Skip to content

v49.0.4: Release Wasmtime 49.0.4 (#14816)

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 19 Oct 19:20
· 353 commits to main since this release
Immutable release. Only release title and notes can be modified.
v49.0.4
2c29702
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

49.0.4

Released 2026-10-19.

Fixed

  • wasi-http: Guests can add conflicting content lengths to messages
    GHSA-r8xh-cgf7-392j
  • wasi-http p3: forwarded trailers aren't checked against is_forbidden_header hook
    GHSA-jxcf-8qw5-5c33
  • wasi-http p3: Guests can set incorrect content-length for spliced response bodies
    GHSA-9prg-84vf-g5fc
  • Cranelift backend on aarch64 can jump to incorrect target on large Wasm br_table instruction
    GHSA-mghf-wjfp-p5xm
  • Update rustls to 0.23.46
    #14767
  • Panic lowering a host-created component model stream into a guest that expects a different payload type.
    GHSA-9pvw-hwfg-92h5
Assets 42
Loading