[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#879014: marked as done (gpgme1.0: FTBFS on some arches: Qt needs a compile with -fPIC (PIE is not enough), hardening downgrades to PIE)

Your message dated Sun, 02 Aug 2020 09:05:24 +0000
with message-id <E1k29vo-0007z0-Lw@fasolo.debian.org>
and subject line Bug#879014: fixed in qtbase-opensource-src 5.14.2+dfsg-5
has caused the Debian Bug report #879014,
regarding gpgme1.0: FTBFS on some arches: Qt needs a compile with -fPIC (PIE is not enough), hardening downgrades to PIE
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
879014: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=879014
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Source: gpgme1.0
Version: 1.9.0-6
Severity: important
Justification: fails to build from source (but built successfully in the past), on d-ports arch

https://buildd.debian.org/status/fetch.php?pkg=gpgme1.0&arch=x32&ver=1.9.0-6&stamp=1507702170&raw=0
points out the problem: Qt wants to be compiled with -fPIC and sets up
the CFLAGS appropriately, yet hardening comes into the way as it adds
the PIE *after* the PIC.

Cc’ing qtbase5-dev and dpkg maintainers.

Downgrading *dpkg* to 1.18.10 was not enough this time, I also¹ had to
edit debian/rules to get it to compile:
-export DEB_BUILD_MAINT_OPTIONS = hardening=+all
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all,-pie

① I didn’t test whether that was enough with up-to-date dpkg.
  We have a Python transition to get forward.

-- System Information:
Debian Release: buster/sid
  APT prefers unreleased
  APT policy: (500, 'unreleased'), (500, 'buildd-unstable'), (500, 'unstable')
Architecture: x32 (x86_64)
Foreign Architectures: i386, amd64

Kernel: Linux 4.12.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE=C (charmap=UTF-8)
Shell: /bin/sh linked to /bin/lksh
Init: sysvinit (via /sbin/init)

--- End Message ---
--- Begin Message --- 
Source: qtbase-opensource-src
Source-Version: 5.14.2+dfsg-5
Done: Dmitry Shachnev <mitya57@debian.org>

We believe that the bug you reported is fixed in the latest version of
qtbase-opensource-src, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 879014@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Dmitry Shachnev <mitya57@debian.org> (supplier of updated qtbase-opensource-src package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 02 Aug 2020 11:49:03 +0300
Source: qtbase-opensource-src
Architecture: source
Version: 5.14.2+dfsg-5
Distribution: unstable
Urgency: medium
Maintainer: Debian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org>
Changed-By: Dmitry Shachnev <mitya57@debian.org>
Closes: 879014 958479 963955
Changes:
 qtbase-opensource-src (5.14.2+dfsg-5) unstable; urgency=medium
 .
   * Backport upstream patch for moc to handle include directives in enums
     (closes: #963955).
   * Stop using -isystem flag in qmake (closes: #958479).
   * Clarify warning message about PIC/PIE, thanks Daniel Kahn Gillmor
     (closes: #879014).
   * Update symbols files for GCC 10.
   * Update libqt5gui5.lintian-overrides for tag renames in Lintian 2.79.
Checksums-Sha1:
 b52f4bd884d259701a3c686bde2b4d6ad0825264 5519 qtbase-opensource-src_5.14.2+dfsg-5.dsc
 7fe58a147f4221626d7cf41872d8b0bae2635e64 256968 qtbase-opensource-src_5.14.2+dfsg-5.debian.tar.xz
 5f0750f15f32d94a550b8337df9a41f9bbcd1539 17677 qtbase-opensource-src_5.14.2+dfsg-5_source.buildinfo
Checksums-Sha256:
 67689f58eabd5fdb3acf9f348a661f055e03d0f99a06174887e58564d2ab75b0 5519 qtbase-opensource-src_5.14.2+dfsg-5.dsc
 953bbb0406c71a3e990382af2ca229e0c833383b91bca8c57b43fd62020b3bd6 256968 qtbase-opensource-src_5.14.2+dfsg-5.debian.tar.xz
 95f69e0d93c0e11a76a485a693ea84a8ba4784e948e7b3591bf97bd446b57401 17677 qtbase-opensource-src_5.14.2+dfsg-5_source.buildinfo
Files:
 ceb33c498e0842b068f4652ccd38b1b6 5519 libs optional qtbase-opensource-src_5.14.2+dfsg-5.dsc
 a4a6d443cf16238f514618fbd0022b87 256968 libs optional qtbase-opensource-src_5.14.2+dfsg-5.debian.tar.xz
 3e237edf6f2458aeff971fefa6e95538 17677 libs optional qtbase-opensource-src_5.14.2+dfsg-5_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=MAPN
-----END PGP SIGNATURE-----

--- End Message ---
Reply to: