diff --git a/Cargo.lock b/Cargo.lock
index f75183da09..36bc831c1f 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2500,9 +2500,9 @@ dependencies = [
 
 [[package]]
 name = "rustix"
-version = "0.33.3"
+version = "0.33.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a9466f25b92a648960ac1042fd3baa6b0bf285e60f754d7e5070770c813a177a"
+checksum = "03627528abcc4a365554d32a9f3bbf67f7694c102cfeda792dc86a2d6057cc85"
 dependencies = [
  "bitflags",
  "errno",
diff --git a/Cargo.toml b/Cargo.toml
index 824130ea3b..c226a56457 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -42,7 +42,7 @@ lazy_static = "1.4.0"
 listenfd = "0.3.5"
 
 [target.'cfg(unix)'.dependencies]
-rustix = "0.33.0"
+rustix = "0.33.5"
 
 [dev-dependencies]
 # depend again on wasmtime to activate its default features for tests
diff --git a/crates/cache/Cargo.toml b/crates/cache/Cargo.toml
index 31c9f33813..c6a5b8c3b9 100644
--- a/crates/cache/Cargo.toml
+++ b/crates/cache/Cargo.toml
@@ -24,7 +24,7 @@ zstd = { version = "0.11.1", default-features = false }
 winapi = "0.3.7"
 
 [target.'cfg(not(target_os = "windows"))'.dependencies]
-rustix = "0.33.0"
+rustix = "0.33.5"
 
 [dev-dependencies]
 filetime = "0.2.7"
diff --git a/crates/fiber/Cargo.toml b/crates/fiber/Cargo.toml
index dd0aed397d..085fb3bd32 100644
--- a/crates/fiber/Cargo.toml
+++ b/crates/fiber/Cargo.toml
@@ -14,7 +14,7 @@ edition = "2018"
 links = "wasmtime-fiber-shims"
 
 [target.'cfg(unix)'.dependencies]
-rustix = "0.33.0"
+rustix = "0.33.5"
 
 [target.'cfg(windows)'.dependencies.winapi]
 version = "0.3.9"
diff --git a/crates/jit-debug/Cargo.toml b/crates/jit-debug/Cargo.toml
index bb0800b25f..309fb19b6f 100644
--- a/crates/jit-debug/Cargo.toml
+++ b/crates/jit-debug/Cargo.toml
@@ -15,7 +15,7 @@ lazy_static = {version = "1.3.0", optional = true }
 object = { version = "0.27.0", default-features = false, features = ["std", "read_core"], optional = true }
 
 [target.'cfg(target_os = "linux")'.dependencies]
-rustix = { version = "0.33.0", optional = true }
+rustix = { version = "0.33.5", optional = true }
 
 [badges]
 maintenance = { status = "actively-developed" }
diff --git a/crates/jit/Cargo.toml b/crates/jit/Cargo.toml
index c8d22230fe..1c9a874af6 100644
--- a/crates/jit/Cargo.toml
+++ b/crates/jit/Cargo.toml
@@ -33,7 +33,7 @@ log = "0.4.8"
 winapi = { version = "0.3.8", features = ["winnt", "impl-default"] }
 
 [target.'cfg(target_os = "linux")'.dependencies]
-rustix = "0.33.0"
+rustix = "0.33.5"
 
 [features]
 jitdump = ['wasmtime-jit-debug']
diff --git a/crates/runtime/Cargo.toml b/crates/runtime/Cargo.toml
index 2f31f9b63e..c9dd3f7f53 100644
--- a/crates/runtime/Cargo.toml
+++ b/crates/runtime/Cargo.toml
@@ -31,7 +31,7 @@ memfd = { version = "0.4.1", optional = true }
 mach = "0.3.2"
 
 [target.'cfg(unix)'.dependencies]
-rustix = "0.33.0"
+rustix = "0.33.5"
 
 [target.'cfg(target_os = "windows")'.dependencies]
 winapi = { version = "0.3.7", features = ["winbase", "memoryapi", "errhandlingapi", "handleapi"] }
diff --git a/crates/wasi-common/Cargo.toml b/crates/wasi-common/Cargo.toml
index 9caa87c73b..81774a82f4 100644
--- a/crates/wasi-common/Cargo.toml
+++ b/crates/wasi-common/Cargo.toml
@@ -27,7 +27,7 @@ cap-rand = "0.24.1"
 bitflags = "1.2"
 
 [target.'cfg(unix)'.dependencies]
-rustix = "0.33.0"
+rustix = "0.33.5"
 
 [target.'cfg(windows)'.dependencies]
 io-extras = "0.13.2"
diff --git a/crates/wasi-common/cap-std-sync/Cargo.toml b/crates/wasi-common/cap-std-sync/Cargo.toml
index 241d029db6..5bfc9c3b89 100644
--- a/crates/wasi-common/cap-std-sync/Cargo.toml
+++ b/crates/wasi-common/cap-std-sync/Cargo.toml
@@ -26,7 +26,7 @@ io-lifetimes = { version = "0.5.0", default-features = false }
 is-terminal = "0.1.0"
 
 [target.'cfg(unix)'.dependencies]
-rustix = "0.33.0"
+rustix = "0.33.5"
 
 [target.'cfg(windows)'.dependencies]
 winapi = "0.3"
diff --git a/crates/wasi-common/tokio/Cargo.toml b/crates/wasi-common/tokio/Cargo.toml
index 16fe6ac747..03510eb1a3 100644
--- a/crates/wasi-common/tokio/Cargo.toml
+++ b/crates/wasi-common/tokio/Cargo.toml
@@ -20,7 +20,7 @@ anyhow = "1"
 io-lifetimes = { version = "0.5.0", default-features = false }
 
 [target.'cfg(unix)'.dependencies]
-rustix = "0.33.0"
+rustix = "0.33.5"
 
 [target.'cfg(windows)'.dependencies]
 winapi = "0.3"