Package: zip Version: 3.0-1 Severity: normal Tags: patch, security User: [email protected] Usertags: origin-ubuntu karmic #ubuntu-patch https://wiki.ubuntu.com/Bugs/Debian/Usertagging
Hello! It seems that several of the zip binaries have a needlessly executable stack. This is a small patch, which has been carried[1] by Fedora for a while now. Thanks, -Kees [1] http://cvs.fedoraproject.org/viewvc//devel/zip/exec-shield.patch?view=markup -- Kees Cook @debian.org
--- zip-3.0.orig/crc_i386.S +++ zip-3.0/crc_i386.S @@ -302,3 +302,5 @@ #endif /* i386 || _i386 || _I386 || __i386 */ #endif /* !USE_ZLIB && !CRC_TABLE_ONLY */ +.section .note.GNU-stack, "", @progbits +.previous only in patch2: unchanged: --- zip-3.0.orig/match.S +++ zip-3.0/match.S @@ -405,3 +405,5 @@ #endif /* i386 || _I386 || _i386 || __i386 */ #endif /* !USE_ZLIB */ +.section .note.GNU-stack, "", @progbits +.previous
