[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: fluendo codecs requiring textrel_shlib_t



On Tue, 2008-02-26 at 18:42 -0800, Ulrich Drepper wrote:
> Daniel J Walsh wrote:
> > I believe you told me that the fluendo codecs are built with the Intel
> > compiler and that is why they need the textrel_shlib_t to work together.
> > Uli mentioned that he could work with the Intel guys to fix the problem.
> 
> Actually, I doubt this is a property of code generated by icc.  It is
> more likely that they use (pieces of) assembler code which is not
> PIC-safe.  There are plenty of descriptions on how to fix this around.
> IMO we should not endorse those encodings until they fix these issues
> since they open up a computer to attacks.

Does anyone even care about fluendo codec's security? They don't even
get updated with yum in case a flaw is found.

-- 
Lubomir Kundrak (Red Hat Security Response Team)


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]