[Bug 3728] New: [IcedTea8] CVE-2018-3639 fix revision to prefer PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE

[bugzilla-daemon at icedtea.classpath.org]

https://icedtea.classpath.org/bugzilla/show_bug.cgi?id=3728

            Bug ID: 3728
           Summary: [IcedTea8] CVE-2018-3639 fix revision to prefer
                    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
           Product: IcedTea
           Version: 3.x-hg
          Hardware: x86_64
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P5
         Component: IcedTea
          Assignee: gnu.andrew at redhat.com
          Reporter: gnu.andrew at redhat.com
                CC: unassigned at icedtea.classpath.org

https://lkml.org/lkml/2019/1/15/940

Turning off speculation has a performance impact, so we should clear the flag
from any processes forked from the JDK. To do so, we use PR_SPEC_DISABLE_NOEXEC
in preference to PR_SPEC_DISABLE if available.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mail.openjdk.java.net/pipermail/distro-pkg-dev/attachments/20190418/c3f3633a/attachment-0001.html>