Transaction-Science/open-standards
Watch
1
0
Fork
You've already forked open-standards
 0
Code Issues Pull requests Projects Releases 15 Packages Wiki Activity Actions

sec: zstd 0.14.3 for RUSTSEC-2026-0391, -0398, -0403 and -0410; CI: the avx2 leg on the framework runner #491

Closed
dcharlot wants to merge 2 commits from sec/zstd-2026-10-26 into main
pull from: sec/zstd-2026-10-26
merge into: Transaction-Science:main
Conversation 0 Commits 2 Files changed 10 +71 -38
dcharlot commented 2026-10-26 11:32:48 -04:00
Owner
Copy link

Four advisories against the zstd crates, published October 2026, fail the repository check (scripts/check-advisories.py) on every pull request:

Advisory Crate, fixed in What it is
RUSTSEC-2026-0391 zstd ≥ 0.14.3 data from an abandoned stream leaks into the next stream on a reused context
RUSTSEC-2026-0398 zstd-safe ≥ 8.2.0 Seekable::decompress sets a Vec length past its capacity
RUSTSEC-2026-0403 zstd-safe ≥ 8.2.0 uninitialised memory when a legacy frame's streaming decompression fails
RUSTSEC-2026-0410 zstd-sys ≥ 2.1.2 the wasm allocator shim corrupts memory on allocation failure

Every direct use moves

  • wai: zstd 0.14.3, zstd-safe 8.2.
  • jwp and joule-moq-interop: zstd 0.14.3.
  • Five lockfiles change exactly the three zstd packages and nothing else: wai-rs, wai-rs/fuzz, joule-code-rs, joule-moq-room and examples/transport-moqt.

The one copy left: allowed, at its exact versions

It is wasmtime 49's, under wasmtime-internal-cache, which compresses compiled modules for wasmtime's on-disk cache. sandbox-exec-wasm builds its engine from Config::new() with fuel metering only and never configures a cache, so zstd's code does not run in the sandbox. The four entries in ALLOW name those exact versions (zstd 0.13.3, zstd-safe 7.2.4, zstd-sys 2.0.16+zstd.1.5.7), so a direct use regressing to them is not excused.

Checked on the build host

  • python3 scripts/check-advisories.py passes: 48 lockfiles, 19 allowed advisories.
  • Every lockfile that holds wai or jwp reads cargo metadata --locked with no change.
  • jwp passes its 154 tests.
  • joule-moq-interop and joule-moq-room build.
  • wai-rs builds with neural (zstd_safe::decompress), and its text codec tests (zstd::stream) pass.
  • wai-rs/fuzz checks.

And the avx2 leg on the linux label's second runner

The linux label now has two runners: jetson-hub, whose processor has avx2, and framework-128gb-linux (since 2026-10-26), whose processor has avx512 too.

The avx2 leg of wai-quantum-vector.yml declared avx2 alone. On the framework, the engine's probe found both, so all nine device tests failed (#487's run, task 29781). On silicon the declaration now comes from the kernel's own flags (avx512f in /proc/cpuinfo), never from the probe under test. The leg checks the avx2 member as before: its 256-bit length, its four bit-exact certificates and its three killed mutants.

Both fixes unblock every pull request, which is why they travel together.

🤖 Generated with Claude Code

Four advisories against the zstd crates, published October 2026, fail the repository check (`scripts/check-advisories.py`) on every pull request: | Advisory | Crate, fixed in | What it is | |---|---|---| | RUSTSEC-2026-0391 | zstd ≥ 0.14.3 | data from an abandoned stream leaks into the next stream on a reused context | | RUSTSEC-2026-0398 | zstd-safe ≥ 8.2.0 | `Seekable::decompress` sets a `Vec` length past its capacity | | RUSTSEC-2026-0403 | zstd-safe ≥ 8.2.0 | uninitialised memory when a legacy frame's streaming decompression fails | | RUSTSEC-2026-0410 | zstd-sys ≥ 2.1.2 | the wasm allocator shim corrupts memory on allocation failure | ## Every direct use moves - **`wai`:** zstd 0.14.3, zstd-safe 8.2. - **`jwp` and `joule-moq-interop`:** zstd 0.14.3. - **Five lockfiles** change exactly the three zstd packages and nothing else: wai-rs, wai-rs/fuzz, joule-code-rs, joule-moq-room and examples/transport-moqt. ## The one copy left: allowed, at its exact versions It is wasmtime 49's, under `wasmtime-internal-cache`, which compresses compiled modules for wasmtime's on-disk cache. `sandbox-exec-wasm` builds its engine from `Config::new()` with fuel metering only and never configures a cache, so zstd's code does not run in the sandbox. The four entries in `ALLOW` name those exact versions (zstd 0.13.3, zstd-safe 7.2.4, zstd-sys 2.0.16+zstd.1.5.7), so a direct use regressing to them is not excused. ## Checked on the build host - `python3 scripts/check-advisories.py` passes: 48 lockfiles, 19 allowed advisories. - Every lockfile that holds `wai` or `jwp` reads `cargo metadata --locked` with no change. - `jwp` passes its 154 tests. - `joule-moq-interop` and joule-moq-room build. - wai-rs builds with `neural` (`zstd_safe::decompress`), and its text codec tests (`zstd::stream`) pass. - wai-rs/fuzz checks. ## And the avx2 leg on the `linux` label's second runner The `linux` label now has two runners: jetson-hub, whose processor has avx2, and `framework-128gb-linux` (since 2026-10-26), whose processor has avx512 too. The avx2 leg of `wai-quantum-vector.yml` declared avx2 alone. On the framework, the engine's probe found both, so all nine device tests failed (#487's run, task 29781). On silicon the declaration now comes from the kernel's own flags (`avx512f` in `/proc/cpuinfo`), never from the probe under test. The leg checks the avx2 member as before: its 256-bit length, its four bit-exact certificates and its three killed mutants. Both fixes unblock every pull request, which is why they travel together. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
sec: zstd 0.14.3 for RUSTSEC-2026-0391, -0398, -0403 and -0410
Some checks failed
WAI conformance / delivery telemetry · CMCD and CMSD against an independent library (pull_request) Has been cancelled
Details
WAI energy receipts / energy receipts · linux-arm64 (pull_request) Has been cancelled
Details
WAI energy receipts / energy receipts · macos (pull_request) Has been cancelled
Details
WAI conformance / independent verifiers · claims, JWP, key discovery and integer payloads (Python) (pull_request) Has been cancelled
Details
WAI neural sink gates / model-free refusals of the neural sink (pull_request) Has been cancelled
Details
wai-ops-gpu integer operators on GPUs / builds · no adapter is not a pass (linux) (pull_request) Has been cancelled
Details
wai-ops-gpu integer operators on GPUs / Metal GPU and browser WebGPU (macos) (pull_request) Has been cancelled
Details
wai-pack / wai-pack · linux (pull_request) Has been cancelled
Details
wai-pack / wai-pack · linux-arm64 (pull_request) Has been cancelled
Details
wai-pack / wai-pack · macos (pull_request) Has been cancelled
Details
wai-pack / wai-pack · independent verifier (Python) (pull_request) Has been cancelled
Details
wai-pack / wai-pack · the floor through a media prober (pull_request) Has been cancelled
Details
wai-pack / wai-pack · dependency licences (pull_request) Has been cancelled
Details
wai-quantum studio and desktop / studio · browser (pull_request) Has been cancelled
Details
wai-quantum studio and desktop / desktop app · macos (pull_request) Has been cancelled
Details
WAI conformance / cargo-class corpora · linux (pull_request) Has been cancelled
Details
joule-moq-web browser client / joule-moq-web · browser end-to-end (macos) (pull_request) Has been cancelled
Details
WAI JPEG-AI whole decode (pinned inputs, required) / fetch pinned JPEG-AI inputs → whole decode + pixel hash, required (pull_request) Has been cancelled
Details
wai-quantum WebGPU member / shader checks · browser build · wasip2 inertness · MSRV (pull_request) Has been cancelled
Details
wai-quantum WebGPU member / member · software Vulkan (linux) (pull_request) Has been cancelled
Details
wai-quantum WebGPU member / member · Metal (macos) (pull_request) Has been cancelled
Details
wai-quantum WebGPU member / member · browser WebGPU (macos) (pull_request) Has been cancelled
Details
WAI mbt2018_mean integer decode (regenerated vectors) / regenerate mbt2018_mean integer vectors → Rust decode, required (pull_request) Has been cancelled
Details
wai-web wasm32 / wai-web wasm32 build · corpus, menu and writers (pull_request) Has been cancelled
Details
wai-web reach builds / wai-web reach builds · this tree's wai-web, every rung on its engine line (pull_request) Has been cancelled
Details
wai-quantum WebGPU member / member · discrete GPU, Vulkan (jetson-hub) (pull_request) Has been cancelled
Details
wai-quantum WebGPU member / member · integrated GPU, Vulkan (framework-128gb) (pull_request) Has been cancelled
Details
WAI conformance / cargo-class corpora · linux-arm64 (pull_request) Has been cancelled
Details
WAI energy receipts / energy receipts · linux (pull_request) Has been cancelled
Details
wai-quantum WebGPU member / member · DX12 and Vulkan (cbio-windows) (pull_request) Has been cancelled
Details
f19e84f40f 
Four advisories against the zstd crates, published October 2026, failed
the repository check on every pull request:
- RUSTSEC-2026-0391 (zstd < 0.14.3): data from an abandoned stream leaks
  into the next stream on a reused context;
- RUSTSEC-2026-0398 (zstd-safe < 8.2.0): Seekable::decompress sets a Vec
  length past its capacity;
- RUSTSEC-2026-0403 (zstd-safe < 8.2.0): uninitialised memory when a
  legacy frame's streaming decompression fails;
- RUSTSEC-2026-0410 (zstd-sys < 2.1.2): the wasm allocator shim corrupts
  memory on allocation failure.

Every direct use moves: wai (zstd 0.14.3, zstd-safe 8.2), jwp and
joule-moq-interop (zstd 0.14.3). Five lockfiles change exactly the three
zstd packages and nothing else: wai-rs, wai-rs/fuzz, joule-code-rs,
joule-moq-room and examples/transport-moqt.

The one copy left is wasmtime 49's, under wasmtime-internal-cache, which
compresses compiled modules for wasmtime's on-disk cache. sandbox-exec-wasm
builds its engine from Config::new() with fuel metering only and never
configures a cache, so zstd's code does not run in the sandbox. It is
allowed in scripts/check-advisories.py at those exact versions, so a
direct use regressing to them is not excused.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
dcharlot changed title from sec: zstd 0.14.3 for RUSTSEC-2026-0391, -0398, -0403 and -0410 to sec: zstd 0.14.3 for RUSTSEC-2026-0391, -0398, -0403 and -0410; CI: the avx2 leg on the framework runner 2026-10-26 11:35:50 -04:00
CI: the avx2 leg declares the units the runner's processor has
All checks were successful
wai-quantum CPU vector units / member · vector unit, sve 512-bit (aarch64, emulated) (pull_request) Successful in 10s
Details
WAI JPEG-AI whole decode (pinned inputs, required) / fetch pinned JPEG-AI inputs → whole decode + pixel hash, required (pull_request) Successful in 6m21s
Details
standards workspaces build + test / joule-code-rs (joule-code/joule-code-rs, joule-code-rs, linux-arm64, true) (pull_request) Successful in 5m39s
Details
wai-quantum WebGPU member / member · software Vulkan (linux) (pull_request) Successful in 2m11s
Details
wai-quantum WebGPU member / member · integrated GPU, Vulkan (framework-128gb) (pull_request) Successful in 9m5s
Details
WAI conformance / each feature of the independent verifiers' steps compiles alone (pull_request) Successful in 8m38s
Details
wai-quantum WebGPU member / shader checks · browser build · wasip2 inertness · MSRV (pull_request) Successful in 3m26s
Details
WAI energy receipts / energy receipts · linux (pull_request) Successful in 11m16s
Details
wai-pack / wai-pack · linux-arm64 (pull_request) Successful in 2m25s
Details
joule-moq-web browser client / joule-moq-web · browser end-to-end (macos) (pull_request) Successful in 13m4s
Details
wai-pack / wai-pack · the floor through a media prober (pull_request) Successful in 38s
Details
wai-quantum WebGPU member / member · DX12 and Vulkan (cbio-windows) (pull_request) Successful in 13m19s
Details
WAI mbt2018_mean integer decode (regenerated vectors) / regenerate mbt2018_mean integer vectors → Rust decode, required (pull_request) Successful in 5m25s
Details
standards workspaces build + test / macOS energy backends (pull_request) Successful in 12m20s
Details
wai-web wasm32 / wai-web wasm32 build · corpus, menu and writers (pull_request) Successful in 5m16s
Details
wai-pack / wai-pack · dependency licences (pull_request) Successful in 1m38s
Details
WAI energy receipts / energy receipts · linux-arm64 (pull_request) Successful in 10m9s
Details
WAI conformance / cargo-class corpora · linux (pull_request) Successful in 16m47s
Details
wai-pack / wai-pack · independent verifier (Python) (pull_request) Successful in 7m31s
Details
WAI conformance / cargo-class corpora · macos (pull_request) Successful in 18m50s
Details
WAI energy receipts / energy receipts · macos (pull_request) Successful in 6m28s
Details
WAI conformance / cargo-class corpora · linux-arm64 (pull_request) Successful in 18m35s
Details
wai-pack / wai-pack · macos (pull_request) Successful in 3m3s
Details
wai-quantum CPU vector units / member · vector unit absent (macos) (pull_request) Successful in 20s
Details
wai-quantum studio and desktop / desktop app · macos (pull_request) Successful in 2m53s
Details
wai-quantum WebGPU member / member · discrete GPU, Vulkan (jetson-hub) (pull_request) Successful in 22m11s
Details
wai-quantum WebGPU member / member · browser WebGPU (macos) (pull_request) Successful in 1m50s
Details
wai-ops-gpu integer operators on GPUs / Metal GPU and browser WebGPU (macos) (pull_request) Successful in 10m32s
Details
wai-quantum WebGPU member / member · Metal (macos) (pull_request) Successful in 2m47s
Details
WAI conformance / independent verifiers · claims, JWP, key discovery and integer payloads (Python) (pull_request) Successful in 50m27s
Details
6c08337013 
The `linux` label now has two runners: jetson-hub, whose processor has
avx2, and framework-128gb-linux (since 2026-10-26), whose processor has
avx512 too. The avx2 leg declared avx2 alone, so on the framework the
engine's probe found avx2 and avx512, the declaration did not match, and
all nine device tests failed (#487's run, task 29781).

On silicon the declaration now comes from the kernel's own flags (avx512f
in /proc/cpuinfo), never from the probe under test, and the leg checks
the avx2 member exactly as before: its 256-bit length, its four bit-exact
certificates and its three killed mutants.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
dcharlot closed this pull request 2026-10-26 11:37:35 -04:00
Some checks failed
joule-moq-room room service / joule-moq-room · does this change touch it (pull_request) Successful in 7s
Details
wai-web reach builds / wai-web reach · does this change touch it (pull_request) Successful in 6s
Details
joule-moq-web browser client / joule-moq-web · does this change touch it (pull_request) Successful in 9s
Details
WAI conformance / does this change touch it (pull_request) Successful in 8s
Details
standards workspaces build + test / which workspaces this change touches (pull_request) Successful in 10s
Details
WAI energy receipts / does this change touch it (pull_request) Successful in 8s
Details
WAI JPEG-AI whole decode (pinned inputs, required) / does this change touch it (pull_request) Successful in 8s
Details
WAI neural sink gates / does this change touch it (pull_request) Successful in 13s
Details
wai-ops-gpu integer operators on GPUs / does this change touch it (pull_request) Successful in 14s
Details
WAI conformance / cross-arch byte-equality · linux (pull_request) Successful in 29s
Details
WAI conformance / cross-arch byte-equality · macos (pull_request) Successful in 28s
Details
wai-pack / wai-pack · does this change touch it (pull_request) Successful in 11s
Details
wai-quantum studio and desktop / does this change touch it (pull_request) Successful in 11s
Details
wai-quantum CPU vector units / does this change touch it (pull_request) Successful in 22s
Details
wai-quantum WebGPU member / does this change touch it (pull_request) Successful in 22s
Details
wai-quantum CPU vector units / member · vector units, avx2 and avx512 (framework-128gb silicon) (pull_request) Successful in 14s
Details
wai-web wasm32 / does this change touch it (pull_request) Successful in 21s
Details
WAI mbt2018_mean integer decode (regenerated vectors) / does this change touch it (pull_request) Successful in 21s
Details
joule-code conformance gate / joule-moq-relay, every target (pull_request) Failing after 1m38s
Details
joule-code conformance gate / joule-moq-ingest, every target (pull_request) Successful in 2m7s
Details
WAI conformance / codec wrappers · fuzz smoke, text decode limits, C entry points, provenance, the semantic path (pull_request) Successful in 1m31s
Details
WAI conformance / v2 vocabulary · manifests validate as stated (pull_request) Successful in 43s
Details
WAI conformance / quantum core and corpus under wasm32-wasip2 (wasmtime) (pull_request) Successful in 2m28s
Details
joule-code conformance gate / Build + round-trip C1-C4 vectors (pull_request) Successful in 2m45s
Details
wai-web reach builds / wai-web reach builds · the package of record, every output as recorded (pull_request) Successful in 3m11s
Details
repository checks / lockfiles, advisories, tests in CI, workflow hygiene, spec and section references, public text (pull_request) Successful in 3m36s
Details
WAI conformance / delivery telemetry · CMCD and CMSD against an independent library (pull_request) Successful in 19s
Details
joule-moq-room room service / joule-moq-room, every target (pull_request) Successful in 2m22s
Details
WAI neural sink gates / model-free refusals of the neural sink (pull_request) Successful in 1m40s
Details
WAI conformance / cross-arch byte-equality · linux-arm64 (pull_request) Successful in 40s
Details
wai-web reach builds / wai-web reach builds · this tree's wai-web, every rung on its engine line (pull_request) Successful in 5m13s
Details
WAI conformance / C2PA manifest emission · signed, read back, validated (pull_request) Successful in 1m56s
Details
wai-ops-gpu integer operators on GPUs / builds · no adapter is not a pass (linux) (pull_request) Successful in 3m0s
Details
wai-pack / wai-pack · linux (pull_request) Successful in 1m59s
Details
wai-quantum CPU vector units / member · vector unit, rvv 1024-bit (riscv64, emulated) (pull_request) Successful in 21s
Details
wai-quantum CPU vector units / member · vector unit, sve 128-bit (aarch64, emulated) (pull_request) Successful in 23s
Details
wai-quantum CPU vector units / member · vector unit, rvv 128-bit (riscv64, emulated) (pull_request) Successful in 10s
Details
wai-quantum CPU vector units / member · vector unit, sve 2048-bit (aarch64, emulated) (pull_request) Successful in 10s
Details
wai-quantum CPU vector units / member · vector unit, avx2 (x86_64 silicon) (pull_request) Successful in 16s
Details
wai-quantum studio and desktop / studio · browser (pull_request) Successful in 2m53s
Details
wai-quantum CPU vector units / member · vector unit, sve 512-bit (aarch64, emulated) (pull_request) Successful in 10s
Details
WAI JPEG-AI whole decode (pinned inputs, required) / fetch pinned JPEG-AI inputs → whole decode + pixel hash, required (pull_request) Successful in 6m21s
Details
standards workspaces build + test / joule-code-rs (joule-code/joule-code-rs, joule-code-rs, linux-arm64, true) (pull_request) Successful in 5m39s
Details
wai-quantum WebGPU member / member · software Vulkan (linux) (pull_request) Successful in 2m11s
Details
wai-quantum WebGPU member / member · integrated GPU, Vulkan (framework-128gb) (pull_request) Successful in 9m5s
Details
WAI conformance / each feature of the independent verifiers' steps compiles alone (pull_request) Successful in 8m38s
Details
wai-quantum WebGPU member / shader checks · browser build · wasip2 inertness · MSRV (pull_request) Successful in 3m26s
Details
WAI energy receipts / energy receipts · linux (pull_request) Successful in 11m16s
Details
wai-pack / wai-pack · linux-arm64 (pull_request) Successful in 2m25s
Details
joule-moq-web browser client / joule-moq-web · browser end-to-end (macos) (pull_request) Successful in 13m4s
Details
wai-pack / wai-pack · the floor through a media prober (pull_request) Successful in 38s
Details
wai-quantum WebGPU member / member · DX12 and Vulkan (cbio-windows) (pull_request) Successful in 13m19s
Details
WAI mbt2018_mean integer decode (regenerated vectors) / regenerate mbt2018_mean integer vectors → Rust decode, required (pull_request) Successful in 5m25s
Details
standards workspaces build + test / macOS energy backends (pull_request) Successful in 12m20s
Details
wai-web wasm32 / wai-web wasm32 build · corpus, menu and writers (pull_request) Successful in 5m16s
Details
wai-pack / wai-pack · dependency licences (pull_request) Successful in 1m38s
Details
WAI energy receipts / energy receipts · linux-arm64 (pull_request) Successful in 10m9s
Details
WAI conformance / cargo-class corpora · linux (pull_request) Successful in 16m47s
Details
wai-pack / wai-pack · independent verifier (Python) (pull_request) Successful in 7m31s
Details
WAI conformance / cargo-class corpora · macos (pull_request) Successful in 18m50s
Details
WAI energy receipts / energy receipts · macos (pull_request) Successful in 6m28s
Details
WAI conformance / cargo-class corpora · linux-arm64 (pull_request) Successful in 18m35s
Details
wai-pack / wai-pack · macos (pull_request) Successful in 3m3s
Details
wai-quantum CPU vector units / member · vector unit absent (macos) (pull_request) Successful in 20s
Details
wai-quantum studio and desktop / desktop app · macos (pull_request) Successful in 2m53s
Details
wai-quantum WebGPU member / member · discrete GPU, Vulkan (jetson-hub) (pull_request) Successful in 22m11s
Details
wai-quantum WebGPU member / member · browser WebGPU (macos) (pull_request) Successful in 1m50s
Details
wai-ops-gpu integer operators on GPUs / Metal GPU and browser WebGPU (macos) (pull_request) Successful in 10m32s
Details
wai-quantum WebGPU member / member · Metal (macos) (pull_request) Successful in 2m47s
Details
WAI conformance / independent verifiers · claims, JWP, key discovery and integer payloads (Python) (pull_request) Successful in 50m27s
Details

Pull request closed

Please reopen this pull request to perform a merge.
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
Transaction-Science/open-standards!491
No description provided.