[Secure-testing-team] Bug#751907: libffi6: cannot enable executable stack as shared object requires: Permission denied

stef 4mwpqeni at ctrlc.hu
Tue Jun 17 18:13:11 UTC 2014


Package: libffi6
Version: 3.1-2
Severity: critical
Tags: security patch
Justification: breaks the whole system

when using grsecurity/pax protections on debian unstable, the newest libffi6
breaks almost everything.

some examples:
> # emacs
> emacs: error while loading shared libraries: libffi.so.6: cannot enable executable stack as shared object requires: Permission denied
> # mutt
> mutt: error while loading shared libraries: libffi.so.6: cannot enable executable stack as shared object requires: Permission denied

similarly ck-session-launch, gsettings, and other binaries are affected.

patch should be available from:

http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-dev.git;a=blob;f=dev-libs/libffi/files/libffi-3.0.12-emutramp_pax.patch;h=4799b227e8510c3a254a97355f341d7f8af404f0;hb=6eeb6a6c620ee84e411f989cc246212422e8b636

-- System Information:
Debian Release: jessie/sid
Architecture: i386 (x86_64)

Kernel: Linux 3.12.6-grsec (SMP w/2 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages libffi6 depends on:
ii  libc6              2.19-2
ii  multiarch-support  2.19-2

libffi6 recommends no packages.

libffi6 suggests no packages.

-- no debconf information



More information about the Secure-testing-team mailing list