Ubuntu
qt4-x11 package

qt4-x11 lacks stack protector

Bug #538237 reported by Kees Cook on 2010-03-12

This bug affects 1 person

Affects		Status	Importance	Assigned to	Milestone
	qt4-x11 (Ubuntu)	Fix Released	High	Unassigned	Ubuntu ubuntu-10.04-beta-1
	Lucid	Fix Released	High	Unassigned	Ubuntu ubuntu-10.04-beta-1

Bug Description

qt4-x11 is built with -fno-stack-protector. This is dangerous, and must be fixed.

Related branches

lp://staging/ubuntu/lucid/qt4-x11

lp://staging/~kubuntu-packagers/kubuntu-packaging/qt

lp://staging/ubuntu/natty/qt4-x11

Kees Cook (kees) on 2010-03-12

Changed in qt4-x11 (Ubuntu Lucid):
status:	New → Triaged
importance:	Undecided → High
assignee:	nobody → Jonathan Riddell (jr)
milestone:	none → ubuntu-10.04-beta-1

Revision history for this message

Matthias Klose (doko) wrote on 2010-03-13:

did see this while investigating bug #531697. lets coordinate the upload for the beta

Revision history for this message

Kees Cook (kees) wrote on 2010-03-13:

qt4-x11_4.6.2-0ubuntu2.debdiff Edit (3.5 KiB, text/plain)

Here is the build fix for stack-protector.

Changed in qt4-x11 (Ubuntu Lucid):
assignee:	Jonathan Riddell (jr) → nobody

Matthias Klose (doko) on 2010-03-14

Changed in qt4-x11 (Ubuntu Lucid):
status:	Triaged → In Progress

Revision history for this message

Launchpad Janitor (janitor) wrote on 2010-03-14:

This bug was fixed in the package qt4-x11 - 4:4.6.2-0ubuntu2

---------------
qt4-x11 (4:4.6.2-0ubuntu2) lucid; urgency=low

  [ Matthias Klose ]
  * 90_ia64_opts.diff: Build with -Os on ia64, to work around
    PR target/43348. LP: #531697.
  * debian/rules (clean): Use find/xargs for a small speedup.

  [ Kees Cook ]
  * Add kubuntu_12_fix_stack_protector.diff: restore the stack protector
    compiler flag (LP: #538237).
-- Matthias Klose <email address hidden> Sun, 14 Mar 2010 13:58:43 +0100