Conflio will release a patch to fix the security issues of the CosmWasm virtual machine from 17:00 to 19:00 today

According to the Cosmos Ecological Chain Neutron Community Forum, between 17:00 and 19:00 on January 10, Confio will release a patch to fix a serious security issue in the CosmWasm virtual machine (CWA-2023-004 32). This patch will be released and communicated in accordance with CosmWasm's regular release process. This issue affects the availability of running CosmWasm chains. Chains that use CosmWasm are not directly at risk through permissioned uploading. Officials recommend that chains that support permissionless contract uploads prepare to apply patches and coordinate network upgrades as soon as their processes allow to fully resolve the issue. The patch is a non-consensus security fix that can be applied in-place. Official patches will be provided for wasmvm 1.2, 1.3, 1.4 and 1.5. Please note that 1.2 has reached end of life and this is the last patch for this version.