chore(core): update common changelog as well
What the developer wrote
Authored by Roman Zeyde
chore(core): update common changelog as well
Following https://github.com/trezor/trezor-firmware/pull/7458.
[no changelog]
What changed, and why it matters
This commit only updates the changelog text in core/CHANGELOG.md. It adds a one-line note describing a security fix ('Discard low-order keys in THP Code Entry pairing') that was already merged in a previous pull request. There are no code changes, no new functionality, and no direct security fix in this commit itself.
No action needed for this commit. Review PR #7458 separately if you need to assess the actual security fix for low-order keys in THP Code Entry pairing.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff is a single-line addition to core/CHANGELOG.md under the ‘Security’ section, documenting a previously merged fix for T3W1 THP Code Entry pairing regarding low-order keys. No source code, build scripts, tests, or configuration files are modified. The actual security fix is in the referenced PR #7458, not in this commit.
Changed components
core/CHANGELOG.mdInspect captured patch +1 / −0
diff --git a/core/CHANGELOG.md b/core/CHANGELOG.md
index 2546e0a7..89194e49 100644
--- a/core/CHANGELOG.md
+++ b/core/CHANGELOG.md
@@ -25,6 +25,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
- [T3W1] Fix device menu refresh. [#7202]
### Security
+- [T3W1] Discard low-order keys in THP Code Entry pairing.
- Ask user for confirmation of some previously hidden Solana instruction parameters.
- Solana: Fixed token transfer recipient for ALT addresses.
- Fix external input misidentification in bitcoin signing.
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.