Debian/rust-wasmtime: medium 6.5

Wasmtime is a runtime for WebAssembly. Prior to 24.0.11, 36.0.12, 45.0.3, and 46.0.1, wasmtime-wasi hard-link creation and renaming check directory permissions but not matching FilePerms on source and

Action: Upgrade rust-wasmtime to 36.0.12+dfsg-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2026-58494#Debian:14/rust-wasmtime
• https://security-tracker.debian.org/tracker/CVE-2026-58494

published 2026-07-08T21:16:54Z · modified 2026-10-01T03:03:28.010617136Z · JSON