ARCHIVE/xrpl-dev-portal
1
0
Fork 0
mirror of https://github.com/XRPLF/xrpl-dev-portal.git synced 2025-11-04 11:55:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix dates

Browse Source
This commit is contained in:
Oliver Eggert
2025-09-29 16:03:21 -07:00
parent 6129d5c835
commit bd8e6e1841
1 changed files with 2 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
blog/2025/vulnerabilitydisclosurereport-bug-sep2025.md
View File

@@ -98,7 +98,7 @@ If you sign online (via RPC), the invalid signature will be caught early and rej
## Fixes / Patches Available
The fix for this issue is available on devnet in an updated version of the feature amendment: `PermissionDelegationV1_1`. You can see the details of the fix [here](https://github.com/XRPLF/rippled/pull/5825). The new amendment replaces `PermissionDelegation` and `DelegateV1_1`, both of which are now deprecated.
The fix for this issue will be available on devnet in an updated version of the feature amendment: `PermissionDelegationV1_1`. You can see the details of the fix [here](https://github.com/XRPLF/rippled/pull/5825). The new amendment replaces `PermissionDelegation` and `DelegateV1_1`, both of which are now deprecated.
## Acknowledgements
@@ -126,5 +126,4 @@ For more information or to report further issues, please contact the team at [bu
|-------------|-----------|-------------|
| Initial Discovery | September 15, 2025 | Alerted by tequ (a community member) about the vulnerability. |
| Mitigation Actions Taken | September 15, 2025 | Messaged UNL validators on Mattermost to recommend voting No for `PermissionDelegation` amendment; additional UNL validators have since applied vetoes to block the amendment. |
| Resolution Completed | September 29, 2025 | The vulnerability has been fixed and made available in an updated amendment: `PermissionDelegationV1_1`. |
| Report Published | January 10, 2025 | Blog published with details of new feature amendment. |
| Report Published | September 29, 2025 | Blog published with details of vulnerability and fix. |