Bug 2216763

Summary: Change Proposal Name Changes/LIBFFI_34_static_trampolines
Product: [Fedora] Fedora Reporter: Aoife Moloney <amoloney>
Component: Changes TrackingAssignee: DJ Delorie <dj>
Status: CLOSED CURRENTRELEASE QA Contact:
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 39CC: awilliam, dj, thrcka
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: libffi-3.4.4-3.fc39 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2023-11-14 18:57:27 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 2158243    

Description Aoife Moloney 2023-06-22 13:37:07 UTC 
This is a tracking bug for Change: Change Proposal Name Changes/LIBFFI_34_static_trampolines
For more details, see: https://fedoraproject.org/wiki/Changes/LIBFFI34_static_trampolines

Libffi is currently configured to use dynamic trampolines, which require some source of memory which is both writable and executable.  This is an obvious security issue, and selinux and system defaults have made it more and more difficult to safely provide this memory to libffi clients.  With this change, libffi will be configured to use static trampolines, which do not require such memory, and will not pose those security and administrative risks.

If you encounter a bug related to this Change, please do not comment here. Instead create a new bug and set it to block this bug.
Comment 1 Adam Williamson 2023-08-21 22:01:03 UTC 
The libffi build with this change has been stable for some time, and we've been through the mass rebuild, so I think everything is done here. Marking as ON_QA (indicating 100% complete).
Comment 2 Aoife Moloney 2023-11-14 18:57:27 UTC 
F39 was released on November 7th, so I am closing this tracker. If this Change was not completed, please notify me ASAP.