request #47133 wasmtime: 36.0.2 -> 42.0.0

Infos

Artifact ID#47133

Submitted byThomas Gerbet (tgerbet)

Last Modified On2026-02-25 14:28

Submitted on2026-02-25 09:52

Rank48859

Details

Summary *

wasmtime: 36.0.2 -> 42.0.0

Original Submission

Fixes CVE-2026-27204 / https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-852m-cvvp-9p4w

Possible DoS in Tuleap use cases, the limited execution time Tuleap has in place make the exploitation unlikely/hard to trigger.

Changes:
https://github.com/bytecodealliance/wasmtime/blob/release-42.0.0/RELEASES.md
https://github.com/bytecodealliance/wasmtime/blob/release-41.0.0/RELEASES.md
https://github.com/bytecodealliance/wasmtime/blob/release-40.0.0/RELEASES.md
https://github.com/bytecodealliance/wasmtime/blob/release-39.0.0/RELEASES.md
https://github.com/bytecodealliance/wasmtime/blob/release-38.0.0/RELEASES.md
https://github.com/bytecodealliance/wasmtime/blob/release-37.0.0/RELEASES.md

CategoryTuleap Functions

Reported in versionAll

PlatformEmpty

Is an Enhancement or an internal improvement?

[ ] enhancement
[ ] internal improvement

CC listEmpty

Stage

Assigned toThomas Gerbet (tgerbet)

StatusClosed

Close date2026-02-25

Attachments

AttachmentsEmpty

References

Cross references

Show items referenced by request #47133

Referenced by request #47133

Artifact

rel #46724 17.4

Follow-ups

Kevin Traini (ktraini)

2026-02-25 14:28

Connected artifacts
- Added Fixed in: rel #46724

Tracker Workflow Manager (forge__tracker_workflow_manager)

2026-02-25 14:27

Closed by @tgerbet with git #tuleap/stable/7fd0161c6043dfedc791417360a9bd9fc62beda7.

Status changed from Under implementation to Closed
Close date set to 2026-02-25