Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-84194

Python/pydtrace.o is missing hardening flags due to systemtap not passing all the CFLAGS

Linking RHIVOS CVEs to...Migration: Automation ...Sync from "Extern...XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Undefined Undefined
    • rhel-10.1
    • rhel-10.0
    • python3.12
    • None
    • No
    • Moderate
    • ZStream
    • 1
    • rhel-pt-python
    • ssg_platform_tools
    • 8
    • False
    • False
    • Hide

      None

      Show
      None
    • No
    • PT Python 2025 S07
    • Approved Blocker
    • Unspecified Release Note Type - Unknown
    • Unspecified
    • Unspecified
    • Unspecified
    • aarch64
    • None

      When compiling Python with the --with-dtrace configure flag during RPM build on aarch64 with the -mbranch-protection=standard flag, for applying the Branch Target Identification(BTI) protections, the resulting object file (pydtrace.o) doesn't contain the protections and the associated elf note, resulting in the final shared library missing the note.

      This will need to be resolved before applying the BTI/PAC protections for aarch64.

              python-maint python-maint
              cstratak@redhat.com Charalampos Stratakis
              Charalampos Stratakis Charalampos Stratakis
              Lukas Zachar Lukas Zachar
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated:
                Resolved: