Package: libqt5webenginecore5 Version: 5.9.2+dfsg-2 Severity: normal $ execstack -q /usr/lib/x86_64-linux-gnu/libQt5WebEngineCore.so.5.9.2 X /usr/lib/x86_64-linux-gnu/libQt5WebEngineCore.so.5.9.2
The shared object is listed as requiring an executable stack. This weakens the security of every application that uses it. # execstack -c /usr/lib/x86_64-linux-gnu/libQt5WebEngineCore.so.5.9.2 After running the above command kmail (which uses that shared object) works correctly. I have SE Linux set to not permit executable stack so it wouldn't run with the flag set in the header. The fact that it runs now means that at least the basic operations of this shared object don't need an executable stack. -- System Information: Debian Release: buster/sid APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 4.14.0-3-amd64 (SMP w/2 CPU cores) Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), LANGUAGE=en_AU:en (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: SELinux: enabled - Mode: Enforcing - Policy name: default Versions of packages libqt5webenginecore5 depends on: ii libasound2 1.1.3-5 ii libavcodec57 7:3.4.1-1+b1 ii libavformat57 7:3.4.1-1+b1 ii libavutil55 7:3.4.1-1+b1 ii libc6 2.26-4 ii libdbus-1-3 1.12.2-1 ii libevent-2.1-6 2.1.8-stable-4 ii libexpat1 2.2.5-3 ii libfontconfig1 2.12.6-0.1 ii libfreetype6 2.8.1-1 ii libgcc1 1:7.2.0-19 ii libglib2.0-0 2.54.3-1 ii libharfbuzz0b 1.7.2-1 ii libicu57 57.1-8 ii libjpeg62-turbo 1:1.5.2-2+b1 ii liblcms2-2 2.9-1 ii libminizip1 1.1-8+b1 ii libnspr4 2:4.16-1+b1 ii libnss3 2:3.34.1-1 ii libopus0 1.2.1-1 ii libpng16-16 1.6.34-1 ii libqt5core5a [qtbase-abi-5-9-2] 5.9.2+dfsg-6 ii libqt5gui5 5.9.2+dfsg-6 ii libqt5network5 5.9.2+dfsg-6 ii libqt5positioning5 5.9.2+dfsg-3 ii libqt5quick5 5.9.2-3 ii libqt5webchannel5 5.9.2-3 ii libqt5webengine-data 5.9.2+dfsg-2 ii libre2-3 20170101+dfsg-1 ii libsnappy1v5 1.1.7-1 ii libstdc++6 7.2.0-19 ii libwebp6 0.6.0-4 ii libwebpdemux2 0.6.0-4 ii libx11-6 2:1.6.4-3 ii libx11-xcb1 2:1.6.4-3 ii libxcb1 1.12-1 ii libxcomposite1 1:0.4.4-2 ii libxcursor1 1:1.1.15-1 ii libxdamage1 1:1.1.4-3 ii libxext6 2:1.3.3-1+b2 ii libxfixes3 1:5.0.3-1 ii libxi6 2:1.7.9-1 ii libxml2 2.9.4+dfsg1-6.1 ii libxrender1 1:0.9.10-1 ii libxslt1.1 1.1.29-5 ii libxss1 1:1.2.2-1+b2 ii libxtst6 2:1.2.3-1 ii zlib1g 1:1.2.8.dfsg-5 libqt5webenginecore5 recommends no packages. libqt5webenginecore5 suggests no packages. -- no debconf information -- debsums errors found: debsums: changed file /usr/lib/x86_64-linux-gnu/libQt5WebEngineCore.so.5.9.2 (from libqt5webenginecore5:amd64 package)
