Bug#793320: /usr/lib/x86_64-linux-gnu/libwavpack.so.1.1.6: executable stack in libwavpack.so.1.1.6

[Yves-Alexis Perez]

Package: libwavpack1
Version: 4.75.0-1
Severity: important
File: /usr/lib/x86_64-linux-gnu/libwavpack.so.1.1.6

Hi,

it seems that wavpack on x86_64 is shipped with an executable stack:

readelf -l /usr/lib/x86_64-linux-gnu/libwavpack.so.1.1.6 |grep -A1 GNU_STACK
  GNU_STACK      0x0000000000000000 0x0000000000000000 0x0000000000000000
                 0x0000000000000000 0x0000000000000000  RWE    10

That's usually a *very* bad idea, especially in a media library, where stack-based buffer overflows can be quite common.

Can you please disable it?

Regards,
-- 
Yves-Alexis Perez

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable'), (500, 'oldstable'), (450, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.0.8-grsec+ (SMP w/4 CPU cores; PREEMPT)
Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libwavpack1:amd64 depends on:
ii  libc6  2.19-19

libwavpack1:amd64 recommends no packages.

libwavpack1:amd64 suggests no packages.

-- no debconf information