Commit 08132c5d authored by Matthew Slipper's avatar Matthew Slipper Committed by GitHub

Merge pull request #2349 from ethereum-optimism/changeset-release/master

Version Packages
parents 06d821ba aa9b5e1e
---
'@eth-optimism/teleportr': patch
---
Add SuggestGasTipCap fallback
---
'@eth-optimism/data-transport-layer': patch
---
Removes the unused L1DataTransportClient and its dependencies
---
'@eth-optimism/batch-submitter-service': patch
'@eth-optimism/gas-oracle': patch
'@eth-optimism/integration-tests': patch
'@eth-optimism/l2geth': patch
'@eth-optimism/hardhat-node': patch
'@eth-optimism/contracts': patch
'@eth-optimism/data-transport-layer': patch
'@eth-optimism/message-relayer': patch
---
Refactored Dockerfiles
---
'@eth-optimism/common-ts': patch
---
Update log lines for service shutdown
---
'@eth-optimism/indexer': patch
---
Indexer: initial release
---
'@eth-optimism/replica-healthcheck': patch
---
Fixes a bug in the replica-healthcheck dockerfile
---
'@eth-optimism/indexer': patch
---
Bump `go-ethereum` to `v1.10.16`
---
'@eth-optimism/batch-submitter-service': patch
'@eth-optimism/teleportr': patch
---
Count reverted transactions in failed_submissions
---
'@eth-optimism/teleportr': patch
---
Add teleportr API server
---
'@eth-optimism/teleportr': patch
---
Bump `go-ethereum` to `v1.10.16`
---
'@eth-optimism/data-transport-layer': patch
---
dtl: Support basic authentication for RPC endpoints
---
'@eth-optimism/batch-submitter-service': patch
---
Add Min/MaxStateRootElements configuration
---
'@eth-optimism/common-ts': patch
---
Update metric names to include proper snake_case for strings that include "L1" or "L2"
---
'@eth-optimism/common-ts': patch
'@eth-optimism/message-relayer': patch
'@eth-optimism/replica-healthcheck': patch
---
Have BaseServiceV2 add spaces to environment variable names
---
'@eth-optimism/batch-submitter-service': patch
'@eth-optimism/l2geth': patch
---
l2geth: Sync from Backend Queue
---
'@eth-optimism/sdk': patch
---
Comment out non-functional getMessagesByAddress function
---
'@eth-optimism/teleportr': patch
---
Restructure Deposit and CompletedTeleport to use struct embeddings
---
'@eth-optimism/batch-submitter-service': patch
---
Enforce min/max tx size on plaintext batch encoding
---
'@eth-optimism/teleportr': patch
---
Add LoadInTeleport method to database
---
'@eth-optimism/teleportr': patch
---
Add btree index on deposit.txn_hash and deposit.address
# @eth-optimism/batch-submitter-service # @eth-optimism/batch-submitter-service
## 0.1.8
### Patch Changes
- 88601cb7: Refactored Dockerfiles
- 6856b215: Count reverted transactions in failed_submissions
- 9678b357: Add Min/MaxStateRootElements configuration
- f8348862: l2geth: Sync from Backend Queue
- 727b0582: Enforce min/max tx size on plaintext batch encoding
## 0.1.7 ## 0.1.7
### Patch Changes ### Patch Changes
......
{ {
"name": "@eth-optimism/batch-submitter-service", "name": "@eth-optimism/batch-submitter-service",
"version": "0.1.7", "version": "0.1.8",
"private": true, "private": true,
"devDependencies": {} "devDependencies": {}
} }
# @eth-optimism/gas-oracle # @eth-optimism/gas-oracle
## 0.1.8
### Patch Changes
- 88601cb7: Refactored Dockerfiles
## 0.1.7 ## 0.1.7
### Patch Changes ### Patch Changes
......
