Package: python3.6
Version: 3.6.5-3
Severity: normal

Dear Maintainer,

Position independent executable (PIE) is disabled when building
python3.6, as seen in:
https://sources.debian.org/src/python3.6/3.6.7%7Erc2-1/debian/rules/#L6

Original bug:
https://bugs.launchpad.net/ubuntu/+source/python3.6/+bug/1452115

I would expect the package to be built using the standard hardening
options, unless there is a specific reason not to.

-- System Information:
Debian Release: buster/sid
  APT prefers bionic-updates
APT policy: (500, 'bionic-updates'), (500, 'bionic-security'), (500, 'bionic')
Architecture: amd64 (x86_64)

Kernel: Linux 4.13.0-45-generic (SMP w/8 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968), LANGUAGE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/dash
Init: unable to detect

Versions of packages python3.6 depends on:
ii  libpython3.6-stdlib  3.6.5-3
ii  mime-support         3.60ubuntu1
ii  python3.6-minimal    3.6.5-3

python3.6 recommends no packages.

Versions of packages python3.6 suggests:
ii  binutils        2.30-15ubuntu1
pn  python3.6-doc   <none>
ii  python3.6-venv  3.6.5-3

-- no debconf information

Reply via email to