Source: kannel-dev Version: 1.4.4-3 Severity: important User: [email protected] Usertags: pie-bindnow-20160906 Justification: makes kannel-sqlbox FTBFS with extra hardening Affects: acl2 axiom ganeti kannel-sqlbox libbonobo lsh-utils lwt mclibs numexpr nwchem ocaml-ctypes ocaml-text parmap partclone paw proftmb psi4 psicode pyresample reiser4progs snort tiledarray ucspi-unix xemacs21 xmonad
Dear Maintainers, During a rebuild of all packages in sid, kannel-sqlbox failed to build on amd64 with patched GCC and dpkg. The root cause seems to be that libgwlib.a is shipped as a non-PIC library. The rebuild tested if packages are ready for a transition enabling PIE and bindnow for amd64 (and selected architectures). For more information about the changes to sid's dpkg and GCC please visit: https://wiki.debian.org/Hardening/PIEByDefaultTransition Relevant part of kannel-sqlbox's build log: ... creposix -lrt -lresolv -lnsl -lm -lpthread -lxml2 -lpcreposix -lpcre -L/usr/lib -lcrypto -lssl -L/usr/lib/x86_64-linux-gnu -lmysqlclient -lpthread -lz -lm -ldl -L/usr/local/lib -lsqlite -L/usr/local/lib -lsqlite3 -L/usr/lib/x86_64-linux-gnu -L/usr/lib -lhiredis -L/usr/lib -lct checking Kannel includes... -I/usr/include/kannel -g -O2 -fstack-protector-strong -Wformat -Werror=format-security -D_XOPEN_SOURCE=600 -D_DEFAULT_SOURCE -D_LARGE_FILES= -I/usr/include/libxml2 -Wall -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -Winline -Wformat -Wformat-security -Wmissing-format-attribute -I/usr/include -I/usr/include/mysql -I/usr/include/postgresql -I/usr/include/hiredis -I/usr/include checking for cfg_create in -lgwlib... no configure: error: Kannel gwlib is required! ... The full build log is available from: https://people.debian.org/~rbalint/build-logs/pie-bindnow-20160906/kannel-sqlbox_0.7.2-4_amd64.build.gz Thanks, Balint
