[Git][security-tracker-team/security-tracker][master] Update some rust-wasmtime issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
aea9fc0a by Salvatore Bonaccorso at 2026-10-29T21:53:14+01:00
Update some rust-wasmtime issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -328,14 +328,9 @@ CVE-2026-119145 (Frappe before 15.121.0 and 16.x before 16.34.0 contains a path
 	NOT-FOR-US: Frappe
 CVE-2026-119144 (Frappe Framework before 15.111.0 and 16.x before 16.21.0 contains a se ...)
 	NOT-FOR-US: Frappe
-CVE-2026-119143 (Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a deni ...)
-	TODO: check
-CVE-2026-119142 (Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a deni ...)
-	TODO: check
-CVE-2026-119141 (Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a deni ...)
-	TODO: check
 CVE-2026-119140 (Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a deni ...)
-	TODO: check
+	- rust-wasmtime <not-affected> (Vulnerable code introduced later)
+	NOTE: https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-5hhx-4wrr-3j9g
 CVE-2026-119139 (Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a left ...)
 	TODO: check
 CVE-2026-119138 (Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a deni ...)
@@ -8313,7 +8308,7 @@ CVE-2026-XXXX [RUSTSEC-2026-0353]
 	NOTE: https://rustsec.org/advisories/RUSTSEC-2026-0353.html
 	NOTE: https://github.com/advisories/GHSA-m6w2-jwq2-cv2c
 	NOTE: https://github.com/bytecodealliance/wasmtime/pull/14737
-CVE-2026-XXXX [RUSTSEC-2026-0354]
+CVE-2026-119142 [RUSTSEC-2026-0354]
 	- rust-wasmtime <not-affected> (Only affects 46 and later)
 	NOTE: https://rustsec.org/advisories/RUSTSEC-2026-0354.html
 	NOTE: https://github.com/advisories/GHSA-3r89-v5mq-j5xf
@@ -8323,12 +8318,12 @@ CVE-2026-XXXX [RUSTSEC-2026-0355]
 	NOTE: https://rustsec.org/advisories/RUSTSEC-2026-0355.html
 	NOTE: https://github.com/advisories/GHSA-63h4-6cx9-pjfj
 	NOTE: https://github.com/bytecodealliance/wasmtime/pull/14733
-CVE-2026-XXXX [RUSTSEC-2026-0356]
+CVE-2026-119141 [RUSTSEC-2026-0356]
 	- rust-wasmtime <not-affected> (Only affects 46 and later)
 	NOTE: https://github.com/advisories/GHSA-7v24-42x9-pxf7
 	NOTE: https://rustsec.org/advisories/RUSTSEC-2026-0356.html
 	NOTE: https://github.com/bytecodealliance/wasmtime/pull/14739
-CVE-2026-XXXX [RUSTSEC-2026-0357]
+CVE-2026-119143 [RUSTSEC-2026-0357]
 	- rust-wasmtime <not-affected> (Only affects 46 and later)
 	NOTE: https://rustsec.org/advisories/RUSTSEC-2026-0357.html
 	NOTE: https://github.com/advisories/GHSA-93g3-36p8-x2gc



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/aea9fc0a2faf42fda187fb1e01a2cf6532c4f9c7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/aea9fc0a2faf42fda187fb1e01a2cf6532c4f9c7
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261029/ee3585ba/attachment-0001.htm>