Advisories » MGASA-2017-0202

Updated ffcall,clisp packages fix security vulnerability

Publication date: 07 Jul 2017
Modification date: 07 Jul 2017
Type: security
Affected Mageia releases : 5

Description

In libffcall before version 1.13, linking with the libffcall libraries
could cause the stack to become executable. This is now fixed.

clisp is rebuilt to pick the fixed libffcall static library.
                

References

• https://bugs.mageia.org/show_bug.cgi?id=21140
• https://lists.gnu.org/archive/html/libffcall/2017-06/msg00002.html

SRPMS

5/core

• ffcall-1.13-1.mga5
• clisp-2.49-11.1.mga5