Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-67040

annocheck 'hardened' test fails for /usr/lib64/libpython3.12.so.1.0 on x86_64 due to missing -fcf-protection

Linking RHIVOS CVEs to...Migration: Automation ...Sync from "Extern...XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • rhel-10.1
    • rhel-10.0
    • python3.12
    • None
    • python3.12-3.12.10-2.el10
    • No
    • Low
    • ZStream
    • 1
    • rhel-pt-python
    • 13
    • False
    • False
    • Hide

      None

      Show
      None
    • No
    • PT Python 2025 S06
    • Approved Blocker
    • Unspecified Release Note Type - Unknown
    • x86_64
    • None

      osci.brew-build.rpminspect.static-analysis fails on python3.12-3.12.6-2.el10 with:

      • annocheck 'hardened' test fails for /usr/lib64/libpython3.12.so.1.0 on aarch64
        • dynamic-tags test because the BTI_PLT flag is missing from the dynamic tags
        • property-note test because properly formatted .note.gnu.property not found (it is needed for branch protection support)
      • annocheck 'hardened' test fails for /usr/lib64/libpython3.12.so.1.0 on x86_64
        • cf-protection test because no .note.gnu.property section = no control flow information
        • property-note test because a property note was found but it shows that cf-protection is not enabled

              rhn-support-lzachar Lukas Zachar
              mhroncok@redhat.com Miro Hrončok
              Charalampos Stratakis Charalampos Stratakis
              Lukas Zachar Lukas Zachar
              Votes:
              0 Vote for this issue
              Watchers:
              9 Start watching this issue

                Created:
                Updated: