[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#865600: marked as done (flite shouldn't disable PIE)

Your message dated Fri, 14 Jul 2017 21:19:14 +0000
with message-id <E1dW7zW-000Fvx-1t@fasolo.debian.org>
and subject line Bug#865600: fixed in flite 2.0.0-release-4
has caused the Debian Bug report #865600,
regarding flite shouldn't disable PIE
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
865600: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=865600
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Source: flite
Version: 2.0.0-release-3+b1
Severity: normal
Tags: patch

With gcc in stretch defaulting to PIE, hardening=+all,-pie changed
semantics from "enable hardening but not PIE" to "enable all hardening
and explicitely disable the default PIE".
The latter is usually not intended.

The -pie in hardening flags was in some cases required in pre-stretch
releases to avoid build failures caused by (incorrectly) passing -fPIE
to the compiler when building shared libraries or plugins.
This problem does no longer exist.

Please consider applying the following patch:

--- debian/rules.old	2017-06-23 03:37:26.000000000 +0000
+++ debian/rules	2017-06-23 03:37:42.000000000 +0000
@@ -3,11 +3,8 @@
 %:
 	dh $@ --with autoreconf
 
-export DEB_BUILD_MAINT_OPTIONS = hardening=+all,-pie
-# -fPIE doesn't work, but at least get -fPIC as we used to have with
-# hardening-wrapper
-export DEB_CFLAGS_MAINT_APPEND = -no-pie -fno-pie -fno-PIE -fPIC
-export DEB_CXXFLAGS_MAINT_APPEND = -no-pie -fno-pie -fno-PIE -fPIC
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all
+
 #fix FTBFS with binutils-gold
 export DEB_LDFLAGS_MAINT_APPEND = -lm

--- End Message ---
--- Begin Message --- 
Source: flite
Source-Version: 2.0.0-release-4

We believe that the bug you reported is fixed in the latest version of
flite, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 865600@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Paul Gevers <elbrus@debian.org> (supplier of updated flite package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Fri, 14 Jul 2017 22:20:44 +0200
Source: flite
Binary: flite libflite1 flite1-dev
Architecture: source
Version: 2.0.0-release-4
Distribution: unstable
Urgency: medium
Maintainer: Debian Accessibility Team <pkg-a11y-devel@lists.alioth.debian.org>
Changed-By: Paul Gevers <elbrus@debian.org>
Description:
 flite      - Small run-time speech synthesis engine
 flite1-dev - Small run-time speech synthesis engine - development files
 libflite1  - Small run-time speech synthesis engine - shared libraries
Closes: 858207 858208 865600
Changes:
 flite (2.0.0-release-4) unstable; urgency=medium
 .
   [ Samuel Thibault ]
   * Use canonical anonscm vcs URL.
   * control: Update maintainer mailing list.
   * control: Remove suggestion of alsa-base, replaced by kmod
     (Closes: Bug#858207, Bug#858208).
   * Re-enable PIE, now working (Closes: Bug#865600).
 .
   [ Paul Gevers ]
   * Keep hardening enabled
   * Reorder d/watch in the hope udd.d.o reports the current version
Checksums-Sha1:
 b75c32d4b632129da85a2baefbe087e764bfb6ed 1897 flite_2.0.0-release-4.dsc
 4a092935cfe14d73b0c7ce19daba4d704dba9476 30772 flite_2.0.0-release-4.debian.tar.xz
Checksums-Sha256:
 e278b60dbf1af5d3b85b79f365c6b9f237d225029588893fbf251f57037175a4 1897 flite_2.0.0-release-4.dsc
 b4f4656f9bf397bb86d78721d87259629e53f3c0dd0fec10dd08b7750d0ffc3e 30772 flite_2.0.0-release-4.debian.tar.xz
Files:
 624e11bc466e9ecd9d8b4a3221d101fb 1897 sound optional flite_2.0.0-release-4.dsc
 ebafba733317c8785c86e3a2cf5a6a46 30772 sound optional flite_2.0.0-release-4.debian.tar.xz

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEWLZtSHNr6TsFLeZynFyZ6wW9dQoFAllpMhsACgkQnFyZ6wW9
dQoiTAf/fAz9pnCatVJgqq7bC7gvBS5t2PxpC4P60YPdiCf7IZShIp8iZpOWBdPg
/nIQC8Oj9RvxbF4SDnUoEGb2fkgVio2zt93keDOMbNvDwQlQYQhBAKvnB27J1KJj
ud4R17uW6k16uvbetih3BmqPF+NgcS5qkfMum2u1CiCQSsnvklDfrKTD8t/CkPPX
r7FWXj6UhRElNL+puzwlGR8X9I7z0KpdaDXphcacZPTxaZLY5udshFjjcN97Nlw1
oxiFBG9EFCec7hV2nIo3ZJcKXSqG1Q2uvz0U/RKbewrOVfidKlmCJ6lyuyigpGor
st4aqqSZeRqpkZWMk9EWqvu6yy83hA==
=8dWr
-----END PGP SIGNATURE-----

--- End Message ---
Reply to: