Release Wasmtime 25.0.3 (#9562)

* Release Wasmtime 25.0.3 [automatically-tag-and-release-this-commit] * Add release notes. --------- Co-authored-by: Wasmtime Publish <[email protected]> Co-authored-by: Dan Gohman <[email protected]>
bytecodealliance · Nov 5, 2024 · 94c223f · 94c223f
1 parent 51736e3
commit 94c223f
Show file tree

Hide file tree

Showing 25 changed files with 628 additions and 132 deletions.
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/Cargo.toml b/Cargo.toml
@@ -156,7 +156,7 @@ exclude = [
 ]
 
 [workspace.package]
-version = "25.0.2"
+version = "25.0.3"
 authors = ["The Wasmtime Project Developers"]
 edition = "2021"
 # Wasmtime's current policy is that this number can be no larger than the
@@ -184,62 +184,62 @@ manual_strip = 'warn'
 
 [workspace.dependencies]
 arbitrary = { version = "1.3.1" }
-wasmtime-wmemcheck = { path = "crates/wmemcheck", version = "=25.0.2" }
-wasmtime = { path = "crates/wasmtime", version = "25.0.2", default-features = false }
-wasmtime-c-api-macros = { path = "crates/c-api-macros", version = "=25.0.2" }
-wasmtime-cache = { path = "crates/cache", version = "=25.0.2" }
-wasmtime-cli-flags = { path = "crates/cli-flags", version = "=25.0.2" }
-wasmtime-cranelift = { path = "crates/cranelift", version = "=25.0.2" }
-wasmtime-winch = { path = "crates/winch", version = "=25.0.2" }
-wasmtime-environ = { path = "crates/environ", version = "=25.0.2" }
-wasmtime-explorer = { path = "crates/explorer", version = "=25.0.2" }
-wasmtime-fiber = { path = "crates/fiber", version = "=25.0.2" }
-wasmtime-types = { path = "crates/types", version = "25.0.2" }
-wasmtime-jit-debug = { path = "crates/jit-debug", version = "=25.0.2" }
-wasmtime-wast = { path = "crates/wast", version = "=25.0.2" }
-wasmtime-wasi = { path = "crates/wasi", version = "25.0.2", default-features = false }
-wasmtime-wasi-http = { path = "crates/wasi-http", version = "=25.0.2", default-features = false }
-wasmtime-wasi-nn = { path = "crates/wasi-nn", version = "25.0.2" }
-wasmtime-wasi-runtime-config = { path = "crates/wasi-runtime-config", version = "25.0.2" }
-wasmtime-wasi-keyvalue = { path = "crates/wasi-keyvalue", version = "25.0.2" }
-wasmtime-wasi-threads = { path = "crates/wasi-threads", version = "25.0.2" }
-wasmtime-component-util = { path = "crates/component-util", version = "=25.0.2" }
-wasmtime-component-macro = { path = "crates/component-macro", version = "=25.0.2" }
-wasmtime-asm-macros = { path = "crates/asm-macros", version = "=25.0.2" }
-wasmtime-versioned-export-macros = { path = "crates/versioned-export-macros", version = "=25.0.2" }
-wasmtime-slab = { path = "crates/slab", version = "=25.0.2" }
+wasmtime-wmemcheck = { path = "crates/wmemcheck", version = "=25.0.3" }
+wasmtime = { path = "crates/wasmtime", version = "25.0.3", default-features = false }
+wasmtime-c-api-macros = { path = "crates/c-api-macros", version = "=25.0.3" }
+wasmtime-cache = { path = "crates/cache", version = "=25.0.3" }
+wasmtime-cli-flags = { path = "crates/cli-flags", version = "=25.0.3" }
+wasmtime-cranelift = { path = "crates/cranelift", version = "=25.0.3" }
+wasmtime-winch = { path = "crates/winch", version = "=25.0.3" }
+wasmtime-environ = { path = "crates/environ", version = "=25.0.3" }
+wasmtime-explorer = { path = "crates/explorer", version = "=25.0.3" }
+wasmtime-fiber = { path = "crates/fiber", version = "=25.0.3" }
+wasmtime-types = { path = "crates/types", version = "25.0.3" }
+wasmtime-jit-debug = { path = "crates/jit-debug", version = "=25.0.3" }
+wasmtime-wast = { path = "crates/wast", version = "=25.0.3" }
+wasmtime-wasi = { path = "crates/wasi", version = "25.0.3", default-features = false }
+wasmtime-wasi-http = { path = "crates/wasi-http", version = "=25.0.3", default-features = false }
+wasmtime-wasi-nn = { path = "crates/wasi-nn", version = "25.0.3" }
+wasmtime-wasi-runtime-config = { path = "crates/wasi-runtime-config", version = "25.0.3" }
+wasmtime-wasi-keyvalue = { path = "crates/wasi-keyvalue", version = "25.0.3" }
+wasmtime-wasi-threads = { path = "crates/wasi-threads", version = "25.0.3" }
+wasmtime-component-util = { path = "crates/component-util", version = "=25.0.3" }
+wasmtime-component-macro = { path = "crates/component-macro", version = "=25.0.3" }
+wasmtime-asm-macros = { path = "crates/asm-macros", version = "=25.0.3" }
+wasmtime-versioned-export-macros = { path = "crates/versioned-export-macros", version = "=25.0.3" }
+wasmtime-slab = { path = "crates/slab", version = "=25.0.3" }
 component-test-util = { path = "crates/misc/component-test-util" }
 component-fuzz-util = { path = "crates/misc/component-fuzz-util" }
-wiggle = { path = "crates/wiggle", version = "=25.0.2", default-features = false }
-wiggle-macro = { path = "crates/wiggle/macro", version = "=25.0.2" }
-wiggle-generate = { path = "crates/wiggle/generate", version = "=25.0.2" }
-wasi-common = { path = "crates/wasi-common", version = "=25.0.2", default-features = false }
+wiggle = { path = "crates/wiggle", version = "=25.0.3", default-features = false }
+wiggle-macro = { path = "crates/wiggle/macro", version = "=25.0.3" }
+wiggle-generate = { path = "crates/wiggle/generate", version = "=25.0.3" }
+wasi-common = { path = "crates/wasi-common", version = "=25.0.3", default-features = false }
 wasmtime-fuzzing = { path = "crates/fuzzing" }
-wasmtime-jit-icache-coherence = { path = "crates/jit-icache-coherence", version = "=25.0.2" }
-wasmtime-wit-bindgen = { path = "crates/wit-bindgen", version = "=25.0.2" }
+wasmtime-jit-icache-coherence = { path = "crates/jit-icache-coherence", version = "=25.0.3" }
+wasmtime-wit-bindgen = { path = "crates/wit-bindgen", version = "=25.0.3" }
 test-programs-artifacts = { path = 'crates/test-programs/artifacts' }
 
-pulley-interpreter = { path = 'pulley', version = "=0.1.2" }
+pulley-interpreter = { path = 'pulley', version = "=0.1.3" }
 pulley-interpreter-fuzz = { path = 'pulley/fuzz' }
 
-cranelift-wasm = { path = "cranelift/wasm", version = "0.112.2" }
-cranelift-codegen = { path = "cranelift/codegen", version = "0.112.2", default-features = false, features = ["std", "unwind"] }
-cranelift-frontend = { path = "cranelift/frontend", version = "0.112.2" }
-cranelift-entity = { path = "cranelift/entity", version = "0.112.2" }
-cranelift-native = { path = "cranelift/native", version = "0.112.2" }
-cranelift-module = { path = "cranelift/module", version = "0.112.2" }
-cranelift-interpreter = { path = "cranelift/interpreter", version = "0.112.2" }
-cranelift-reader = { path = "cranelift/reader", version = "0.112.2" }
+cranelift-wasm = { path = "cranelift/wasm", version = "0.112.3" }
+cranelift-codegen = { path = "cranelift/codegen", version = "0.112.3", default-features = false, features = ["std", "unwind"] }
+cranelift-frontend = { path = "cranelift/frontend", version = "0.112.3" }
+cranelift-entity = { path = "cranelift/entity", version = "0.112.3" }
+cranelift-native = { path = "cranelift/native", version = "0.112.3" }
+cranelift-module = { path = "cranelift/module", version = "0.112.3" }
+cranelift-interpreter = { path = "cranelift/interpreter", version = "0.112.3" }
+cranelift-reader = { path = "cranelift/reader", version = "0.112.3" }
 cranelift-filetests = { path = "cranelift/filetests" }
-cranelift-object = { path = "cranelift/object", version = "0.112.2" }
-cranelift-jit = { path = "cranelift/jit", version = "0.112.2" }
+cranelift-object = { path = "cranelift/object", version = "0.112.3" }
+cranelift-jit = { path = "cranelift/jit", version = "0.112.3" }
 cranelift-fuzzgen = { path = "cranelift/fuzzgen" }
-cranelift-bforest = { path = "cranelift/bforest", version = "0.112.2" }
-cranelift-bitset = { path = "cranelift/bitset", version = "0.112.2" }
-cranelift-control = { path = "cranelift/control", version = "0.112.2" }
-cranelift = { path = "cranelift/umbrella", version = "0.112.2" }
+cranelift-bforest = { path = "cranelift/bforest", version = "0.112.3" }
+cranelift-bitset = { path = "cranelift/bitset", version = "0.112.3" }
+cranelift-control = { path = "cranelift/control", version = "0.112.3" }
+cranelift = { path = "cranelift/umbrella", version = "0.112.3" }
 
-winch-codegen = { path = "winch/codegen", version = "=0.23.2" }
+winch-codegen = { path = "winch/codegen", version = "=0.23.3" }
 
 wasi-preview1-component-adapter = { path = "crates/wasi-preview1-component-adapter" }
 byte-array-literals = { path = "crates/wasi-preview1-component-adapter/byte-array-literals" }

diff --git a/RELEASES.md b/RELEASES.md
@@ -1,3 +1,15 @@
+## 25.0.3
+
+Released 2024-11-05.
+
+### Fixed
+
+* Update to cap-std 3.4.1, for #9559, which fixes a wasi-filesystem sandbox
+  escape on Windows.
+  [CVE-2024-51745](https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-c2f5-jxjv-2hh8).
+
+--------------------------------------------------------------------------------
+
 ## 25.0.2
 
 Released 2024-10-09.

diff --git a/cranelift/bforest/Cargo.toml b/cranelift/bforest/Cargo.toml
@@ -1,7 +1,7 @@
 [package]
 authors = ["The Cranelift Project Developers"]
 name = "cranelift-bforest"
-version = "0.112.2"
+version = "0.112.3"
 description = "A forest of B+-trees"
 license = "Apache-2.0 WITH LLVM-exception"
 documentation = "https://docs.rs/cranelift-bforest"

diff --git a/cranelift/bitset/Cargo.toml b/cranelift/bitset/Cargo.toml
@@ -1,7 +1,7 @@
 [package]
 authors = ["The Cranelift Project Developers"]
 name = "cranelift-bitset"
-version = "0.112.2"
+version = "0.112.3"
 description = "Various bitset stuff for use inside Cranelift"
 license = "Apache-2.0 WITH LLVM-exception"
 documentation = "https://docs.rs/cranelift-bitset"

diff --git a/cranelift/codegen/Cargo.toml b/cranelift/codegen/Cargo.toml
@@ -1,7 +1,7 @@
 [package]
 authors = ["The Cranelift Project Developers"]
 name = "cranelift-codegen"
-version = "0.112.2"
+version = "0.112.3"
 description = "Low-level code generator library"
 license = "Apache-2.0 WITH LLVM-exception"
 documentation = "https://docs.rs/cranelift-codegen"
@@ -20,7 +20,7 @@ workspace = true
 anyhow = { workspace = true, optional = true, features = ['std'] }
 bumpalo = "3"
 capstone = { workspace = true, optional = true }
-cranelift-codegen-shared = { path = "./shared", version = "0.112.2" }
+cranelift-codegen-shared = { path = "./shared", version = "0.112.3" }
 cranelift-entity = { workspace = true }
 cranelift-bforest = { workspace = true }
 cranelift-bitset = { workspace = true }
@@ -49,8 +49,8 @@ similar = "2.1.0"
 env_logger = { workspace = true }
 
 [build-dependencies]
-cranelift-codegen-meta = { path = "meta", version = "0.112.2" }
-cranelift-isle = { path = "../isle/isle", version = "=0.112.2" }
+cranelift-codegen-meta = { path = "meta", version = "0.112.3" }
+cranelift-isle = { path = "../isle/isle", version = "=0.112.3" }
 
 [features]
 default = ["std", "unwind", "host-arch", "timing"]

diff --git a/cranelift/codegen/meta/Cargo.toml b/cranelift/codegen/meta/Cargo.toml
@@ -1,7 +1,7 @@
 [package]
 name = "cranelift-codegen-meta"
 authors = ["The Cranelift Project Developers"]
-version = "0.112.2"
+version = "0.112.3"
 description = "Metaprogram for cranelift-codegen code generator library"
 license = "Apache-2.0 WITH LLVM-exception"
 repository = "https://github.com/bytecodealliance/wasmtime"
@@ -16,4 +16,4 @@ workspace = true
 rustdoc-args = [ "--document-private-items" ]
 
 [dependencies]
-cranelift-codegen-shared = { path = "../shared", version = "0.112.2" }
+cranelift-codegen-shared = { path = "../shared", version = "0.112.3" }
diff --git a/cranelift/codegen/shared/Cargo.toml b/cranelift/codegen/shared/Cargo.toml
@@ -1,7 +1,7 @@
 [package]
 authors = ["The Cranelift Project Developers"]
 name = "cranelift-codegen-shared"
-version = "0.112.2"
+version = "0.112.3"
 description = "For code shared between cranelift-codegen-meta and cranelift-codegen"
 license = "Apache-2.0 WITH LLVM-exception"
 repository = "https://github.com/bytecodealliance/wasmtime"

diff --git a/cranelift/control/Cargo.toml b/cranelift/control/Cargo.toml
@@ -1,7 +1,7 @@
 [package]
 authors = ["The Cranelift Project Developers"]
 name = "cranelift-control"
-version = "0.112.2"
+version = "0.112.3"
 description = "White-box fuzz testing framework"
 license = "Apache-2.0 WITH LLVM-exception"
 repository = "https://github.com/bytecodealliance/wasmtime"

diff --git a/cranelift/entity/Cargo.toml b/cranelift/entity/Cargo.toml
@@ -1,7 +1,7 @@
 [package]
 authors = ["The Cranelift Project Developers"]
 name = "cranelift-entity"
-version = "0.112.2"
+version = "0.112.3"
 description = "Data structures using entity references as mapping keys"
 license = "Apache-2.0 WITH LLVM-exception"
 documentation = "https://docs.rs/cranelift-entity"

diff --git a/cranelift/frontend/Cargo.toml b/cranelift/frontend/Cargo.toml
@@ -1,7 +1,7 @@
 [package]
 authors = ["The Cranelift Project Developers"]
 name = "cranelift-frontend"
-version = "0.112.2"
+version = "0.112.3"
 description = "Cranelift IR builder helper"
 license = "Apache-2.0 WITH LLVM-exception"
 documentation = "https://docs.rs/cranelift-frontend"

diff --git a/cranelift/interpreter/Cargo.toml b/cranelift/interpreter/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "cranelift-interpreter"
-version = "0.112.2"
+version = "0.112.3"
 authors = ["The Cranelift Project Developers"]
 description = "Interpret Cranelift IR"
 repository = "https://github.com/bytecodealliance/wasmtime"

diff --git a/cranelift/isle/isle/Cargo.toml b/cranelift/isle/isle/Cargo.toml
@@ -7,7 +7,7 @@ license = "Apache-2.0 WITH LLVM-exception"
 name = "cranelift-isle"
 readme = "../README.md"
 repository = "https://github.com/bytecodealliance/wasmtime/tree/main/cranelift/isle"
-version = "0.112.2"
+version = "0.112.3"
 
