arno/trezor-firmware
1
0
Fork 0
mirror of https://github.com/trezor/trezor-firmware.git synced 2025-06-26 01:42:34 +00:00
Code Issues Releases Wiki Activity

docs: add security fixes to changelogs

Browse Source
This commit is contained in:
Martin Milata 2021-06-30 18:32:58 +02:00
parent 5fb0f9a6c5
commit 01c1ae426f
11 changed files with 16 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
core/.changelog.d/noissue.security
View File

@ -1 +0,0 @@
Disable all testnet coins from accessing Bitcoin paths.

1
core/.changelog.d/noissue.security.1
View File

@ -1 +0,0 @@
Restrict BIP-45 paths to Bitcoin and coins with strong replay protection.

1
core/.changelog.d/noissue.security.2
View File

@ -1 +0,0 @@
Ensure that all testnet coins use SLIP-44 coin type 1.

5
core/CHANGELOG.md
View File

@ -26,6 +26,11 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
- Fix red screen on shutdown. [#1658] - Fix red screen on shutdown. [#1658]
- Empty passphrase is properly cached in Cardano functions [#1659] - Empty passphrase is properly cached in Cardano functions [#1659]
### Security
- Ensure that all testnet coins use SLIP-44 coin type 1.
- Disable all testnet coins from accessing Bitcoin paths.
- Restrict BIP-45 paths to Bitcoin and coins with strong replay protection.
## 2.4.0 [9th June 2021] ## 2.4.0 [9th June 2021]

1
legacy/firmware/.changelog.d/1660.fixed
View File

@ -1 +0,0 @@
Allow non-standard paths used by Unchained Capital, Green Address and Casa.

1
legacy/firmware/.changelog.d/noissue.security
View File

@ -1 +0,0 @@
Don't show addresses that have an unrecognized path.

1
legacy/firmware/.changelog.d/noissue.security.1
View File

@ -1 +0,0 @@
Disable all testnet coins from accessing Bitcoin paths.

1
legacy/firmware/.changelog.d/noissue.security.2
View File

@ -1 +0,0 @@
Ensure that all testnet coins use SLIP-44 coin type 1.

1
legacy/firmware/.changelog.d/noissue.security.3
View File

@ -1 +0,0 @@
Restrict the BIP-32 path ranges of account, change and address_index fields.

1
legacy/firmware/.changelog.d/noissue.security.4
View File

@ -1 +0,0 @@
Restrict BIP-45 paths to Bitcoin and coins with strong replay protection.

11
legacy/firmware/CHANGELOG.md
View File

@ -10,6 +10,16 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
- Removed support for Firo [#1647] - Removed support for Firo [#1647]
- Removed support for Hatch [#1650] - Removed support for Hatch [#1650]
### Fixed
- Allow non-standard paths used by Unchained Capital, Green Address and Casa. [#1660]
### Security
- Ensure that all testnet coins use SLIP-44 coin type 1.
- Restrict BIP-45 paths to Bitcoin and coins with strong replay protection.
- Don't show addresses that have an unrecognized path.
- Disable all testnet coins from accessing Bitcoin paths.
- Restrict the BIP-32 path ranges of `account`, `change` and `address_index` fields.
## 1.10.1 [9th June 2021] ## 1.10.1 [9th June 2021]
@ -400,3 +410,4 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
[#1627]: https://github.com/trezor/trezor-firmware/issues/1627 [#1627]: https://github.com/trezor/trezor-firmware/issues/1627
[#1647]: https://github.com/trezor/trezor-firmware/issues/1647 [#1647]: https://github.com/trezor/trezor-firmware/issues/1647
[#1650]: https://github.com/trezor/trezor-firmware/issues/1650 [#1650]: https://github.com/trezor/trezor-firmware/issues/1650
[#1660]: https://github.com/trezor/trezor-firmware/issues/1660