Update Fixed Validation of VoteExtensionsEnableHeight can cause cha…

…in halt in Go cosmos cometbft (#1398) A vulnerability in CometBFT’s validation logic for `VoteExtensionsEnableHeight` can result in a chain halt when triggered through a governance parameter change proposal on an ABCI2 Application Chain. If a parameter change proposal including a `VoteExtensionsEnableHeight` modification is passed, nodes running the affected versions may panic, halting the network. Co-authored-by: Justin Tieri <[email protected]>
cosmos · Feb 28, 2024 · 2cc152b · 2cc152b
1 parent f6f622e
commit 2cc152b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/interchaintest/go.mod b/interchaintest/go.mod
@@ -8,7 +8,7 @@ require (
 	cosmossdk.io/x/feegrant v0.1.0
 	cosmossdk.io/x/upgrade v0.1.0
 	github.com/avast/retry-go/v4 v4.5.1
-	github.com/cometbft/cometbft v0.38.2
+	github.com/cometbft/cometbft v0.38.5
 	github.com/cosmos/cosmos-sdk v0.50.3
 	github.com/cosmos/go-bip39 v1.0.0
 	github.com/cosmos/gogoproto v1.4.11