 [lints]
 workspace = true

diff --git a/cranelift/jit/Cargo.toml b/cranelift/jit/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "cranelift-jit"
-version = "0.112.2"
+version = "0.112.3"
 authors = ["The Cranelift Project Developers"]
 description = "A JIT library backed by Cranelift"
 repository = "https://github.com/bytecodealliance/wasmtime"

diff --git a/cranelift/module/Cargo.toml b/cranelift/module/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "cranelift-module"
-version = "0.112.2"
+version = "0.112.3"
 authors = ["The Cranelift Project Developers"]
 description = "Support for linking functions and data with Cranelift"
 repository = "https://github.com/bytecodealliance/wasmtime"

diff --git a/cranelift/native/Cargo.toml b/cranelift/native/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "cranelift-native"
-version = "0.112.2"
+version = "0.112.3"
 authors = ["The Cranelift Project Developers"]
 description = "Support for targeting the host with Cranelift"
 documentation = "https://docs.rs/cranelift-native"

diff --git a/cranelift/object/Cargo.toml b/cranelift/object/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "cranelift-object"
-version = "0.112.2"
+version = "0.112.3"
 authors = ["The Cranelift Project Developers"]
 description = "Emit Cranelift output to native object files with `object`"
 repository = "https://github.com/bytecodealliance/wasmtime"

diff --git a/cranelift/reader/Cargo.toml b/cranelift/reader/Cargo.toml
@@ -1,7 +1,7 @@
 [package]
 authors = ["The Cranelift Project Developers"]
 name = "cranelift-reader"
-version = "0.112.2"
+version = "0.112.3"
 description = "Cranelift textual IR reader"
 license = "Apache-2.0 WITH LLVM-exception"
 documentation = "https://docs.rs/cranelift-reader"

diff --git a/cranelift/serde/Cargo.toml b/cranelift/serde/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "cranelift-serde"
-version = "0.112.2"
+version = "0.112.3"
 authors = ["The Cranelift Project Developers"]
 description = "Serializer/Deserializer for Cranelift IR"
 repository = "https://github.com/bytecodealliance/wasmtime"

diff --git a/cranelift/umbrella/Cargo.toml b/cranelift/umbrella/Cargo.toml
@@ -1,7 +1,7 @@
 [package]
 authors = ["The Cranelift Project Developers"]
 name = "cranelift"
-version = "0.112.2"
+version = "0.112.3"
 description = "Umbrella for commonly-used cranelift crates"
 license = "Apache-2.0 WITH LLVM-exception"
 documentation = "https://docs.rs/cranelift"

diff --git a/cranelift/wasm/Cargo.toml b/cranelift/wasm/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "cranelift-wasm"
-version = "0.112.2"
+version = "0.112.3"
 authors = ["The Cranelift Project Developers"]
 description = "Translator from WebAssembly to Cranelift IR"
 documentation = "https://docs.rs/cranelift-wasm"

diff --git a/crates/c-api/include/wasmtime.h b/crates/c-api/include/wasmtime.h
@@ -206,7 +206,7 @@
 /**
  * \brief Wasmtime version string.
  */
-#define WASMTIME_VERSION "25.0.2"
+#define WASMTIME_VERSION "25.0.3"
 /**
  * \brief Wasmtime major version number.
  */
@@ -218,7 +218,7 @@
 /**
  * \brief Wasmtime patch version number.
  */
-#define WASMTIME_VERSION_PATCH 2
+#define WASMTIME_VERSION_PATCH 3
 
 #ifdef __cplusplus
 extern "C" {

diff --git a/pulley/Cargo.toml b/pulley/Cargo.toml
@@ -7,7 +7,7 @@ license = "Apache-2.0 WITH LLVM-exception"
 name = "pulley-interpreter"
 readme = "./README.md"
 repository = "https://github.com/bytecodealliance/wasmtime/tree/main/pulley"
-version = "0.1.2"
+version = "0.1.3"
 
 [lints]
 workspace = true