From 775b2f8a0fdd1d1ab8675b96d379af355584f4a2 Mon Sep 17 00:00:00 2001 From: Simon Warta Date: Tue, 10 Dec 2024 23:04:40 +0100 Subject: [PATCH] Add patch section to CWA-2024-009 --- CWAs/CWA-2024-009.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/CWAs/CWA-2024-009.md b/CWAs/CWA-2024-009.md index 37e3dac..c4c0059 100644 --- a/CWAs/CWA-2024-009.md +++ b/CWAs/CWA-2024-009.md @@ -21,6 +21,11 @@ Low (Marginal + Likely)[^1] Apart from upgrading, it is recommended to **not** open the gRPC and REST APIs of _validator_ nodes to the public internet. Use isolated and resource-constrained environments for running separate public RPC nodes instead. These can then easily be thrown away and replaced with new instances in case of problems. +## Patch + +The patch requires upgrading wasmvm to 1.5.6, 2.0.5 or 2.1.4 and then apply this diff:
+https://github.com/CosmWasm/wasmd/compare/80760aea336f0f1ad34756b0f03267d98cac6a04...v0.53.2 + ## Applying the patch ### Official Wasmd patch