJA=
github.com/cosmos/iavl v0.16.0/go.mod h1:2A8O/Jz9YwtjqXMO0CjnnbTYEEaovE8jWcwrakH3PoE=
github.com/cosmos/ibc-go v1.0.0 h1:RtIRERSENyApp6WK7Germ3/wq8xvHxfsqfW/Xh+CJ2o=
github.com/cosmos/ibc-go v1.0.0/go.mod h1:2wHKQUa+BLJMEyN635KrHfmTTwSNHBtXcqdY8JWGuXA=
github.com/cosmos/ibc-go v1.0.1 h1:3g2e4lghZea6Yrvj5PBViZrHdcEbG6iq7eulq3vsmxk=
github.com/cosmos/ibc-go v1.0.1/go.mod h1:pfLnoW9yUdjSMw3rD0baIsqLBauVAlGFQ1zQ3HGK6J0=
github.com/cosmos/ledger-go v0.9.2 h1:Nnao/dLwaVTk1Q5U9THldpUMMXU94BOTWPddSmVB6pI=
github.com/cosmos/ledger-go v0.9.2/go.mod h1:oZJ2hHAZROdlHiwTg4t7kP+GKIIkBT+o6c9QWFanOyI=
github.com/cpuguy83/go-md2man v1.0.10/go.mod h1:SmD6nW6nTyfqj6ABTjUi3V3JVMnlJmwcJI5acqYI6dE=
Expand Down
6 changes: 3 additions & 3 deletions gomod2nix.toml
Original file line number Diff line number Diff line change
Expand Up @@ -709,12 +709,12 @@
sha256 = "0cvgzjfbxhrada3h6lmcc9pvjjsbi3hz84cxj4xfjglddsm7virj"

["github.com/cosmos/ibc-go"]
sumVersion = "v1.0.0"
sumVersion = "v1.0.1"
["github.com/cosmos/ibc-go".fetch]
type = "git"
url = "https://github.com/cosmos/ibc-go"
rev = "e9f1dc2a4f8631749c72e48957848cab3eb10762"
sha256 = "1n0n5wvsqf9zy5dq7sgi96s8invvicdc14dkj90gri2a1djdcdai"
rev = "446797b77958996bf1f1d15205cb75a4dbe1f3fa"
sha256 = "1vyjk79c0hjigpjamc2xibgjlmrljrd1wpx2lj52j5biff46z5hk"

["github.com/cosmos/ledger-cosmos-go"]
sumVersion = "v0.9.10-0.20200929055312-01e1d341de0f"
Expand Down

0 comments on commit b4b4d97

Please sign in to comment.