|
From: Nicholas M. <nm...@gm...> - 2005-01-30 05:20:37
|
On i386 and AMD64 systems, /usr/lib/libdv.so.4.0.1 is erroneously marked as requiring an executable stack. This is because it uses several assembler source files that do not contain a .note.GNU-stack section indicating that an executable stack is unnecessary. As a result, any application which links to libdv.so.4 has an executable stack. This is a security risk. Attached is a patch which adds these sections to each of the assembler source files included in libdv CVS. |