Fedora Account System
Red Hat Associate
Red Hat Customer
libgnutls is built without shadow stack support. Therefore, Fedora applications that link against it are lacking protection at runtime. As far as I can tell, gnutls upstream has started work on it, but due to various reasons including licensing, it has not been completed so far: https://gitlab.com/gnutls/gnutls/-/work_items/1658 https://gitlab.com/gnutls/gnutls/-/work_items/1043 Some background on why this bug is being filed and marked with a "High" severity: We (the glibc team) are planning to enable Shadow Stack protection by default in Fedora 45, and this bug report is a result of early testing. Here is a WIP/draft Fedora System-Wide Change Proposal: https://fedoraproject.org/wiki/Changes/ShadowStack There are some notes in the Documentation section of the change proposal on how to identify and fix smaller issues (such as a stray assembly file without annotations): https://fedoraproject.org/wiki/Changes/ShadowStack#Documentation However, in the case of gnutls, looks like upstream is aware of the issue already. Reproducible: Always
This bug appears to have been reported against 'rawhide' during the Fedora Linux 45 development cycle. Changing version to 45.