Your message dated Tue, 25 Oct 2016 16:52:00 +0000
with message-id <6353b502-b3fa-fc04-2790-f1c617236...@thykier.net>
and subject line Re: kannel-dev: Please build libgwlib.a with -fPIC
has caused the Debian Bug report #837663,
regarding kannel-dev: libgwlib.a needs binNMU rebuild with MySQL 5.7 and -fPIE
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
837663: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=837663
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: kannel-dev
Version: 1.4.4-3
Severity: important
User: bal...@balintreczey.hu
Usertags: pie-bindnow-20160906
Justification: makes kannel-sqlbox FTBFS with extra hardening
Affects: acl2 axiom ganeti kannel-sqlbox libbonobo lsh-utils lwt mclibs
numexpr nwchem ocaml-ctypes ocaml-text parmap partclone paw proftmb psi4
psicode pyresample reiser4progs snort tiledarray ucspi-unix xemacs21 xmonad
Dear Maintainers,
During a rebuild of all packages in sid, kannel-sqlbox
failed to build on amd64 with patched GCC and dpkg. The root
cause seems to be that libgwlib.a is shipped as a non-PIC library.
The rebuild tested if packages are ready for a transition
enabling PIE and bindnow for amd64 (and selected architectures).
For more information about the changes to sid's dpkg and GCC please
visit:
https://wiki.debian.org/Hardening/PIEByDefaultTransition
Relevant part of kannel-sqlbox's build log:
...
creposix -lrt -lresolv -lnsl -lm -lpthread -lxml2 -lpcreposix -lpcre
-L/usr/lib -lcrypto -lssl -L/usr/lib/x86_64-linux-gnu -lmysqlclient
-lpthread -lz -lm -ldl -L/usr/local/lib -lsqlite -L/usr/local/lib
-lsqlite3 -L/usr/lib/x86_64-linux-gnu -L/usr/lib -lhiredis -L/usr/lib -lct
checking Kannel includes... -I/usr/include/kannel -g -O2
-fstack-protector-strong -Wformat -Werror=format-security
-D_XOPEN_SOURCE=600 -D_DEFAULT_SOURCE -D_LARGE_FILES=
-I/usr/include/libxml2 -Wall -Wmissing-prototypes
-Wmissing-declarations -Wnested-externs -Winline -Wformat
-Wformat-security -Wmissing-format-attribute -I/usr/include
-I/usr/include/mysql -I/usr/include/postgresql -I/usr/include/hiredis
-I/usr/include
checking for cfg_create in -lgwlib... no
configure: error: Kannel gwlib is required!
...
The full build log is available from:
https://people.debian.org/~rbalint/build-logs/pie-bindnow-20160906/kannel-sqlbox_0.7.2-4_amd64.build.gz
Thanks,
Balint
--- End Message ---
--- Begin Message ---
On Tue, 13 Sep 2016 13:45:21 +0200 Balint Reczey
<bal...@balintreczey.hu> wrote:
> Source: kannel-dev
> Version: 1.4.4-3
> Severity: important
> User: bal...@balintreczey.hu
> Usertags: pie-bindnow-20160906
> Justification: makes kannel-sqlbox FTBFS with extra hardening
> Affects: acl2 axiom ganeti kannel-sqlbox libbonobo lsh-utils lwt mclibs
> numexpr nwchem ocaml-ctypes ocaml-text parmap partclone paw proftmb psi4
> psicode pyresample reiser4progs snort tiledarray ucspi-unix xemacs21 xmonad
>
> Dear Maintainers,
>
> During a rebuild of all packages in sid, kannel-sqlbox
> failed to build on amd64 with patched GCC and dpkg. The root
> cause seems to be that libgwlib.a is shipped as a non-PIC library.
>
> The rebuild tested if packages are ready for a transition
> enabling PIE and bindnow for amd64 (and selected architectures).
>
> For more information about the changes to sid's dpkg and GCC please
> visit:
> https://wiki.debian.org/Hardening/PIEByDefaultTransition
>
> Relevant part of kannel-sqlbox's build log:
> ...
> [...]
> ...
>
> The full build log is available from:
>
> https://people.debian.org/~rbalint/build-logs/pie-bindnow-20160906/kannel-sqlbox_0.7.2-4_amd64.build.gz
>
> Thanks,
> Balint
>
>
>
Rebuilt successfully
--- End Message ---
