Steve Langasek wrote:

> See bugs 321720, 321721, 321723, and 321724 in the BTS.  The bug in openssl
> has been fixed in unstable, and that fix should soon propagate to testing; a
> related bug was fixed in libacl1 before the sarge release.

Nice to see that these kind of bugs are being addressed. I'll apply the
workaround. You can close this ticket.

This is the response I've received from grsec's developper:

"The workaround is fine.  The main problem is that glibc was forcing an
exit of the application if its improperly set PT_GNU_STACK was being set
on the application.  Regardless though (both with and without the
workaround), the packages with the improper PT_GNU_STACK settings
should be fixed soon, since exec-shield users will have the stack
improperly set as executable in those applications (which due to
exec-shield's implementation, makes the entire address space of that
application executable).  Gentoo has applied the same workaround by the
way, a long time ago.

-Brad"


Thanks to both Steve & Brad.

Cheers,
-Román

Reply via email to