{ {
"name": "@eth-optimism/gas-oracle", "name": "@eth-optimism/gas-oracle",
"version": "0.1.7", "version": "0.1.8",
"private": true, "private": true,
"devDependencies": {} "devDependencies": {}
} }
# @eth-optimism/indexer
## 0.0.2
### Patch Changes
- 0e40dcb6: Indexer: initial release
- 93131547: Bump `go-ethereum` to `v1.10.16`
{ {
"name": "@eth-optimism/indexer", "name": "@eth-optimism/indexer",
"version": "0.0.1", "version": "0.0.2",
"private": true, "private": true,
"license": "MIT" "license": "MIT"
} }
# @eth-optimism/teleportr
## 0.0.1
### Patch Changes
- 172c3d74: Add SuggestGasTipCap fallback
- 6856b215: Count reverted transactions in failed_submissions
- f4f3054a: Add teleportr API server
- 3e57f559: Bump `go-ethereum` to `v1.10.16`
- bf1cc8f4: Restructure Deposit and CompletedTeleport to use struct embeddings
- bced4fa9: Add LoadInTeleport method to database
- e5732d97: Add btree index on deposit.txn_hash and deposit.address
{ {
"name": "@eth-optimism/teleportr", "name": "@eth-optimism/teleportr",
"version": "0.0.0", "version": "0.0.1",
"private": true, "private": true,
"devDependencies": {} "devDependencies": {}
} }
# @eth-optimism/integration-tests # @eth-optimism/integration-tests
## 0.5.7
### Patch Changes
- 88601cb7: Refactored Dockerfiles
## 0.5.6 ## 0.5.6
### Patch Changes ### Patch Changes
......
{ {
"private": true, "private": true,
"name": "@eth-optimism/integration-tests", "name": "@eth-optimism/integration-tests",
"version": "0.5.6", "version": "0.5.7",
"description": "[Optimism] Integration tests", "description": "[Optimism] Integration tests",
"scripts": { "scripts": {
"lint": "yarn lint:fix && yarn lint:check", "lint": "yarn lint:fix && yarn lint:check",
...@@ -28,9 +28,9 @@ ...@@ -28,9 +28,9 @@
"url": "https://github.com/ethereum-optimism/optimism.git" "url": "https://github.com/ethereum-optimism/optimism.git"
}, },
"devDependencies": { "devDependencies": {
"@eth-optimism/contracts": "0.5.17", "@eth-optimism/contracts": "0.5.18",
"@eth-optimism/core-utils": "0.8.1", "@eth-optimism/core-utils": "0.8.1",
"@eth-optimism/sdk": "1.0.1", "@eth-optimism/sdk": "1.0.2",
"@ethersproject/abstract-provider": "^5.5.1", "@ethersproject/abstract-provider": "^5.5.1",
"@ethersproject/providers": "^5.5.3", "@ethersproject/providers": "^5.5.3",
"@ethersproject/transactions": "^5.5.0", "@ethersproject/transactions": "^5.5.0",
......
# Changelog # Changelog
## 0.5.15
### Patch Changes
- 88601cb7: Refactored Dockerfiles
- f8348862: l2geth: Sync from Backend Queue
## 0.5.14 ## 0.5.14
### Patch Changes ### Patch Changes
......
{ {
"name": "@eth-optimism/l2geth", "name": "@eth-optimism/l2geth",
"version": "0.5.14", "version": "0.5.15",
"private": true, "private": true,
"devDependencies": {} "devDependencies": {}
} }
# @eth-optimism/hardhat-node # @eth-optimism/hardhat-node
## 0.1.3
### Patch Changes
- 88601cb7: Refactored Dockerfiles
## 0.1.2 ## 0.1.2
### Patch Changes ### Patch Changes
......
{ {
"name": "@eth-optimism/hardhat-node", "name": "@eth-optimism/hardhat-node",
"version": "0.1.2", "version": "0.1.3",
"scripts": { "scripts": {
"start": "hardhat node --network hardhat" "start": "hardhat node --network hardhat"
}, },
......
# @eth-optimism/common-ts # @eth-optimism/common-ts
## 0.2.3
### Patch Changes
- f7761058: Update log lines for service shutdown
- 5ae15042: Update metric names to include proper snake_case for strings that include "L1" or "L2"
- 5cd1e996: Have BaseServiceV2 add spaces to environment variable names
## 0.2.2 ## 0.2.2
### Patch Changes ### Patch Changes
......
{ {
"name": "@eth-optimism/common-ts", "name": "@eth-optimism/common-ts",
"version": "0.2.2", "version": "0.2.3",
"description": "[Optimism] Advanced typescript tooling used by various services", "description": "[Optimism] Advanced typescript tooling used by various services",
"main": "dist/index", "main": "dist/index",
"types": "dist/index", "types": "dist/index",
......
# Changelog # Changelog
## 0.5.18
### Patch Changes
- 88601cb7: Refactored Dockerfiles
## 0.5.17 ## 0.5.17
### Patch Changes ### Patch Changes
......
{ {
"name": "@eth-optimism/contracts", "name": "@eth-optimism/contracts",
"version": "0.5.17", "version": "0.5.18",
"description": "[Optimism] L1 and L2 smart contracts for Optimism", "description": "[Optimism] L1 and L2 smart contracts for Optimism",
"main": "dist/index", "main": "dist/index",
"types": "dist/index", "types": "dist/index",
......
# data transport layer # data transport layer
## 0.5.22
### Patch Changes
- 075f4b66: Removes the unused L1DataTransportClient and its dependencies
- 88601cb7: Refactored Dockerfiles
- 134a0966: dtl: Support basic authentication for RPC endpoints
- Updated dependencies [88601cb7]
- Updated dependencies [f7761058]
- Updated dependencies [5ae15042]
- Updated dependencies [5cd1e996]
- @eth-optimism/contracts@0.5.18
- @eth-optimism/common-ts@0.2.3
## 0.5.21 ## 0.5.21
### Patch Changes ### Patch Changes
......
{ {
"private": true, "private": true,
"name": "@eth-optimism/data-transport-layer", "name": "@eth-optimism/data-transport-layer",
"version": "0.5.21", "version": "0.5.22",
"description": "[Optimism] Service for shuttling data from L1 into L2", "description": "[Optimism] Service for shuttling data from L1 into L2",
"main": "dist/index", "main": "dist/index",
"types": "dist/index", "types": "dist/index",
...@@ -36,8 +36,8 @@ ...@@ -36,8 +36,8 @@
"url": "https://github.com/ethereum-optimism/optimism.git" "url": "https://github.com/ethereum-optimism/optimism.git"
}, },
"dependencies": { "dependencies": {
"@eth-optimism/common-ts": "0.2.2", "@eth-optimism/common-ts": "0.2.3",
"@eth-optimism/contracts": "0.5.17", "@eth-optimism/contracts": "0.5.18",
"@eth-optimism/core-utils": "0.8.1", "@eth-optimism/core-utils": "0.8.1",
"@ethersproject/providers": "^5.5.3", "@ethersproject/providers": "^5.5.3",
"@ethersproject/transactions": "^5.5.0", "@ethersproject/transactions": "^5.5.0",
......
# @eth-optimism/message-relayer # @eth-optimism/message-relayer
## 0.4.1
### Patch Changes
- 88601cb7: Refactored Dockerfiles
- 5cd1e996: Have BaseServiceV2 add spaces to environment variable names
- Updated dependencies [f7761058]
- Updated dependencies [5ae15042]
- Updated dependencies [5cd1e996]
- Updated dependencies [d49feca1]
- @eth-optimism/common-ts@0.2.3
- @eth-optimism/sdk@1.0.2
## 0.4.0 ## 0.4.0
### Minor Changes ### Minor Changes
......
