Stream: git-wasmtime

Topic: wasmtime / PR #14820 Security Fixes for release 49.0.4

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:16):

pchickey opened PR #14820 from pchickey:fixes-49.0.4 to bytecodealliance:release-49.0.0:

• wasi-http: Guests can add conflicting content lengths to messages
  GHSA-r8xh-cgf7-392j

• wasi-http p3: forwarded trailers aren't checked against is_forbidden_header hook
  GHSA-jxcf-8qw5-5c33

• wasi-http p3: Guests can set incorrect content-length for spliced response bodies
  GHSA-9prg-84vf-g5fc

• Cranelift backend on aarch64 can jump to incorrect target on large Wasm br_table instruction
  GHSA-mghf-wjfp-p5xm

• Update rustls to 0.23.46
  #14767

• Panic lowering a host-created component model stream into a guest that expects a different payload type.
  GHSA-9pvw-hwfg-92h5

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:16):

pchickey requested cfallin for a review on PR #14820.

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:16):

pchickey removed the review request for wasmtime-compiler-reviewers from PR #14820.

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:16):

pchickey requested wasmtime-wasi-reviewers for a review on PR #14820.

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:16):

pchickey requested wasmtime-core-reviewers for a review on PR #14820.

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:16):

pchickey requested rvolosatovs for a review on PR #14820.

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:16):

pchickey removed the review request for wasmtime-wasi-reviewers from PR #14820.

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:16):

pchickey requested alexcrichton for a review on PR #14820.

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:16):

pchickey removed the review request for wasmtime-default-reviewers from PR #14820.

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:16):

pchickey requested wasmtime-default-reviewers for a review on PR #14820.

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:16):

pchickey requested wasmtime-compiler-reviewers for a review on PR #14820.

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:21):

:thumbs_up: alexcrichton submitted PR review.

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:28):

pchickey has enabled auto merge for PR #14820.

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:42):

:check: pchickey merged PR #14820.

Last updated: Oct 31 2026 at 23:03 UTC