Merge pull request #3152 from stacks-network/fix/spv

Release 2.05.0.2.1 (hotfix: check chain work when processing reorgs)
stacks-network · Jun 3, 2022 · 38aa968 · 38aa968
2 parents 26bfd5f + 762e007
commit 38aa968
Show file tree

Hide file tree

Showing 8 changed files with 2,588 additions and 115 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -5,6 +5,14 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to the versioning scheme outlined in the [README.md](README.md).
 
+## [2.05.0.2.1]
+
+### Fixed
+- Fixed a security bug in the SPV client whereby the chain work was not being
+  considered at all when determining the canonical Bitcoin fork.  The SPV client
+now only accepts a new Bitcoin fork if it has a higher chain work than any other
+previously-seen chain (#3152).
+
 ## [2.05.0.2.0]
 
 ### IMPORTANT! READ THIS FIRST