Bug#1022787: libc6-dev: Lintian warns that all mips*el executables have executable stack

[Aurelien Jarno]

control: tag -1 + moreinfo

Hi,

On 2022-10-25 21:07, Simon McVittie wrote:
> Package: libc6-dev
> Version: 2.35-4
> Severity: normal
> X-Debbugs-Cc: debian-m...@lists.debian.org, lint...@packages.debian.org, 
> jrt...@debian.org
> User: debian-m...@lists.debian.org
> Usertags: mips mipsel
> 
> All mips*el executables and libraries appear to have an executable stack,
> resulting in very large numbers of Lintian warnings, particularly for
> packages with many small ELF objects like
> .
> 
> Jessica Clarke looked into this and found that this is intentionally done
> by glibc when targeting minimum kernel 4.8.0 or older with mips hardfloat:
> https://github.com/bminor/glibc/blob/595c22ecd8e87a27fd19270ed30fdbae9ad25426/sysdeps/unix/sysv/linux/mips/configure.ac#L138-L143
> 
> Debian 9 had a kernel newer than 4.8.0, so I think Debian 12 probably
> doesn't need to go that far into backwards compatibility? If the mips
> porters agree, then glibc on mips*el should stop forcing an executable
> stack, either by increasing the minimal kernel version or by patching
> this out. That will provide some security hardening on mips*el.

Note that the other official architecture still have a kernel
compatibility set to 3.2, so that will make a difference between
architectures. There are discussions to increase it upstream, but this
won't happened for bookworm. 

> Or, if the mips porters consider this backwards compatibility to be
> more important than the security hardening of a non-executable stack,
> then Lintian should stop issuing warnings about the executable stack on
> mips*el to improve its signal/noise ratio.

At this stage there is nothing that can be done on the glibc side, the
decision has to be taken by the mips porters.

Regards
Aurelien

-- 
Aurelien Jarno  GPG: 4096R/1DDD8C9B
aurel...@aurel32.net http://www.aurel32.net

Processed: Re: Bug#1022787: libc6-dev: Lintian warns that all mips*el executables have executable stack

[Debian Bug Tracking System]

Processing control commands:

> tag -1 + moreinfo
Bug #1022787 [libc6-dev] libc6-dev: Lintian warns that all mips*el executables 
have executable stack
Added tag(s) moreinfo.

-- 
1022787: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1022787
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

[Git][glibc-team/tzdata] Pushed new tag debian/2021a-0+deb10u8

[Emilio Pozuelo Monfort (@pochu)]

Emilio Pozuelo Monfort pushed new tag debian/2021a-0+deb10u8 at GNU Libc 
Maintainers / tzdata

-- 
View it on GitLab: 
https://salsa.debian.org/glibc-team/tzdata/-/tree/debian/2021a-0+deb10u8
You're receiving this email because of your account on salsa.debian.org.

[Git][glibc-team/tzdata][buster] 4 commits: Cherry-pick patches from upstream:

[Emilio Pozuelo Monfort (@pochu)]

Emilio Pozuelo Monfort pushed to branch buster at GNU Libc Maintainers / tzdata


Commits:
9e0ac428 by Aurelien Jarno at 2022-10-26T17:33:30+02:00
Cherry-pick patches from upstream:

* Cherry-pick patches from upstream:
  - 12-syria-dst.patch: Syria is abandoning the DST regime and is
changing to permanent +03, so it will not fall back from +03 to
+02 on 2022-10-28.

- - - - -
c92cfe52 by Aurelien Jarno at 2022-10-26T17:33:35+02:00
13-jordan-dst.patch: Jordan is abandoning the DST regime and are changing to 
permanent +03, so it will not fall back from +03 to +02 on 2022-10-28.

- - - - -
635cd73e by Emilio Pozuelo Monfort at 2022-10-26T17:33:57+02:00
Update changelog

- - - - -
9331401a by Emilio Pozuelo Monfort at 2022-10-26T17:34:17+02:00
Release 2021a-0+deb10u8 for buster

- - - - -


4 changed files:

- debian/changelog
- + debian/patches/12-syria-dst.patch
- + debian/patches/13-jordan-dst.patch
- debian/patches/series


View it on GitLab: 
https://salsa.debian.org/glibc-team/tzdata/-/compare/4dc8af87e17c710db5a6e2d4d4355be2b7ee409d...9331401ace27730025dc2e9f14fa908a1c020636

-- 
View it on GitLab: 
https://salsa.debian.org/glibc-team/tzdata/-/compare/4dc8af87e17c710db5a6e2d4d4355be2b7ee409d...9331401ace27730025dc2e9f14fa908a1c020636
You're receiving this email because of your account on salsa.debian.org.