Stream: git-wasmtime

Topic: wasmtime / PR #13002 [24.0.x] Combined backports for a 24...

Wasmtime GitHub notifications bot (Apr 09 2026 at 14:36):

alexcrichton requested cfallin for a review on PR #13002.

Wasmtime GitHub notifications bot (Apr 09 2026 at 14:36):

alexcrichton requested wasmtime-default-reviewers for a review on PR #13002.

Wasmtime GitHub notifications bot (Apr 09 2026 at 14:36):

alexcrichton opened PR #13002 from alexcrichton:ghsa-backports-24 to bytecodealliance:release-24.0.0:

Fixes included:

• Out-of-bounds write or crash when transcoding component model strings.
  GHSA-394w-hwhg-8vgm

• Wasmtime segfault or unused out-of-sandbox load with f64x2.splat operator
  on x86-64.
  GHSA-qqfj-4vcm-26hv

• Panic when transcoding misaligned utf-16 strings.
  GHSA-jxhv-7h78-9775

• Panic when lifting flags component value.
  GHSA-m758-wjhj-p3jq

• Heap OOB read in component model UTF-16 to latin1+utf16 string transcoding.
  GHSA-hx6p-xpx3-jvvv

Wasmtime GitHub notifications bot (Apr 09 2026 at 14:36):

alexcrichton requested wasmtime-compiler-reviewers for a review on PR #13002.

Wasmtime GitHub notifications bot (Apr 09 2026 at 14:36):

alexcrichton requested wasmtime-core-reviewers for a review on PR #13002.

Wasmtime GitHub notifications bot (Apr 09 2026 at 14:37):

fitzgen submitted PR review.

Wasmtime GitHub notifications bot (Apr 09 2026 at 14:37):

cfallin submitted PR review.

Wasmtime GitHub notifications bot (Apr 09 2026 at 14:39):

alexcrichton has enabled auto merge for PR #13002.

Wasmtime GitHub notifications bot (Apr 09 2026 at 14:57):

alexcrichton merged PR #13002.

Last updated: Apr 12 2026 at 23:10 UTC