[Git][security-tracker-team/security-tracker][master] Track fixes for rust-wasmtime issues via unstable
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Fri Oct 30 16:38:19 GMT 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
4f65979c by Salvatore Bonaccorso at 2026-10-30T17:37:54+01:00
Track fixes for rust-wasmtime issues via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -9117,12 +9117,12 @@ CVE-2026-115892 (Wasmtime is a runtime for WebAssembly. From 46.0.0 until 48.0.7
NOTE: https://github.com/advisories/GHSA-9pvw-hwfg-92h5
NOTE: https://github.com/bytecodealliance/wasmtime/pull/14827
CVE-2026-115893 (Wasmtime is a runtime for WebAssembly. Prior to 36.0.19, 48.0.7, and 4 ...)
- - rust-wasmtime <unfixed> (bug #1151861)
+ - rust-wasmtime 36.0.20+dfsg-1 (bug #1151861)
NOTE: https://rustsec.org/advisories/RUSTSEC-2026-0379.html
NOTE: https://github.com/advisories/GHSA-mghf-wjfp-p5xm
NOTE: https://github.com/bytecodealliance/wasmtime/pull/14826
CVE-2026-115889 (Wasmtime is a runtime for WebAssembly. Prior to 36.0.19 and 43.0.0, th ...)
- - rust-wasmtime <unfixed> (bug #1151861)
+ - rust-wasmtime 36.0.20+dfsg-1 (bug #1151861)
NOTE: https://rustsec.org/advisories/RUSTSEC-2026-0380.html
NOTE: https://github.com/advisories/GHSA-897f-g5gm-fmxm
NOTE: https://github.com/bytecodealliance/wasmtime/pull/12613
@@ -10422,7 +10422,7 @@ CVE-2026-115393 (Wasmtime before 24.0.12, 25.0.0 before 36.0.13, 37.0.0 before 4
NOTE: https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-hgjw-h833-99q9
NOTE: https://rustsec.org/advisories/RUSTSEC-2026-0222.html
CVE-2026-115392 (Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, ...)
- - rust-wasmtime <unfixed> (bug #1151856)
+ - rust-wasmtime 36.0.20+dfsg-1 (bug #1151856)
NOTE: https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-vqjp-4c8c-hfgg
NOTE: https://rustsec.org/advisories/RUSTSEC-2026-0269.html
CVE-2026-115391 (Wasmtime 46.0.0 before 46.0.3 and 47.0.0 before 47.0.4 contains an unc ...)
@@ -10435,17 +10435,17 @@ CVE-2026-115390 (Wasmtime 47.0.0 before 48.0.3 and 49.0.0 before 49.0.1 contains
NOTE: https://rustsec.org/advisories/RUSTSEC-2026-0315.html
NOTE: https://github.com/bytecodealliance/wasmtime/pull/14407
CVE-2026-115389 (Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0. ...)
- - rust-wasmtime <unfixed> (bug #1151856)
+ - rust-wasmtime 36.0.20+dfsg-1 (bug #1151856)
NOTE: https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-jqpg-j7w6-42pr
NOTE: https://rustsec.org/advisories/RUSTSEC-2026-0316.html
NOTE: https://github.com/bytecodealliance/wasmtime/pull/14415
CVE-2026-115388 (wasmtime-wasi-http in Wasmtime before 36.0.16, 37.0.0 before 48.0.3, a ...)
NOT-FOR-US: Rust wasmtime wasi-http
CVE-2026-115387 (Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0. ...)
- - rust-wasmtime <unfixed> (bug #1151856)
+ - rust-wasmtime 36.0.20+dfsg-1 (bug #1151856)
NOTE: https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-j2g9-4prp-pf6h
CVE-2026-115386 (Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0. ...)
- - rust-wasmtime <unfixed> (bug #1151856)
+ - rust-wasmtime 36.0.20+dfsg-1 (bug #1151856)
NOTE: https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-96f6-r43r-8c24
CVE-2026-115385 (Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a deni ...)
- rust-wasmtime <not-affected> (Only affects 46 and later)
@@ -10462,10 +10462,10 @@ CVE-2026-115382 (Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains
- rust-wasmtime <not-affected> (Only affects 46 and later)
NOTE: https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-w4qr-p94g-mjhv
CVE-2026-115381 (Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0. ...)
- - rust-wasmtime <unfixed> (bug #1151856)
+ - rust-wasmtime 36.0.20+dfsg-1 (bug #1151856)
NOTE: https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-w4qr-p94g-mjhv
CVE-2026-115380 (Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0. ...)
- - rust-wasmtime <unfixed> (bug #1151856)
+ - rust-wasmtime 36.0.20+dfsg-1 (bug #1151856)
NOTE: https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-j366-h8gg-77pm
CVE-2026-115379 (Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a miss ...)
- rust-wasmtime <not-affected> (Only affects 47 and later)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4f65979c3c359506ca67c197cf84d4a01e3617d2
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4f65979c3c359506ca67c197cf84d4a01e3617d2
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261030/716839c3/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list