Skip to content

chore: bump btcec to v2.3.2, x/crypto to v0.31.0#2238

Merged
blindchaser merged 5 commits intomainfrom
yiren/cve-fix
Jul 24, 2025
Merged

chore: bump btcec to v2.3.2, x/crypto to v0.31.0#2238
blindchaser merged 5 commits intomainfrom
yiren/cve-fix

Conversation

@blindchaser
Copy link
Copy Markdown
Contributor

  • fix CVE-2022-44797 (github.com/btcsuite/btcd)
  • fix CVE-2024-45337 (golang.org/x/crypto)
  • update btcec API usage from v1 to v2
  • update ParsePubKey calls to new single-parameter signature

Describe your changes and provide context

Testing performed to validate your change

- fix CVE-2022-44797 (github.com/btcsuite/btcd)
- fix CVE-2024-45337 (golang.org/x/crypto)
- update btcec API usage from v1 to v2
- update ParsePubKey calls to new single-parameter signature
@codecov
Copy link
Copy Markdown

codecov bot commented Jul 15, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 60.10%. Comparing base (b16814c) to head (f05ab60).
Report is 2 commits behind head on main.

Additional details and impacted files

Impacted file tree graph

@@            Coverage Diff             @@
##             main    #2238      +/-   ##
==========================================
- Coverage   60.12%   60.10%   -0.02%     
==========================================
  Files         309      311       +2     
  Lines       29995    30092      +97     
==========================================
+ Hits        18035    18088      +53     
- Misses      10685    10725      +40     
- Partials     1275     1279       +4     
Files with missing lines Coverage Δ
precompiles/addr/addr.go 64.88% <100.00%> (ø)
utils/helpers/address.go 100.00% <100.00%> (ø)
x/evm/ante/preprocess.go 79.48% <100.00%> (ø)

... and 6 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@sei-will sei-will self-requested a review July 17, 2025 11:42
Copy link
Copy Markdown
Contributor

@stevenlanders stevenlanders left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

we just need to make usre we just update the sei-cosmos and sei-tendermint references to the tags (once those are tagged)

@blindchaser blindchaser requested a review from philipsu522 as a code owner July 24, 2025 14:31
@blindchaser blindchaser merged commit 9836e33 into main Jul 24, 2025
50 checks passed
@blindchaser blindchaser deleted the yiren/cve-fix branch July 24, 2025 14:45
yzang2019 added a commit that referenced this pull request Jul 24, 2025
* main:
  Optimization: CreateAccount only clears state if code hash exists (#2255)
  chore: bump btcec to v2.3.2, x/crypto to v0.31.0 (#2238)
  Use legacy transaction decoder for historical height (#2234)
  Make flushing receipt synchronous (#2250)
  [SEI-9824][SEI-9825] Update oracle MidBlock logic (#2251)
  Fix data race in price-feeder websocket controller (#2256)
  Add tests for price feeder providers (#2253)
  remove arm64 target from CI due to slow running (#2254)
  Harden solo precompile (#2236)
  Add CODEOWNERS (#2237)
  Require MsgClaim sender to match signer (#2232)
  Remove writeset estimation to alleviate AccAddress mutex contention (#2239)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants