Transaction-Science/open-standards
Watch
1
0
Fork
You've already forked open-standards
 0
Code Issues Pull requests Projects Releases 15 Packages Wiki Activity Actions

sandbox-rs: wasmtime 49.0.4 -> 49.0.5 (RUSTSEC-2026-0422, -0423, -0424) #547

Merged
dcharlot merged 1 commit from sec/wasmtime-49.0.5 into main 2026-10-30 08:50:06 -04:00
Conversation 0 Commits 1 Files changed 2 +61 -61

2026-10-30

Transaction Science
sandbox-rs: wasmtime 49.0.4 -> 49.0.5 (RUSTSEC-2026-0422, -0423, -0424)
All checks were successful
standards workspaces build + test / which workspaces this change touches (pull_request) Successful in 8s
Details
standards workspaces build + test / joule-ui-rs (joule-ui/joule-ui-rs, joule-ui-rs, linux) (pull_request) Successful in 29s
Details
standards workspaces build + test / jcp-rs (jcp-conformance, jcp/jcp-rs, -p jcp-energy --features nvml, jcp-rs, linux) (pull_request) Successful in 1m4s
Details
standards workspaces build + test / joulecontract-rs (joulecontract/joulecontract-rs, joulecontract-rs, linux-arm64, true) (pull_request) Successful in 1m6s
Details
standards workspaces build + test / jouledesk-rs (jouledesk/jouledesk-rs, jouledesk-rs, macos) (pull_request) Successful in 1m9s
Details
standards workspaces build + test / proof-rs (proof-conformance, proof/proof-rs, proof-rs, linux, true) (pull_request) Successful in 1m31s
Details
standards workspaces build + test / sandbox-rs (sandbox-conformance, sandbox/sandbox-rs, -p sandbox-tee --features amd-kds,intel-pcs, sandbox-rs, linux) (pull_request) Successful in 2m13s
Details
repository checks / lockfiles, advisories, tests in CI, workflow hygiene, spec and section references, public text (pull_request) Successful in 2m34s
Details
standards workspaces build + test / joule-code-rs (joule-code/joule-code-rs, joule-code-rs, linux-arm64, true) (pull_request) Successful in 7m7s
Details
standards workspaces build + test / macOS energy backends (pull_request) Successful in 9m57s
Details 
Three advisories against wasmtime 49.0.4, published 2026-10-29, each patched in
49.0.5:

- RUSTSEC-2026-0422: typed functions with i31 or nullref arguments may panic,
  from an insufficient type check.
- RUSTSEC-2026-0423: cross-engine type confusion with host-created struct types
  that have supertypes.
- RUSTSEC-2026-0424: unchecked memory use when borrowed resources pass between
  components.

The update moves only the wasmtime family (49.0.4 -> 49.0.5) and its cranelift
crates (0.136.4 -> 0.136.5). WASMTIME_VERSION, which the enforcement commitment
names, follows the lockfile, as wasmtime_version_matches_the_lockfile requires.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
6e2004f70e
2026-10-30 08:32:26 -04:00