docs: add security fixes to changelogs

3 years ago · 01c1ae426f
parent 5fb0f9a6c5
commit 01c1ae426f
11 changed files with 16 additions and 9 deletions
--- a/core/.changelog.d/noissue.security
+++ b/core/.changelog.d/noissue.security
@ -1 +0,0 @@
-Disable all testnet coins from accessing Bitcoin paths.
--- a/core/.changelog.d/noissue.security.1
+++ b/core/.changelog.d/noissue.security.1
@ -1 +0,0 @@
-Restrict BIP-45 paths to Bitcoin and coins with strong replay protection.
--- a/core/.changelog.d/noissue.security.2
+++ b/core/.changelog.d/noissue.security.2
@ -1 +0,0 @@
-Ensure that all testnet coins use SLIP-44 coin type 1.
--- a/core/CHANGELOG.md
+++ b/core/CHANGELOG.md
@ -26,6 +26,11 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 - Fix red screen on shutdown.  [#1658]
 - Empty passphrase is properly cached in Cardano functions  [#1659]

+### Security
+- Ensure that all testnet coins use SLIP-44 coin type 1.
+- Disable all testnet coins from accessing Bitcoin paths.
+- Restrict BIP-45 paths to Bitcoin and coins with strong replay protection.
+

 ## 2.4.0 [9th June 2021]

--- a/legacy/firmware/.changelog.d/1660.fixed
+++ b/legacy/firmware/.changelog.d/1660.fixed
@ -1 +0,0 @@
-Allow non-standard paths used by Unchained Capital, Green Address and Casa.
--- a/legacy/firmware/.changelog.d/noissue.security
+++ b/legacy/firmware/.changelog.d/noissue.security
@ -1 +0,0 @@
-Don't show addresses that have an unrecognized path.
--- a/legacy/firmware/.changelog.d/noissue.security.1
+++ b/legacy/firmware/.changelog.d/noissue.security.1
@ -1 +0,0 @@
-Disable all testnet coins from accessing Bitcoin paths.
--- a/legacy/firmware/.changelog.d/noissue.security.2
+++ b/legacy/firmware/.changelog.d/noissue.security.2
@ -1 +0,0 @@
-Ensure that all testnet coins use SLIP-44 coin type 1.
--- a/legacy/firmware/.changelog.d/noissue.security.3
+++ b/legacy/firmware/.changelog.d/noissue.security.3
@ -1 +0,0 @@
-Restrict the BIP-32 path ranges of account, change and address_index fields.
--- a/legacy/firmware/.changelog.d/noissue.security.4
+++ b/legacy/firmware/.changelog.d/noissue.security.4
@ -1 +0,0 @@
-Restrict BIP-45 paths to Bitcoin and coins with strong replay protection.
--- a/legacy/firmware/CHANGELOG.md
+++ b/legacy/firmware/CHANGELOG.md
@ -10,6 +10,16 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 - Removed support for Firo  [#1647]
 - Removed support for Hatch  [#1650]

+### Fixed
+- Allow non-standard paths used by Unchained Capital, Green Address and Casa.  [#1660]
+
+### Security
+- Ensure that all testnet coins use SLIP-44 coin type 1.
+- Restrict BIP-45 paths to Bitcoin and coins with strong replay protection.
+- Don't show addresses that have an unrecognized path.
+- Disable all testnet coins from accessing Bitcoin paths.
+- Restrict the BIP-32 path ranges of `account`, `change` and `address_index` fields.
+

 ## 1.10.1 [9th June 2021]

@ -400,3 +410,4 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 [#1627]: https://github.com/trezor/trezor-firmware/issues/1627
 [#1647]: https://github.com/trezor/trezor-firmware/issues/1647
 [#1650]: https://github.com/trezor/trezor-firmware/issues/1650
+[#1660]: https://github.com/trezor/trezor-firmware/issues/1660
				`@ -1 +0,0 @@`
				`Disable all testnet coins from accessing Bitcoin paths.`
				`@ -1 +0,0 @@`
				`Restrict BIP-45 paths to Bitcoin and coins with strong replay protection.`
				`@ -1 +0,0 @@`
				`Ensure that all testnet coins use SLIP-44 coin type 1.`
				`@ -1 +0,0 @@`
				`Allow non-standard paths used by Unchained Capital, Green Address and Casa.`
				`@ -1 +0,0 @@`
				`Don't show addresses that have an unrecognized path.`
				`@ -1 +0,0 @@`
				`Restrict the BIP-32 path ranges of account, change and address_index fields.`