Package: libwavpack1
Version: 4.75.0-1
Severity: important
File: /usr/lib/x86_64-linux-gnu/libwavpack.so.1.1.6
Hi,
it seems that wavpack on x86_64 is shipped with an executable stack:
readelf -l /usr/lib/x86_64-linux-gnu/libwavpack.so.1.1.6 |grep -A1 GNU_STACK
GNU_STACK 0x0000000000000000 0x0000000000000000 0x0000000000000000
0x0000000000000000 0x0000000000000000 RWE 10
That's usually a *very* bad idea, especially in a media library, where
stack-based buffer overflows can be quite common.
Can you please disable it?
Regards,
--
Yves-Alexis Perez
-- System Information:
Debian Release: stretch/sid
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable'), (500,
'oldstable'), (450, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.0.8-grsec+ (SMP w/4 CPU cores; PREEMPT)
Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages libwavpack1:amd64 depends on:
ii libc6 2.19-19
libwavpack1:amd64 recommends no packages.
libwavpack1:amd64 suggests no packages.
-- no debconf information
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
