Red Hat Bugzilla – Bug 996740
no Full RELRO
Last modified: 2013-10-14 13:16:33 EDT
"Immediate binding: no, not found!"
[root@srv-rhsoft:~]$ hardening-check /usr/sbin/cupsd
Position Independent Executable: yes
Stack protected: yes
Fortify Source functions: yes (some protected functions found)
Read-only relocations: yes
Immediate binding: no, not found!
when do maintainers realize that the last thing a reporter want to hear if he submits a bug for F18 "fixed in F19 and F20" - damned the reporter is interested in this fix and can hardly use a package from F+1 to test and verify
so *the first* build on koji has to be the Fedora version for which the bug is reported
what about F18
hence i do not need CUPS at all except 5 times a year, it runs only because the stupidity fire up all sort of services like cups/avahi after graphical Login via dbus and masking results in spitting /var/log/messages full because failed starts
so if there are unused processes on my system they have to be hardened and by the way would it be a godd idea if maintainers read the packaging guidelines and verify their builds *before* release
and where is the F19 package?
in the meantime upgraded to Fedora 19
updates-testing enabled as all the time
no cups-1.6.3-6.fc19 package
cupsd 23452 Partial RELRO Canary found NX enabled PIE enabled
cups-1.6.4-2.fc19 has been submitted as an update for Fedora 19.
* should fix your issue,
* was pushed to the Fedora 19 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing cups-1.6.4-2.fc19'
as soon as you are able to.
Please go to the following url:
then log in and leave karma (feedback).
cups-1.6.4-2.fc19 has been pushed to the Fedora 19 stable repository. If problems still persist, please make note of it in this bug report.