Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

wasmedge/0.14.0 package update #20041

Merged
merged 1 commit into from
May 23, 2024

Conversation

octo-sts[bot]
Copy link
Contributor

@octo-sts octo-sts bot commented May 23, 2024

Signed-off-by: wolfi-bot <121097084+wolfi-bot@users.noreply.github.com>
@octo-sts octo-sts bot added request-version-update request for a newer version of a package automated pr labels May 23, 2024
Copy link
Contributor

Package wasmedge: Click to expand/collapse

Package wasmedge:
Added: /usr/lib/libwasmedge.so.0.1.0
Modified: /usr/bin/wasmedge
Modified: /usr/bin/wasmedgec
Deleted: /usr/lib/libwasmedge.so.0.0.3

Package wasmedge-dev: Click to expand/collapse

Package wasmedge-dev:
Added: /usr/include/fmt/args.h
Added: /usr/include/fmt/chrono.h
Added: /usr/include/fmt/color.h
Added: /usr/include/fmt/compile.h
Added: /usr/include/fmt/core.h
Added: /usr/include/fmt/format-inl.h
Added: /usr/include/fmt/format.h
Added: /usr/include/fmt/os.h
Added: /usr/include/fmt/ostream.h
Added: /usr/include/fmt/printf.h
Added: /usr/include/fmt/ranges.h
Added: /usr/include/fmt/std.h
Added: /usr/include/fmt/xchar.h
Added: /usr/lib/cmake/fmt/fmt-config-version.cmake
Added: /usr/lib/cmake/fmt/fmt-config.cmake
Added: /usr/lib/cmake/fmt/fmt-targets-release.cmake
Added: /usr/lib/cmake/fmt/fmt-targets.cmake
Added: /usr/lib/libfmt.a
Added: /usr/lib/pkgconfig/fmt.pc
Modified: /usr/include/wasmedge/enum.inc
Modified: /usr/include/wasmedge/enum_types.h
Modified: /usr/include/wasmedge/version.h
Modified: /usr/include/wasmedge/wasmedge.h
Modified: /usr/lib/cmake/simdjson/simdjsonTargets.cmake

bincapz found differences: Click to expand/collapse

Deleted: wasmedge/usr/lib/libwasmedge.so.0.0.3 [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM dylib/symbol/address get the address of a symbol dlsym
-LOW compression/zstd Zstandard: fast real-time compression algorithm zstd
-LOW dylib/address/check determine if address belongs to a shared library dladdr
-LOW fd/epoll I/O event notification facility epoll_wait
-LOW fs/file/delete deletes files unlinkat
-LOW fs/file/times/set change file timestamps with nanosecond precision utimensat
-LOW fs/file/truncate truncate a file to a specified length ftruncate
-LOW fs/file/write writes to file _ZL12writeMapFileRN4llvm14raw_fd_ostreamE
_ZN4llvm16writeIndexToFileERKNS_18ModuleSummaryIndexERNS_1
-LOW fs/link/read read value of a symbolic link readlinkat
-LOW net/hostport/parse Network address and service translation freeaddrinfo
getaddrinfo
-LOW net/socket/listen listen on a socket accept
listen
socket
-LOW net/socket/local/address get local address of connected socket getsockname
-LOW net/socket/peer/address get peer address of connected socket getpeername
-LOW net/socket/receive receive a message from a socket recvmsg
-LOW net/socket/send send a message to a socket sendmsg
-LOW process/chroot change the location of root for the process chroot
-LOW process/thread_local_storage Uses glibc thread local storage __tls_get_addr
-LOW ref/site/url contains embedded HTTPS URLs https://lld.llvm.org/ELF/start-stop-gc
https://lld.llvm.org/missingkeyfunction
-LOW ref/words/plugin references a 'plugin' Load passes from plugin library
PluginCreateModule
PluginInitWASINN
PluginListModuleLength
PluginLoadFromPath
Plugin_GetDescriptor
WasmEdge_PluginFind
WasmEdge_PluginGetPluginName
WasmEdge_PluginListPluginsLength
_GLOBAL__sub_I_plugin
pluginH9
plugins
unknown plugin option

Added: wasmedge-dev/usr/include/fmt/format-inl.h [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM exec/shell_command execute a shell command system
+LOW ref/site/url contains embedded HTTPS URLs https://github.com/jk-jeon/dragonbox.

Added: wasmedge-dev/usr/include/fmt/chrono.h [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://en.wikipedia.org/wiki/ISO_week_date.
https://github.com/pauldreik/safe_duration_cast
https://johnnylee-sde.github.io/Fast-unsigned-integer-to-time-string/.

Added: wasmedge-dev/usr/include/fmt/core.h [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://fmt.dev/latest/api.html
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=59884.
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=61414
fmtlib/fmt#3247
https://godbolt.org/z/GvWzcTjh1.
https://godbolt.org/z/sWw4vP.
https://herbsutter.com/2009/10/18/mailbag-shutting-up-compiler-warnings/.

Added: wasmedge/usr/lib/libwasmedge.so.0.1.0 [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM dylib/symbol/address get the address of a symbol dlsym
+LOW compression/zstd Zstandard: fast real-time compression algorithm zstd
+LOW dylib/address/check determine if address belongs to a shared library dladdr
+LOW fd/epoll I/O event notification facility epoll_wait
+LOW fs/file/delete deletes files unlinkat
+LOW fs/file/times/set change file timestamps with nanosecond precision utimensat
+LOW fs/file/truncate truncate a file to a specified length ftruncate
+LOW fs/file/write writes to file _ZL12writeMapFileRN4llvm14raw_fd_ostreamE
_ZN4llvm16writeIndexToFileERKNS_18ModuleSummaryIndexERNS_1
+LOW fs/link/read read value of a symbolic link readlinkat
+LOW net/hostport/parse Network address and service translation freeaddrinfo
getaddrinfo
+LOW net/socket/listen listen on a socket accept
listen
socket
+LOW net/socket/local/address get local address of connected socket getsockname
+LOW net/socket/peer/address get peer address of connected socket getpeername
+LOW net/socket/receive receive a message from a socket recvmsg
+LOW net/socket/send send a message to a socket sendmsg
+LOW process/chroot change the location of root for the process chroot
+LOW process/thread_local_storage Uses glibc thread local storage __tls_get_addr
+LOW ref/site/url contains embedded HTTPS URLs https://lld.llvm.org/ELF/start-stop-gc
https://lld.llvm.org/missingkeyfunction
+LOW ref/words/plugin references a 'plugin' Load passes from plugin library
PluginCreateModule
PluginInitWASINN
PluginListModuleLength
PluginLoadFromPath
Plugin_GetDescriptor
WasmEdge_PluginFind
WasmEdge_PluginGetPluginName
WasmEdge_PluginListPluginsLength
_GLOBAL__sub_I_plugin
of plugin
pluginH9
plugins
unknown plugin option

Added: wasmedge-dev/usr/include/fmt/os.h [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM exec/shell_command execute a shell command system
+LOW ref/site/url contains embedded HTTPS URLs https://pubs.opengroup.org/onlinepubs/007904875/functions/open.html

@ajayk ajayk merged commit 658a3aa into main May 23, 2024
8 checks passed
@ajayk ajayk deleted the wolfictl-5580ba50-3140-445e-bedd-9f067e472ba6 branch May 23, 2024 17:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
automated pr request-version-update request for a newer version of a package
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants