Executable stack in libxvidcore4

Bug #49387 reported by John Moser
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
xvidcore (Ubuntu)
Fix Released
Low
Kees Cook

Bug Description

Binary package hint: libxvidcore4

Use this patch from Gentoo to remove the executable stack on libxvidcore4:

ftp://distro.ibiblio.org/pub/linux/distributions/gentoo/distfiles/xvid-1.1.0-noexec-stack.patch.bz2

Rationale as per [1].

[1] http://www.gentoo.org/proj/en/hardened/gnu-stack.xml

Related branches

Revision history for this message
Jérôme Guelfucci (jerome-guelfucci-deactivatedaccount) wrote :

Thank you for your bug report. Do you still have this issue with the latest release of Ubuntu ?

Changed in xvidcore:
importance: Undecided → Low
status: Unconfirmed → Needs Info
Revision history for this message
Jérôme Guelfucci (jerome-guelfucci-deactivatedaccount) wrote :

Any news on this ?

Revision history for this message
Jérôme Guelfucci (jerome-guelfucci-deactivatedaccount) wrote :

We are closing this bug report as it lacks the information, described in the previous comments, we need to investigate the problem further. However, please reopen it if you can give us the missing information and don't hesitate to submit bug reports in the future.

Changed in xvidcore:
status: Incomplete → Invalid
Kees Cook (kees)
Changed in xvidcore (Ubuntu):
status: Invalid → Confirmed
Revision history for this message
Kees Cook (kees) wrote :

Fix for this will be uploaded after alpha freeze lifts.

Changed in xvidcore (Ubuntu):
assignee: nobody → Kees Cook (kees)
status: Confirmed → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package xvidcore - 2:1.1.2-0.1ubuntu4

---------------
xvidcore (2:1.1.2-0.1ubuntu4) karmic; urgency=low

  * Add 50_non-exec-stack.dpatch: disable executable stacks on all assembly
    files (LP: #49387).

 -- Kees Cook <email address hidden> Wed, 02 Sep 2009 21:02:27 -0700

Changed in xvidcore (Ubuntu):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.