Wasmtime segfault or unused out-of-sandbox load with `f64.copysign` operator on x86-64

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-vc8c-j3xm-xj73 For more information see the GitHub-hosted security advisory...

SUSE SLED15: gdk-pixbuf-loader-rsvg / gdk-pixbuf-loader-rsvg-32bit / librsvg-2-2 / etc (SUSE-SU-2026:0243-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0243-1 advisory. Update to version 2.57.4 - bsc1243867: - CVE-2024-12224: RUSTSEC-2024-0421 - idna accepts Punycode labels...

Security update for librsvg

This update for librsvg fixes the following issues: Update to version 2.57.4 - bsc1243867: CVE-2024-12224: RUSTSEC-2024-0421 - idna accepts Punycode labels that do not produce any non-ASCII when decoded. RUSTSEC-2024-0404 - Unsoundness in anstream. Patch Instructions: To install this SUSE update...

Fedora: Security Advisory (FEDORA-2026-e153bc6b6a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2026-cd2a3ce9e6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

scalyc (>=0.0.2, <=0.0.5) potentially affected by unknown CVE via scaly (>=0.0.2, <=0.0.5)

scaly CARGO version =0.0.2, =0.0.2, =0.0.5 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0080...

a1 (>=1.0.1, <=1.0.2), actor-kit (>=0.1.0, <=0.2.7) +114 more potentially affected by unknown CVE via rkyv (0.8.2)

rkyv CARGO version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on rkyv and may be impacted: - a1 =1.0.1, =0.1.0, =0.1.0, =0.1.0, =0.4.0, =0.9.0, =0.5.0, =0.5.0, =0.1.0-beta.2, =0.2.0 - fluxbench-logic 0.2.0 - fluxbench-report 0.2.0 and more Sour...

aquatic_http (0.2.0), aquatic_http_load_test (0.2.0) +73 more potentially affected by unknown CVE via bitmaps (3.2.1)

bitmaps CARGO version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on bitmaps and may be impacted: - aquatichttp 0.2.0 - aquatichttploadtest 0.2.0 - armvcpu =0.5.1, =0.4.3, =0.3.5, =0.5.0, =0.8.1, =0.5.13, =0.4.12, =0.4.13, =0.5.4, =0.3.0, =0.2.0...

a2f (>=0.1.0, <=0.4.0), a2f-el (>=0.1.0, <=0.3.3) +4545 more potentially affected by unknown CVE via bincode (>=0.0.1, <=3.0.0)

bincode CARGO version =0.0.1, =0.1.0, =0.1.0, =0.10.0-dev0, =0.3.0, =0.1.0, =0.1.13, =0.1.0, =0.1.0, =0.1.0, =0.6.0 - accumulator 0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0141...

abd-clam (>=0.22.6, <=0.30.0), abi_stable (>=0.1.0, <=0.8.4) +3329 more potentially affected by unknown CVE via rand_os (>=0.1.3, <=0.2.2)

randos CARGO version =0.1.3, =0.22.6, =0.1.0, =0.4.0, =0.0.1, =0.0.1, =0.0.1, =0.0.3, =0.1.0, =0.1.0, =0.1.0, =0.1.3, =0.11.0, =0.12.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0124...

abe_gpsw (>=0.2.4, <=2.0.0), ace-test-lib (0.1.0) +1963 more potentially affected by unknown CVE via gcc (>=0.3.35, <=0.3.55)

gcc CARGO version =0.3.35, =0.2.4, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.0.1, =0.1.2, =0.1.2, =0.1.0, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0121...

absurdler (>=0.1.0, <=0.1.1), acick-util (>=0.0.7-alpha.1, <=0.0.7-alpha.2) +692 more potentially affected by unknown CVE via number_prefix (>=0.2.8, <=0.4.0)

numberprefix CARGO version =0.2.8, =0.1.0, =0.0.7-alpha.1, =0.1.0, =0.1.7, =1.1.0, =0.1.0, =0.5.1, =0.5.4, =0.1.0, =0.1.0, =1.0.0, =0.7.0, =2.0.10 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0119...

RUSTSEC-2025-0118 Unsound API access to a WebAssembly shared linear memory

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-hc7m-r6v8-hg9q For more information see the GitHub-hosted security advisory...

tandem_garble_interop (>=0.1.0, <=0.3.0) potentially affected by unknown CVE via tandem (>=0.1.0, <=0.3.0)

tandem CARGO version =0.1.0, =0.1.0, =0.3.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0117...

bootstring (0.1.0), deltachat_message_parser (>=0.3.0, <=0.14.1) +7 more potentially affected by unknown CVE via unic-idna-punycode (>=0.1.1, <=0.9.0)

unic-idna-punycode CARGO version =0.1.1, =0.3.0, =0.2.4-beta, =0.3.0, =0.1.0, =0.1.0, =0.5.0, =0.7.0, =0.1.1, =0.9.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0088...

audio-processor-analysis (>=0.1.0-alpha.4, <=0.1.0-alpha.9), chalkboard (0.1.0) +66 more potentially affected by unknown CVE via unic-bidi (>=0.1.0, <=0.9.0)

unic-bidi CARGO version =0.1.0, =0.1.0-alpha.4, =0.4.0, =0.7.0, =0.4.0, =0.7.0, =0.8.3 - druid-ui 0.0.1 - druid-widget-nursery 0.1.0 - druidtask1 0.1.0 - ellisia 0.0.0 - ezel 0.0.1 - frui 0.0.1 - fruicore 0.0.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0096...

rev-up-your-harley (>=0.1.0, <=1.0.1), rustpython-vm (>=0.1.0, <=0.1.1) +2 more potentially affected by unknown CVE via unic-char (>=0.6.0, <=0.9.0)

unic-char CARGO version =0.6.0, =0.1.0, =0.1.0, =0.6.0, =0.7.0, =0.9.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0086...

alemat (>=0.3.0, <=0.8.0), box-bin (0.3.1) +17 more potentially affected by unknown CVE via unic-ucd-block (>=0.8.0, <=0.9.0)

unic-ucd-block CARGO version =0.8.0, =0.3.0, =0.3.0, =0.0.0, =0.0.102, =0.0.7, =0.0.1, =1.0.0, =1.11.3, =0.0.0, =0.1.0, =0.8.0, =0.8.0, =0.9.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0099...

alemat (>=0.3.0, <=0.8.0), box-bin (0.3.1) +27 more potentially affected by unknown CVE via unic-ucd-hangul (>=0.8.0, <=0.9.0)

unic-ucd-hangul CARGO version =0.8.0, =0.3.0, =0.3.0, =0.0.0, =0.2.4-beta, =0.0.102, =0.0.7, =0.0.1, =1.0.0, =1.11.3, =0.0.0, =0.3.0, =0.4.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0079...

alemat (>=0.3.0, <=0.8.0), audio-processor-analysis (>=0.1.0-alpha.4, <=0.1.0-alpha.9) +86 more potentially affected by unknown CVE via unic-ucd-bidi (>=0.1.1, <=0.9.0)

unic-ucd-bidi CARGO version =0.1.1, =0.3.0, =0.1.0-alpha.4, =0.3.0, =0.4.0, =0.0.0, =0.2.4-beta, =0.7.0, =0.4.0, =0.7.0, =0.8.3 - druid-ui 0.0.1 - druid-widget-nursery 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0083...