[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#837709: marked as done (libbg1-dev: Please build libinstaller.a with -fPIC)

Your message dated Fri, 30 Sep 2016 18:48:34 +0000
with message-id <E1bq2rK-0000Nq-1q@franck.debian.org>
and subject line Bug#837709: fixed in bglibs 1.106-2.1
has caused the Debian Bug report #837709,
regarding libbg1-dev: Please build libinstaller.a with -fPIC
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
837709: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=837709
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Source: libbg1-dev
Version: 1.106-2
Severity: important
User: balint@balintreczey.hu
Usertags: pie-bindnow-20160906
Justification: makes ucspi-unix FTBFS with extra hardening
Affects: ucspi-unix

Dear Maintainers,

During a rebuild of all packages in sid, ucspi-unix
failed to build on amd64 with patched GCC and dpkg. The root
cause seems to be that libinstaller.a is shipped as a non-PIC library.

The rebuild tested if packages are ready for a transition
enabling PIE and bindnow for amd64 (and selected architectures).

For more information about the changes to sid's dpkg and GCC please
visit:
 https://wiki.debian.org/Hardening/PIEByDefaultTransition

Relevant part of ucspi-unix's build log:
...
./compile insthier.c
./load insthier -linstaller
/usr/bin/ld: /usr/lib/bglibs/lib/libinstaller.a(installer.o): relocation
R_X86_64_32 against `.rodata.str1.1' can not be used when making a
shared object; recompile with -fPIC
...

The full build log is available from:
 https://people.debian.org/~rbalint/build-logs/pie-bindnow-20160906/ucspi-unix_0.36-4_amd64.build.gz

Thanks,
Balint

--- End Message ---
--- Begin Message --- 
Source: bglibs
Source-Version: 1.106-2.1

We believe that the bug you reported is fixed in the latest version of
bglibs, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 837709@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Balint Reczey <balint@balintreczey.hu> (supplier of updated bglibs package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Fri, 30 Sep 2016 20:17:16 +0200
Source: bglibs
Binary: libbg1 libbg1-dev libbg1-doc
Architecture: source
Version: 1.106-2.1
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group <packages@qa.debian.org>
Changed-By: Balint Reczey <balint@balintreczey.hu>
Description:
 libbg1     - BG Libraries Collection
 libbg1-dev - BG Libraries Collection (development)
 libbg1-doc - BG Libraries Collection (documentation)
Closes: 837709
Changes:
 bglibs (1.106-2.1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Build binaries with -fPIC (Closes: #837709)
Checksums-Sha1:
 6935f37f9855d62bb3d5807812ea7695d1c364ba 1757 bglibs_1.106-2.1.dsc
 832fbd18c60b1c48bc4d18838d8993be8b33fd7c 6628 bglibs_1.106-2.1.debian.tar.xz
Checksums-Sha256:
 17986770bdfe0ffd64e54a2fc80dd59026f3f29535eaf03b33e914bd116aa1e2 1757 bglibs_1.106-2.1.dsc
 7a2ba1a319d92532b966ab25463ac70044f769df7ce1e57dcec99fcac39639b4 6628 bglibs_1.106-2.1.debian.tar.xz
Files:
 b4f2ec848acb0e0dcffd48f8f454dc31 1757 - optional bglibs_1.106-2.1.dsc
 dd23da79bafd503b72f444ef381e91cc 6628 - optional bglibs_1.106-2.1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=V/A8
-----END PGP SIGNATURE-----

--- End Message ---
Reply to: