-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 29 Aug 2019 16:04:13 +0200 Source: binaryen Architecture: source Version: 89-1 Distribution: unstable Urgency: medium Maintainer: Markus Koschany <apo@debian.org> Changed-By: Markus Koschany <apo@debian.org> Closes: 936024 Changes: binaryen (89-1) unstable; urgency=medium . * New upstream version 89. - Fix CVE-2019-15758: Missing validation rules in asmjs/asmangle.cpp can lead to an Assertion Failure at wasm/wasm.cpp in wasm::asmangle. A crafted input can cause denial-of-service, as demonstrated by wasm2js. - Fix CVE-2019-15759: Two visitors in ir/ExpressionManipulator.cpp can lead to a NULL pointer dereference in wasm::LocalSet::finalize in wasm/wasm.cpp. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by wasm2js. Thanks to Moritz Muehlenhoff for the report. (Closes: #936024) * d/control: Build with python3. Add python3.patch to avoid a FTBFS. Checksums-Sha1: abef65943bd11dfda6722960e931859d7747ed0c 1975 binaryen_89-1.dsc 67149cba137268c75f2e9baafa1ccce83c9c597f 2942509 binaryen_89.orig.tar.gz 768cec59fd714077b7732e8535f5642e991cf75f 3240 binaryen_89-1.debian.tar.xz 3bd3a5f44cb0b20dd70e5b28e76c25a95db66303 7154 binaryen_89-1_amd64.buildinfo Checksums-Sha256: 8c7ca9c35331faae5396aa2e4e89e489c58a9b7abb26c64e031bb6d823cb6ff2 1975 binaryen_89-1.dsc e8b35e751cc9b90ce4c4a9d309595ee9c3afac2964fd0c4cc06c12ec43f6d55e 2942509 binaryen_89.orig.tar.gz 2dc90efef1a6cbae8d0a28ac00a982e28b1f7488362287353434cc4ef1dc63c2 3240 binaryen_89-1.debian.tar.xz 531f9f89cc1bdffff071c8edcf8798cc66f38b7fa85ad265ad729c76244b23f2 7154 binaryen_89-1_amd64.buildinfo Files: 29523f1df50f22aea4560f7babf655fe 1975 devel optional binaryen_89-1.dsc 370a6c81ce109398cca47a65e37b74ce 2942509 devel optional binaryen_89.orig.tar.gz 5955f8e7631a3a8a519261e132c8f83e 3240 devel optional binaryen_89-1.debian.tar.xz 6ae66953bf682986b52b7f3743a4aeb4 7154 devel optional binaryen_89-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAl1n4AZfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1HkPncP/3EOR3ohOpI4Ul+tXr6vP97gfFVZAbNOk3HV y9XpW2XFRO/xnfvvC78Mi4+q1ZEUpEpNqrtWgeIs9xXynKee717facvl7CogN008 62dzAWqxlWm5ipjJLZkGHHJQ5/Ye46i0x+/6b8K6XdwCCj2FxO5Iw0gYSmMxSYGn SlLPtv5VlgiRzS8NIpu8c9P81HbhM4MMNj/sAV6gfxWMNe9kqiusJA16MWqvkNMB MJ98s3gAqcXwDFj5KtgVC3rWc1Vp56kQtqB8JOAnGzN5/i677E01lT3OZBWHPEyh iqmsOwUu+bn029VbVloOsNtaNC2zScCWK9QUdS/eEbhUXvcnHG1LhJOW9u5TaWYw eY7hkqPiTyuU9azxQ9nOXoUL2240vOtXgqSwWvOBaPgI08nZ9eniXVTahSs6EWkX hxlh2vJhgeJjIIcaEVvlraN5ntmh7dQ/gbsTSnl+tcLxIaqngEpIR6GUId0isuGr to6uuB0Z8LaL3hPs6tKQgzuqTkWQsLo6vf+hz+BGHBsnXjEatF3PF5fkh3lU9NIA 6JawEuoAidIIRgOZBqf1viheQvhTNROHP7Tr82KsfH1VAeHFYHFOZKLXHvFP10um XQsaR+ZtongME2CftWJ0UdbYRZBes0/Fzq0C3n1TM5XSjLpT0bpPUTNts21UOKWo 8zCKMEKc =0psC -----END PGP SIGNATURE-----
