平衡点
2025/05/20
_ glibc の更新
どっかで見た気もするけれど、メモ
apt-listchanges: ニュース
glibc (2.41-7) unstable; urgency=medium
Starting with glibc 2.41, shared libraries requiring an executable stack cannot be dynamically loaded through the dlopen mechanism from a binary that does not require an executable stack. This change aims to improve security, as the previous behavior was used as a vector for RCE (CVE-2023-38408). Attempting to do so will result in the following error:
cannot enable executable stack as shared object requires: Invalid argument
While most libraries generated in the past 20 years do not require an executable stack, some third-party software still need this capability. Many vendors have already updated their binaries to address this.
If you need to run a program that requires an executable stack through dynamic loaded shared libraries, you can use the glibc.rtld.execstack tunable:
GLIBC_TUNABLES=glibc.rtld.execstack=2 ./program
– Aurelien Jarno <aurel32@debian.org> Sun, 13 Apr 2025 14:41:11 +0200