Skip to content

Commit a2553e0

Browse files
alpejulienrbrtAlex | Interchain Labs
authored
Merge commit from fork
* Prevent empty groups (cherry picked from commit 95090a0ec1f193104ba7d6d033a490d1515e54d8) * Handle inflight proposals (cherry picked from commit 855983471882068894ed7952b592ab3e61b464b9) * Update changelog * Imports only * Set release date * updates * Update RELEASE_NOTES.md * Update RELEASE_NOTES.md * Update CHANGELOG.md --------- Co-authored-by: Julien Robert <[email protected]> Co-authored-by: Alex | Interchain Labs <[email protected]>
1 parent f008f84 commit a2553e0

File tree

7 files changed

+146
-132
lines changed

7 files changed

+146
-132
lines changed

CHANGELOG.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -37,6 +37,12 @@ Ref: https://keepachangelog.com/en/1.0.0/
3737

3838
## [Unreleased]
3939

40+
## [v0.47.16](https://github.com/cosmos/cosmos-sdk/releases/tag/v0.47.16) - 2025-02-20
41+
42+
### Bug Fixes
43+
44+
* [GHSA-x5vx-95h7-rv4p](https://github.com/cosmos/cosmos-sdk/security/advisories/GHSA-x5vx-95h7-rv4p) Fix Group module can halt chain when handling a malicious proposal
45+
4046
## [v0.47.15](https://github.com/cosmos/cosmos-sdk/releases/tag/v0.47.15) - 2024-12-16
4147

4248
### Bug Fixes

RELEASE_NOTES.md

Lines changed: 8 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -1,18 +1,16 @@
1-
# Cosmos SDK v0.47.15 Release Notes
1+
# Cosmos SDK v0.47.16 Release Notes
22

33
💬 [**Release Discussion**](https://github.com/orgs/cosmos/discussions/6)
44

55
## 🚀 Highlights
66

7-
This release fixes [ABS-0043/ABS-0044](https://github.com/cosmos/cosmos-sdk/security/advisories/GHSA-8wcc-m6j2-qxvm). Check the advisory for more information.
7+
This patch release fixes [GHSA-x5vx-95h7-rv4p](https://github.com/cosmos/cosmos-sdk/security/advisories/GHSA-x5vx-95h7-rv4p).
8+
It resolves a `x/group` module issue that can halt chain when handling a malicious proposal.
9+
Only users of the `x/group` module are affected by this issue.
810

9-
Additionally, this release is mainly here to disclose the incoming end-of-life of the `v0.47.x` line.
11+
We recommended to upgrade to this patch release as soon as possible.
12+
When upgrading from <= v0.47.15, please use a chain upgrade to ensure that 2/3 of the validator power upgrade to v0.47.16.
1013

11-
Check out the [changelog](https://github.com/cosmos/cosmos-sdk/blob/v0.47.15/CHANGELOG.md) for an exhaustive list of changes or [compare changes](https://github.com/cosmos/cosmos-sdk/compare/v0.47.14...v0.47.15) from last release.
14+
## 📝 Changelog
1215

13-
## End-of-Life Notice
14-
15-
`v0.47.15` is the last release of the `v0.47.x` line. Per this version, the v0.47.x line reached its end-of-life.
16-
The SDK team maintains the [latest two major versions of the SDK](https://github.com/cosmos/cosmos-sdk/blob/main/RELEASE_PROCESS.md#major-release-maintenance). This means no features, improvements or bug fixes will be backported to the `v0.47.x` line. Per our policy, the `v0.47.x` line will receive security patches only.
17-
18-
We encourage all chains to upgrade to Cosmos SDK Olympus (`rc`) (`v0.52.0`), or the `v0.50.x` line.
16+
Check out the [changelog](https://github.com/cosmos/cosmos-sdk/blob/v0.47.16/CHANGELOG.md) for an exhaustive list of changes or [compare changes](https://github.com/cosmos/cosmos-sdk/compare/v0.47.15...v0.47.16) from last release.

0 commit comments

Comments
 (0)