Hello!
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1452115
Title:
Python interpreter binary is not compiled as PIE
To manage notifications about this bug go to:
Hello! Does anyone really care?
5 years passed since the original reporting of this issue and i'm
starting to seriously think that this intended to cover up some zer0
day!
Many were the justification to this related to performance but actually
with many tests this appeared to not be the case:
** Also affects: python3.7 (Debian) via
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=919134
Importance: Unknown
Status: Unknown
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1452115
Actually I confirm this on current ubuntu bionic.
Would someone please reach the ubuntu security team and verify this is
an intended choice?
evilaliv3@evilaliv3:~$ hardening-check /usr/bin/python3
/usr/bin/python3:
Position Independent Executable: no, normal executable!
Stack protected: yes
