v1.7.0
·
671 commits
to main
since this release
Immutable
release. Only release title and notes can be modified.
This release is a security release. All users on v1.6.0 or earlier are recommended to upgrade.
Security Fixes
This release addresses the following security advisories:
- GHSA-396x-v8w4-9x82: MemoryMerkleAir allows below-leaf rows to alter memory roots.
- GHSA-j29p-wr24-hp4f: OpenVmHalo2Verifier self-call can bypass proof verification.
- GHSA-w82q-w67c-67wv: OpenVmHalo2Verifier accepts non-canonical app commitments.
Changed
- (Circuits/Memory) Fix a soundness issue in
MemoryMerkleAirby rejecting Merkle expansion rows below the leaf layer, preventing malformed traces from changing the committed memory root without a corresponding memory operation. - (Verifier) Fix a selector-clash issue in the Solidity verifier wrapper to ensure proof verification runs through the generated Halo2 fallback.
- (Verifier) Reject non-canonical BN254 scalar encodings for
appExeCommitandappVmCommitin the Solidity verifier wrapper.
Full Changelog: v1.6.0...v1.7.0