{ {
"private": true, "private": true,
"name": "@eth-optimism/message-relayer", "name": "@eth-optimism/message-relayer",
"version": "0.4.0", "version": "0.4.1",
"description": "[Optimism] Service for automatically relaying L2 to L1 transactions", "description": "[Optimism] Service for automatically relaying L2 to L1 transactions",
"main": "dist/index", "main": "dist/index",
"types": "dist/index", "types": "dist/index",
...@@ -30,9 +30,9 @@ ...@@ -30,9 +30,9 @@
"url": "https://github.com/ethereum-optimism/optimism.git" "url": "https://github.com/ethereum-optimism/optimism.git"
}, },
"dependencies": { "dependencies": {
"@eth-optimism/common-ts": "0.2.2", "@eth-optimism/common-ts": "0.2.3",
"@eth-optimism/core-utils": "0.8.1", "@eth-optimism/core-utils": "0.8.1",
"@eth-optimism/sdk": "1.0.1", "@eth-optimism/sdk": "1.0.2",
"ethers": "^5.5.4" "ethers": "^5.5.4"
}, },
"devDependencies": { "devDependencies": {
......
# @eth-optimism/replica-healthcheck # @eth-optimism/replica-healthcheck
## 1.0.1
### Patch Changes
- 1c685f76: Fixes a bug in the replica-healthcheck dockerfile
- 5cd1e996: Have BaseServiceV2 add spaces to environment variable names
- Updated dependencies [f7761058]
- Updated dependencies [5ae15042]
- Updated dependencies [5cd1e996]
- @eth-optimism/common-ts@0.2.3
## 1.0.0 ## 1.0.0
### Major Changes ### Major Changes
......
{ {
"private": true, "private": true,
"name": "@eth-optimism/replica-healthcheck", "name": "@eth-optimism/replica-healthcheck",
"version": "1.0.0", "version": "1.0.1",
"description": "[Optimism] Service for monitoring the health of replica nodes", "description": "[Optimism] Service for monitoring the health of replica nodes",
"main": "dist/index", "main": "dist/index",
"types": "dist/index", "types": "dist/index",
...@@ -31,7 +31,7 @@ ...@@ -31,7 +31,7 @@
"url": "https://github.com/ethereum-optimism/optimism.git" "url": "https://github.com/ethereum-optimism/optimism.git"
}, },
"dependencies": { "dependencies": {
"@eth-optimism/common-ts": "0.2.2", "@eth-optimism/common-ts": "0.2.3",
"@eth-optimism/core-utils": "0.8.1", "@eth-optimism/core-utils": "0.8.1",
"@ethersproject/abstract-provider": "^5.5.1" "@ethersproject/abstract-provider": "^5.5.1"
}, },
......
# @eth-optimism/sdk # @eth-optimism/sdk
## 1.0.2
### Patch Changes
- d49feca1: Comment out non-functional getMessagesByAddress function
- Updated dependencies [88601cb7]
- @eth-optimism/contracts@0.5.18
## 1.0.1 ## 1.0.1
### Patch Changes ### Patch Changes
......
{ {
"name": "@eth-optimism/sdk", "name": "@eth-optimism/sdk",
"version": "1.0.1", "version": "1.0.2",
"description": "[Optimism] Tools for working with Optimism", "description": "[Optimism] Tools for working with Optimism",
"main": "dist/index", "main": "dist/index",
"types": "dist/index", "types": "dist/index",
...@@ -65,7 +65,7 @@ ...@@ -65,7 +65,7 @@
"typescript": "^4.3.5" "typescript": "^4.3.5"
}, },
"dependencies": { "dependencies": {
"@eth-optimism/contracts": "0.5.17", "@eth-optimism/contracts": "0.5.18",
"@eth-optimism/core-utils": "0.8.1", "@eth-optimism/core-utils": "0.8.1",
"lodash": "^4.17.21", "lodash": "^4.17.21",
"merkletreejs": "^0.2.27", "merkletreejs": "^0.2.27",
......
...@@ -5,7 +5,7 @@ It also details our response, lessons learned, and subsequent changes to our pro ...@@ -5,7 +5,7 @@ It also details our response, lessons learned, and subsequent changes to our pro
## Incident Summary ## Incident Summary
A vulnerability in Optimism’s fork of go-ethereum ([L2-geth](../../l2geth/README.md)) was reported A vulnerability in Optimism’s fork of [Geth](https://github.com/ethereum/go-ethereum) (which we refer to as [L2Geth](../../l2geth/README.md)) was reported
to us by [Jay Freeman](https://twitter.com/saurik) (AKA saurik) on February 2nd, 2022. If exploited, to us by [Jay Freeman](https://twitter.com/saurik) (AKA saurik) on February 2nd, 2022. If exploited,
this vulnerability would allow anyone to mint an unbounded amount of ETH on Optimism. this vulnerability would allow anyone to mint an unbounded amount of ETH on Optimism.
...@@ -13,7 +13,7 @@ We confirmed the issue, implemented a fix, and upgraded our infrastructure withi ...@@ -13,7 +13,7 @@ We confirmed the issue, implemented a fix, and upgraded our infrastructure withi
alerted infrastructure providers running Optimism, as well as other network operators who are using alerted infrastructure providers running Optimism, as well as other network operators who are using
a fork of our software. a fork of our software.
All parties were running a patched version of L2-geth within 32 hours of the initial report. All parties were running a patched version of L2Geth within 32 hours of the initial report.
## Lead up ## Lead up
...@@ -46,7 +46,7 @@ since they had to roll out an emergency patch version. ...@@ -46,7 +46,7 @@ since they had to roll out an emergency patch version.
Jay Freeman (a.k.a. saurik) reported the bug to us via security@optimism.io. He first attempted to Jay Freeman (a.k.a. saurik) reported the bug to us via security@optimism.io. He first attempted to
report via our Immunefi bounty program, but decided to email us since it does not explicitly include report via our Immunefi bounty program, but decided to email us since it does not explicitly include
our L2-Geth code. our L2Geth code.
## Recovery ## Recovery
...@@ -81,7 +81,7 @@ timeline and activities were as follows: ...@@ -81,7 +81,7 @@ timeline and activities were as follows:
[PR #2146](https://github.com/ethereum-optimism/optimism/pull/2146), which we will use to sneak in [PR #2146](https://github.com/ethereum-optimism/optimism/pull/2146), which we will use to sneak in
the fix without publicly disclosing it. the fix without publicly disclosing it.
- 2022-02-06 0250: mslipper merges the finalized patch into PR #2146 after testing, and cuts the - 2022-02-06 0250: mslipper merges the finalized patch into PR #2146 after testing, and cuts the
release of l2geth version `0.5.11`. release of L2Geth version `0.5.11`.
## How it was fixed ## How it was fixed
...@@ -104,7 +104,7 @@ that is, by looking at the PR that introduced it, and the organization context o ...@@ -104,7 +104,7 @@ that is, by looking at the PR that introduced it, and the organization context o
#### The PR #### The PR
It was introduced in [PR #1363](https://github.com/ethereum-optimism/optimism/pull/1363), on It was introduced in [PR #1363](https://github.com/ethereum-optimism/optimism/pull/1363), on
2021-07-20, and merged 3 days later. It includes changes to 21 files, (14 in geth code, 6 in test 2021-07-20, and merged 3 days later. It includes changes to 21 files, (14 in L2Geth code, 6 in test
files). The diff added 217 lines, and removed 149 lines. files). The diff added 217 lines, and removed 149 lines.
The PR was well scoped, and all of the changes were relevant according to its description: The PR was well scoped, and all of the changes were relevant according to its description:
...@@ -209,13 +209,13 @@ the various risks they considered. ...@@ -209,13 +209,13 @@ the various risks they considered.
### Maximizing the effectiveness of our bug reporting channels ### Maximizing the effectiveness of our bug reporting channels
Our bounty program page on Immunefi did not list Geth as in scope, which led saurik to report Our bounty program page on Immunefi did not list L2Geth as in scope, which led saurik to report
through our security@optimism.io email. Additionally, not all members of the team are in the habit through our security@optimism.io email. Additionally, not all members of the team are in the habit
of checking email at the start of. This caused some delay in the initial incident response process. of checking email at the start of their day. This caused some delay in the initial incident response process.
**Actions taken:** **Actions taken:**
1. We have extended the scope of the Immunefi program to include our Geth fork. 1. We have extended the scope of the Immunefi program to include L2Geth.
**Actions planned:** **Actions planned:**
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment