Upcoming Security Release for Wasmtime

91 views
Skip to first unread message

Alex Crichton

unread,
Apr 24, 2023, 10:09:19 AM4/24/23
to sec-an...@bytecodealliance.org
The Bytecode Alliance would like to announce a forthcoming security
release of Wasmtime.

The release will be made available on 2023-04-27 at approximately
19:00 UTC. Additionally, an advisory will be made available on the
same date and time at https://github.com/advisories.

The highest severity issue fixed in this release is LOW based on the
classification scheme defined in the OpenSSL Security Policy.

Alex Crichton

unread,
Apr 27, 2023, 1:45:11 PM4/27/23
to sec-an...@bytecodealliance.org
[Update 2023-04-27] Security releases available

Wasmtime 8.0.1, 7.0.1, and 6.0.2 are now available on crates.io.
Additionally, binary releases are available on Github for the Wasmtime
C-API shared library and CLI at
https://github.com/bytecodealliance/wasmtime/releases.

This release fixes the following security issues rated LOW:

* Undefined Behavior in Rust runtime functions
https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-ch89-5g45-qwc7
Reply all
Reply to author
Forward
0 new messages