Re: [eclipse-dev] Eclipse (V 4.26) : Control Flow Guard (CFG) is not ena

[Mickael Istria <mistria@xxxxxxxxxx>]

Hi,

Please open a ticket against https://github.com/eclipse-equinox/equinox with details about this issue (including description of the security vulnerability).

Cheers,

On Mon, Apr 24, 2023 at 7:08 AM Kumbhar, Anuradha via eclipse-dev <eclipse-dev@xxxxxxxxxxx> wrote:

Hi,

 

Could you please check the previous email  conversation and help me resolving the same?

 

+All eclipse Dev DLs to get more heling hands...

Thanks

Anuradha

 

From: Kumbhar, Anuradha
Sent: Tuesday, March 21, 2023 5:34 PM
To: eclipse-dev-request@xxxxxxxxxxx
Cc: Mahajan, Ashish <Ashish_Mahajan@xxxxxxx>
Subject: Eclipse (V 4.26) : Control Flow Guard (CFG) is not enabled for Launcher.exe

 

Hi,

 

We are creating Thick Client using Eclipse plugin.  The launcher to the thick client is Launcher.exe by Eclipse.

Recently one vulnerability is reported on launcher.exe  that Control Flow Guard (CFG) not enabled on his launcher binary.

Control Flow Guard is a security feature that helps protect applications against memory corruption vulnerabilities by restricting where an application can execute code to help circumvent attacks like the buffer overflow.

 

We need your help to address this issue. Or to understand if this issue is already reported with you and there is any plan to resolve this issue.

 

You can quickly refer the launcher.exe details below. In case needed any further information from my side, please revert back.

 

 

Thanks,

Anuradha

 

_______________________________________________
eclipse-dev mailing list
eclipse-dev@xxxxxxxxxxx
To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/eclipse-dev

--

Mickael Istria

Eclipse IDE developer, for Red Hat Developers