Skip to content

Wasm: Bump wasmtime to 44.0.2 + 45.0.0#2129

Open
ggreif wants to merge 1 commit into
compiler-explorer:mainfrom
ggreif:wasmtime-bump
Open

Wasm: Bump wasmtime to 44.0.2 + 45.0.0#2129
ggreif wants to merge 1 commit into
compiler-explorer:mainfrom
ggreif:wasmtime-bump

Conversation

@ggreif
Copy link
Copy Markdown
Contributor

@ggreif ggreif commented May 21, 2026

Closes compiler-explorer/compiler-explorer#8706.

Adds 44.0.2 and 45.0.0 to the wasmtime targets in bin/yaml/wasm.yaml:

  • 44.0.2 — security backport addressing GHSA-2r75-cxrj-cmph (WASI path_open(TRUNCATE) bypasses FilePerms::WRITE). CE doesn't expose WASI filesystem permissions to user code, so the advisory isn't exploitable here, but no reason to ship the vulnerable patchlevel. Picked over 44.0.1.
  • 45.0.0 — the next major. Notable for CE users: includes bytecodealliance/wasmtime#13343, a cranelift mid-end optimization producing strictly tighter wasm-instruction lowering for ctz/clz-in-boolean-context patterns across all four backends (x86_64 / aarch64 / riscv64 / s390x). The pattern is common in wasm emitted by frontends doing LSB→ctz peepholes (e.g. Motoko's moc after binaryen's -Os).
  • Upstream release notes: https://github.com/bytecodealliance/wasmtime/blob/v45.0.0/RELEASES.md

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[REQUEST]: bump wasmtime to v44.0.1 (and v45.0.0 when it ships) in wasm.yaml

1 participant