Stream: git-wasmtime

Topic: wasmtime / PR #14818 Security fixes for release 36.0.19

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:03):

pchickey opened PR #14818 from pchickey:fixes-36.0.19 to bytecodealliance:release-36.0.0:

<!--
Please make sure you include the following information:

• If this work has been discussed elsewhere, please include a link to that
  conversation. If it was discussed in an issue, just mention "issue #...".

• Explain why this change is needed. If the details are in an issue already,
  this can be brief.

Our development process is documented in the Wasmtime book:
https://docs.wasmtime.dev/contributing-development-process.html

Please review the Bytecode Alliance's AI tool usage policy at
https://github.com/bytecodealliance/governance/blob/main/AI_TOOL_POLICY.md

Please ensure all communication follows the code of conduct:
https://github.com/bytecodealliance/wasmtime/blob/main/CODE_OF_CONDUCT.md
-->

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:03):

pchickey requested cfallin for a review on PR #14818.

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:03):

pchickey removed the review request for wasmtime-compiler-reviewers from PR #14818.

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:03):

pchickey requested wasmtime-compiler-reviewers for a review on PR #14818.

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:03):

pchickey removed the review request for wasmtime-wasi-reviewers from PR #14818.

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:03):

pchickey requested rvolosatovs for a review on PR #14818.

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:03):

pchickey requested wasmtime-wasi-reviewers for a review on PR #14818.

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:03):

pchickey requested wasmtime-core-reviewers for a review on PR #14818.

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:03):

pchickey removed the review request for wasmtime-default-reviewers from PR #14818.

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:03):

pchickey requested alexcrichton for a review on PR #14818.

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:03):

pchickey requested wasmtime-default-reviewers for a review on PR #14818.

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:04):

:thumbs_up: alexcrichton submitted PR review.

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:06):

pchickey edited PR #14818:

• wasi-http: Guests can add conflicting content lengths to messages
  GHSA-r8xh-cgf7-392j

• Cranelift backend on aarch64 can jump to incorrect target on large Wasm br_table instruction
  GHSA-mghf-wjfp-p5xm

• Bit-packing in Cranelift compiler causes silent overflow and miscompilation
  GHSA-897f-g5gm-fmxm

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:10):

pchickey has enabled auto merge for PR #14818.

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:26):

:check: pchickey merged PR #14818.

Last updated: Oct 31 2026 at 23:03 UTC