desktop-packages team mailing list archive

[st0ve <1496548@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

It seems that evince is no longer built with -PIE in 15.04:

$ hardening-check /usr/bin/evince
/usr/bin/evince:
 Position Independent Executable: no, normal executable!
 Stack protected: yes
 Fortify Source functions: no, only unprotected functions found!
 Read-only relocations: yes
 Immediate binding: no, not found!

>From 14.04:

$ hardening-check /usr/bin/evince
/usr/bin/evince:
 Position Independent Executable: yes
 Stack protected: yes
 Fortify Source functions: no, only unprotected functions found!
 Read-only relocations: yes
 Immediate binding: yes

evince is a targeted package for 'Built as PIE' here:

https://wiki.ubuntu.com/Security/Features#Built_as_PIE

** Affects: evince (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to evince in Ubuntu.
https://bugs.launchpad.net/bugs/1496548

Title:
  evince no longer built with -PIE

Status in evince package in Ubuntu:
  New

Bug description:
  It seems that evince is no longer built with -PIE in 15.04:

  $ hardening-check /usr/bin/evince
  /usr/bin/evince:
   Position Independent Executable: no, normal executable!
   Stack protected: yes
   Fortify Source functions: no, only unprotected functions found!
   Read-only relocations: yes
   Immediate binding: no, not found!

  From 14.04:

  $ hardening-check /usr/bin/evince
  /usr/bin/evince:
   Position Independent Executable: yes
   Stack protected: yes
   Fortify Source functions: no, only unprotected functions found!
   Read-only relocations: yes
   Immediate binding: yes

  evince is a targeted package for 'Built as PIE' here:

  https://wiki.ubuntu.com/Security/Features#Built_as_PIE

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/evince/+bug/1496548/+subscriptions