Fedora 18 Update: checksec-1.5-1.fc18

updates at fedoraproject.org updates at fedoraproject.org
Thu Jun 13 06:11:21 UTC 2013


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-10711
2013-06-13 03:25:39
--------------------------------------------------------------------------------

Name        : checksec
Product     : Fedora 18
Version     : 1.5
Release     : 1.fc18
URL         : http://www.trapkit.de/tools/checksec.html
Summary     : Tool to check system for binary-hardening
Description :
Modern Linux distributions offer some mitigation techniques to make it harder
to exploit software vulnerabilities reliably. Mitigations such as RELRO,
NoExecute (NX), Stack Canaries, Address Space Layout Randomization (ASLR) and
Position Independent Executables (PIE) have made reliably exploiting any
vulnerabilities that do exist far more challenging. The checksec script is
designed to test what *standard* Linux OS and PaX (http://pax.grsecurity.net/)
security features are being used.

As of version 1.3 the script also lists the status of various Linux kernel
protection mechanisms.

checksec can check binary-files and running processes for hardening features.

--------------------------------------------------------------------------------
Update Information:

Modern Linux distributions offer some mitigation techniques to make it harder to exploit software vulnerabilities reliably.  Mitigations such as RELRO, NoExecute (NX), Stack Canaries, Address Space Layout Randomization (ASLR) and Position Independent Executables (PIE) have made reliably exploiting any vulnerabilities that do exist far more challenging.  The checksec script is designed to test what *standard* Linux OS and PaX (http://pax.grsecurity.net/) security features are being used.  As of version 1.3 the script also lists the status of various Linux kernel protection mechanisms.  checksec can check binary-files and running processes for hardening features.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #973349 - Review Request: checksec - Tool to check system for binary-hardening
        https://bugzilla.redhat.com/show_bug.cgi?id=973349
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update checksec' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


More information about the package-announce mailing list