This bug was fixed in the package totem - 3.4.3-0ubuntu4
---------------
totem (3.4.3-0ubuntu4) quantal; urgency=low
* debian/rules: re-enable hardening, make sure both PIE and BINDNOW are used
by setting hardening=+all. (LP: #1039604)
* debian/control.in: add dpkg-dev (>= 1.16.1.1) to Build-Depends.
-- Mathieu Trudel-Lapierre <[email protected]> Tue, 18 Sep 2012 12:22:15
-0400
** Changed in: totem (Ubuntu Quantal)
Status: In Progress => Fix Released
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to totem in Ubuntu.
https://bugs.launchpad.net/bugs/1039604
Title:
Please re-enable PIE and BIND_NOW
Status in “totem” package in Ubuntu:
Fix Released
Status in “totem” source package in Precise:
Triaged
Status in “totem” source package in Quantal:
Fix Released
Bug description:
Ubuntu 11.10 added hardening options to totem, bug Ubuntu 12.04 and
12.10 lost PIE and BIND_NOW. These are important compiler hardening
features that help protect users from malicious content.
This can be seen with the hardening check command:
/tmp/built-binaries-74x5kX/totem/usr/bin/totem-video-thumbnailer:
Position Independent Executable: no, normal executable!
Stack protected: no, not found! (ignored)
Immediate binding: no, not found!
/tmp/built-binaries-74x5kX/totem/usr/bin/totem-audio-preview:
Position Independent Executable: no, normal executable!
Stack protected: no, not found! (ignored)
Immediate binding: no, not found!
/tmp/built-binaries-74x5kX/totem/usr/bin/totem:
Position Independent Executable: no, normal executable!
Stack protected: no, not found! (ignored)
Immediate binding: no, not found!
/tmp/built-binaries-74x5kX/totem/usr/lib/totem/totem-plugin-viewer:
Position Independent Executable: no, normal executable!
Immediate binding: no, not found!
(the stack-protector check can be ignored since it depends on the code
having certain characteristics).
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/totem/+bug/1039604/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
