** Changed in: totem (Ubuntu Quantal)
       Status: New => In Progress

** Changed in: totem (Ubuntu Quantal)
   Importance: Undecided => Medium

** Changed in: totem (Ubuntu Quantal)
     Assignee: (unassigned) => Mathieu Trudel-Lapierre (mathieu-tl)

** Changed in: totem (Ubuntu Precise)
   Importance: Undecided => Medium

** Changed in: totem (Ubuntu Precise)
       Status: New => Triaged

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to totem in Ubuntu.
https://bugs.launchpad.net/bugs/1039604

Title:
  Please re-enable PIE and BIND_NOW

Status in “totem” package in Ubuntu:
  In Progress
Status in “totem” source package in Precise:
  Triaged
Status in “totem” source package in Quantal:
  In Progress

Bug description:
  Ubuntu 11.10 added hardening options to totem, bug Ubuntu 12.04 and
  12.10 lost PIE and BIND_NOW. These are important compiler hardening
  features that help protect users from malicious content.

  This can be seen with the hardening check command:
  /tmp/built-binaries-74x5kX/totem/usr/bin/totem-video-thumbnailer:
   Position Independent Executable: no, normal executable!
   Stack protected: no, not found! (ignored)
   Immediate binding: no, not found!
  /tmp/built-binaries-74x5kX/totem/usr/bin/totem-audio-preview:
   Position Independent Executable: no, normal executable!
   Stack protected: no, not found! (ignored)
   Immediate binding: no, not found!
  /tmp/built-binaries-74x5kX/totem/usr/bin/totem:
   Position Independent Executable: no, normal executable!
   Stack protected: no, not found! (ignored)
   Immediate binding: no, not found!
  /tmp/built-binaries-74x5kX/totem/usr/lib/totem/totem-plugin-viewer:
   Position Independent Executable: no, normal executable!
   Immediate binding: no, not found!

  (the stack-protector check can be ignored since it depends on the code
  having certain characteristics).

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/totem/+bug/1039604/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to