Your message dated Mon, 10 Apr 2017 21:50:05 +0000
with message-id <[email protected]>
and subject line Bug#859442: fixed in p7zip 16.02+dfsg-3
has caused the Debian Bug report #859442,
regarding p7zip shouldn't disable PIE
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
859442: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=859442
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: p7zip
Version: 16.02+dfsg-2
Severity: normal
Tags: patch
With gcc in stretch defaulting to PIE, hardening=+all,-pie changed
semantics from "enable hardening but not PIE" to "enable all hardening
and explicitely disable the default PIE".
The latter is usually not intended.
The -pie in hardening flags was in some cases required in pre-stretch
releases to avoid build failures caused by (incorrectly) passing -fPIE
to the compiler when building shared libraries or plugins.
This problem does no longer exist.
Please consider applying the following patch:
--- debian/rules.old 2017-04-03 14:45:47.000000000 +0000
+++ debian/rules 2017-04-03 14:45:55.000000000 +0000
@@ -3,7 +3,7 @@
DH_AUTO_OPTIONS := -v -Smakefile --parallel
stampfile := debian/build-stamp
-export DEB_BUILD_MAINT_OPTIONS=hardening=+all,-pie # pie does not work with
shared libs
+export DEB_BUILD_MAINT_OPTIONS=hardening=+all
include /usr/share/dpkg/architecture.mk
--- End Message ---
--- Begin Message ---
Source: p7zip
Source-Version: 16.02+dfsg-3
We believe that the bug you reported is fixed in the latest version of
p7zip, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Robert Luberda <[email protected]> (supplier of updated p7zip package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 10 Apr 2017 23:29:04 +0200
Source: p7zip
Binary: p7zip p7zip-full
Architecture: source
Version: 16.02+dfsg-3
Distribution: unstable
Urgency: medium
Maintainer: Robert Luberda <[email protected]>
Changed-By: Robert Luberda <[email protected]>
Description:
p7zip - 7zr file archiver with high compression ratio
p7zip-full - 7z and 7za file archivers with high compression ratio
Closes: 859442
Changes:
p7zip (16.02+dfsg-3) unstable; urgency=medium
.
* Remove `-pie' from hardening options (closes: #859442).
Checksums-Sha1:
75640131de2ae54b283fb88f16b5d54ee5ab0cb9 1927 p7zip_16.02+dfsg-3.dsc
e8893e64636d325ed8f4bf1db6a3e9c47c6dfba8 20540 p7zip_16.02+dfsg-3.debian.tar.xz
cad105108ffe53cfa20a0c54244773ad62972bb0 5188
p7zip_16.02+dfsg-3_source.buildinfo
Checksums-Sha256:
f5617ca78bbf97793461708bf76de7d1d31fb20ceb652b3db7ddcf15ac08e664 1927
p7zip_16.02+dfsg-3.dsc
811c98a87e91c5bb392de29ab6b66d3b4dc1c55719942877c6c0371fa58a5c87 20540
p7zip_16.02+dfsg-3.debian.tar.xz
43b2f8bb5edcf09ac36a6a0cd87e64d322afbb6d28bfda566aeda1c637260d9f 5188
p7zip_16.02+dfsg-3_source.buildinfo
Files:
85c112893303bd5b3b021c131899f7d8 1927 utils optional p7zip_16.02+dfsg-3.dsc
1808abb6c2a56ac1113aafbf77520045 20540 utils optional
p7zip_16.02+dfsg-3.debian.tar.xz
4aa16ab388359fef7eca2e01551cd59a 5188 utils optional
p7zip_16.02+dfsg-3_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=QvTC
-----END PGP SIGNATURE-----
--- End Message ---
