Arch Linux

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!
Tasklist

FS#61370 - [python] Python missing hardening flags

Attached to Project: Arch Linux
Opened by johnsen (johnsen) - Saturday, 12 January 2019, 22:08 GMT
Last edited by Eli Schwartz (eschwartz) - Friday, 25 January 2019, 00:38 GMT
Task Type Bug Report
Category Packages: Extra
Status Closed
Assigned To No-one
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:

Python is compiled without a stack canary and without Fortify flags

Note that python comes with these enabled on debinstesting so there should not beany reason for us not to.

Additional info:
* package version(s) 3.7.2-1


Steps to reproduce:

Checking with checksec:

while having a python terminal running

run "checksec --proc-all" and check the python process
This task depends upon

Closed by  Eli Schwartz (eschwartz)
Friday, 25 January 2019, 00:38 GMT
Reason for closing:  Duplicate
Additional comments about closing:   FS#43246 

Loading...