Skip to content

Latest commit

 

History

History
72 lines (43 loc) · 2.22 KB

2-security-update-v0.10.3.md

File metadata and controls

72 lines (43 loc) · 2.22 KB
Raw

Security update

Due to the recent annoucement of a security vulnerability in CosmWasm, we built fetchd v0.10.3 to address it.

We kindly ask all the validators to read through the following document once, and then take the steps in order to upgrade their nodes.

In case of questions or issues, feel free to reach me on discord (@daeMOn#5105).

About the upgrade

This is a backward compatible - non consesus breaking change, meaning we don't need to halt the chain or perform any migration steps. The new version of the fetchd binary just need to be install and the node restarted to pick it up.

This is required for all your node (validators, sentries and any other you may have)

Backup FETCHD_HOME

Before making any changes, it's prefered to create a backup copy of your current FETCHD_HOME directory.

The following command can be used, assuming your FETCHD_HOME is ~/.fetchd/:

cp -R ~/.fetchd/ ~/.fetchd_old/

This would allow to revert back to your starting state in case something goes wrong on the way.

Install new fetchd version

You may already have the fetchd repository on your machine from the previous installation. If not, you can:

git clone --branch v0.10.3 https://github.com/fetchai/fetchd.git fetchd_0.10.3
cd fetchd_0.10.3

If you already have an existing clone, place yourself in and:

git fetch
git checkout v0.10.3

Now you can install the new fetchd version:

make install

# and verify you now have the correct version:
fetchd -h
# must print fetchd help message

fetchd version
# must print v0.10.3

Make sure the version is correct before proceeding further!

You're now ready to restart your node

Verify upgrade completed

You can now query your local RPC endpoint to verify the right version is running and the node properly restarted:

curl -s http://localhost:26657/abci_info | jq -r '.result.response.version'
v0.10.3

Make sure this print v0.10.3, if not, double check you're on the right git tag in the fetchd repository, that the make install didn't produce errors, and that your properly restarted your node.