[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#898431: marked as done (please update version of file(1) on lindsay.debian.org to detect .wasm files)

Your message dated Sun, 15 Dec 2019 08:22:10 -0800
with message-id <CAFHYt57yktKGQSmpBTQhzxeZtnVEhnsYh6CEc57+WLK_Tbi3=A@mail.gmail.com>
and subject line lintian.d.o now finds source-contains-prebuilt-wasm-binary
has caused the Debian Bug report #898431,
regarding please update version of file(1) on lindsay.debian.org to detect .wasm files
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
898431: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=898431
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: lintian
Version: 2.5.84
Severity: important
Tags: security
X-Debbugs-CC: secure-testing-team@lists.alioth.debian.org
X-Debbugs-CC: ftpmaster@ftp-master.debian.org

Hi,

source-contains-prebuilt-wasm-binary source tag is not emitted due to
too old file.

wasm is a crap over a crap of nodejs communauty. It is compiled javascript.

Node often include it without source and this will end in the archive.

Why js file even minified an human could with some hard work undestand
security implication.

With wasm, it is near impossible to understand.

So it is important to be sure that wasm file are compiled from source
(thus security bug), and maybe
should raise an ftpmaster autoreject.

So could we try to get file on  lintian.debian.org to detect wasm ?

Bastien

--- End Message ---
--- Begin Message --- 
Hi Bastien,

> source-contains-prebuilt-wasm-binary source tag is not emitted due to
> too old file.

The service lintian.d.o has been upgraded since the filing of this
bug. It now runs buster. It also emits the tag
source-contains-prebuilt-wasm-binary a total of 17 times for five
packages. Closing this bug.

Kind regards
Felix Lechner

--- End Message ---
Reply to: