crates.io/cosmwasm-vm: medium 4.3

Gas mispricing in cosmwasm-vm

Action: Upgrade cosmwasm-vm to 1.5.6 or later.

cargo update -p cosmwasm-vm --precise 1.5.6

cargo update -p cosmwasm-vm --precise 2.0.5

cargo update -p cosmwasm-vm --precise 2.1.2

Affected

Fixed versions

Sources

• osv: GHSA-rg2q-2jh9-447q
• https://github.com/CosmWasm/wasmvm/security/advisories/GHSA-rg2q-2jh9-447q
• https://github.com/CosmWasm/cosmwasm/commit/5bef1c588933bd60a04bb70099150cf84b69e144
• https://github.com/CosmWasm/cosmwasm/commit/9b4d6d03772b75d500a7d3c972d0d8ba6d085c06
• https://github.com/CosmWasm/cosmwasm/commit/c1313afeb261e17b1c8cf6a1eacee1da0dac42ae
• https://github.com/CosmWasm/advisories/blob/main/CWAs/CWA-2024-004.md
• https://github.com/CosmWasm/wasmvm
• https://rustsec.org/advisories/RUSTSEC-2024-0361.html

published 2024-08-08T16:30:50Z · modified 2024-08-08T17:03:07Z · JSON