diff --git a/Cargo.lock b/Cargo.lock
index 9de93d645b..ffa6d57d3a 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2487,9 +2487,9 @@ checksum = "7ef03e0a2b150c7a90d01faf6254c9c48a41e95fb2a8c2ac1c6f0d2b9aefc342"
 
 [[package]]
 name = "rustix"
-version = "0.36.4"
+version = "0.36.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cb93e85278e08bb5788653183213d3a60fc242b10cb9be96586f5a73dcb67c23"
+checksum = "d4fdebc4b395b7fbb9ab11e462e20ed9051e7b16e42d24042c776eca0ac81b03"
 dependencies = [
  "bitflags",
  "errno",
diff --git a/Cargo.toml b/Cargo.toml
index b2b44636ed..f7feff55de 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -169,7 +169,7 @@ wasm-mutate = "0.2.14"
 wit-parser = "0.4"
 windows-sys = "0.42.0"
 env_logger = "0.9"
-rustix = "0.36.0"
+rustix = "0.36.7"
 log = { version = "0.4.8", default-features = false }
 object = { version = "0.29", default-features = false, features = ['read_core', 'elf', 'std'] }
 gimli = { version = "0.26.0", default-features = false, features = ['read', 'std'] }
diff --git a/supply-chain/audits.toml b/supply-chain/audits.toml
index adc74e69a4..49d0fd4775 100644
--- a/supply-chain/audits.toml
+++ b/supply-chain/audits.toml
@@ -450,6 +450,12 @@ criteria = "safe-to-deploy"
 version = "0.36.4"
 notes = "The Bytecode Alliance is the author of this crate."
 
+[[audits.rustix]]
+who = "Dan Gohman <dev@sunfishcode.online>"
+criteria = "safe-to-deploy"
+version = "0.36.7"
+notes = "The Bytecode Alliance is the author of this crate."
+
 [[audits.sha2]]
 who = "Benjamin Bouvier <public@benj.me>"
 criteria = "safe-to-deploy"