Bug#820959: Iceweasel: missing RELRO

2016-04-13 Thread Heinrich Schuchardt
hardening-check /usr/bin/iceweasel gives the following output: /usr/bin/iceweasel: Position Independent Executable: yes Stack protected: yes Fortify Source functions: yes (some protected functions found) Read-only relocations: no, not found! Immediate binding: no, not found!

Bug#820959: Iceweasel: missing RELRO

2016-04-13 Thread Heinrich Schuchardt
Package: iceweasel Version: 38.7.1esr-1~deb8u1 Severity: normal Tags: security Iceweasel is compiled without RELRO protection against memory corruption as can be shown by executing: readelf -l /usr/bin/iceweasel | grep 'GNU_RELRO' readelf -d /usr/bin/iceweasel | grep 'BIND_NOW' Or run the script