From 158a3b8d77b16e858be86e3dc07e6e2224059ec7 Mon Sep 17 00:00:00 2001 From: Xe Iaso Date: Tue, 30 Sep 2025 21:04:43 +0000 Subject: [PATCH] docs: update CHANGELOG with binaryen dependency Signed-off-by: Xe Iaso --- docs/docs/CHANGELOG.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/docs/docs/CHANGELOG.md b/docs/docs/CHANGELOG.md index f5835e8d..3462218e 100644 --- a/docs/docs/CHANGELOG.md +++ b/docs/docs/CHANGELOG.md @@ -47,6 +47,8 @@ Clients that don't have WebAssembly enabled will instead be served a pure JavaSc ::: +If you are packaging this for a Linux distribution, Anubis requires [binaryen](https://github.com/WebAssembly/binaryen) at exactly version 108. We are working on mitigating this dependency. + ### Bug Fixes Sometimes the enhanced temporal assurance in [#1038](https://github.com/TecharoHQ/anubis/pull/1038) and [#1068](https://github.com/TecharoHQ/anubis/pull/1068) could backfire because Chromium and its ilk randomize the amount of time they wait in order to avoid a timing side channel attack. This has been fixed by both increasing the amount of time a client has to wait for the metarefresh and preact challenges as well as making the server side logic more permissive.