tendermint v0.34.9 Release Notes

  • April 8, 2021

    ๐Ÿš€ This release fixes a moderate severity security issue, Security Advisory Alderfly, which impacts all networks that rely on Tendermint light clients. ๐Ÿš€ Further details will be released once networks have upgraded.

    ๐Ÿš€ This release also includes a small Go API-breaking change, to reduce panics in the RPC layer.

    ๐Ÿš€ Special thanks to our external contributors on this release: @gchaincl

    Friendly reminder: We have a bug bounty program.


    • Go API
      • [rpc/jsonrpc/server] #6204 Modify WriteRPCResponseHTTP(Error) to return an error (@melekes)


    • [rpc] #6226 Index block events and expose a new RPC method, /block_search, to allow querying for blocks by BeginBlock and EndBlock events (@alexanderbez)

    ๐Ÿ› BUG FIXES

    • [rpc/jsonrpc/server] #6191 Correctly unmarshal RPCRequest when data is null (@melekes)
    • [p2p] #6289 Fix "unknown channels" bug on CustomReactors (@gchaincl)
    • [light/evidence] Adds logic to handle forward lunatic attacks (@cmwaters)