Upcoming Security Release for Wasmtime on 2023-09-14

55 views
Skip to first unread message

Alex Crichton

unread,
Sep 11, 2023, 10:05:43 AM9/11/23
to sec-an...@bytecodealliance.org
The Wasmtime project would like to announce a forthcoming security
release of Wasmtime.

The release will be made available on 2023-09-14 at approximately
19:00 UTC. Additionally, an advisory will be made available on the
same date and time at https://github.com/advisories.

The highest severity issue fixed in this release is LOW based on the
classification scheme defined by CVSS.

Alex Crichton

unread,
Sep 14, 2023, 6:30:41 PM9/14/23
to sec-an...@bytecodealliance.org
[Update 2023-09-14] Security releases available

Wasmtime 12.0.2, 11.0.2, and 10.0.2 are now available on crates.io.
Additionally, binary releases are available on Github for the Wasmtime
C-API shared library and CLI at
https://github.com/bytecodealliance/wasmtime/releases.

This release fixes the following security issues rated LOW:

Miscompilation of wasm `i64x2.shr_s` instruction with constant input on x86_64
https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-gw5p-q8mj-p7gh
Reply all
Reply to author
Forward
0 new messages