Package: python3.11 Version: 3.11.2-6 Followup-For: Bug #1031743 Dear Maintainer,
PIE was enebaled for Python 3.10 by [Bug #919134](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=919134). [b23d4ec0](https://salsa.debian.org/cpython-team/python3/-/commit/b23d4ec00357597127b8651a1f4f5e3eea388d72#8756c63497c8dc39f7773438edf53b220c773f67_84_83) added it only for Ubuntu, so [4faf96b5](https://salsa.debian.org/cpython-team/python3/-/commit/4faf96b52843e91c28c2e4cc2a5cbb8b88ff7ec3#8756c63497c8dc39f7773438edf53b220c773f67_88_83) changed it to also support Debian and switched from Then [03a2c395](https://salsa.debian.org/cpython-team/python3/-/commit/03a2c395781b26ecb2c6ec09a54fa3569de8ac9c#8756c63497c8dc39f7773438edf53b220c773f67_86_85) added a work-around for [pypa/pip#11183](https://github.com/pypa/pip/issues/11183) and disbaled PIE: But `debian/rules` contains this: > 81 dpkg_buildflags = DEB_BUILD_MAINT_OPTIONS="hardening=-pie > $(DPKG_OPTIMIZE)" dpkg-buildflags > 82 dpkg_pieflags = DEB_BUILD_MAINT_OPTIONS="hardening=-pie > $(DPKG_OPTIMIZE)"dpkg-buildflags > 83 ifeq (,$(filter $(distrelease),stretch buster bullseye trusty xenial > bionic focal impish)) No "bookworm" here, so `$(filter booworm,…)` is empty and the following gets applied: > 84 with_nopie := yes > 85 dpkg_pieflags = DEB_BUILD_MAINT_OPTIONS="hardening=-pie > $(DPKG_OPTIMIZE)" dpkg-buildflags ^ > 86 endif Sadly the commit does not carry any extra information why PIE was disabled, probably to make binary wheels compatible with Debian again? Philipp -- System Information: Debian Release: 12.5 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 6.1.0-18-amd64 (SMP w/16 CPU threads; PREEMPT) Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE=de:en_US Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages python3.11 depends on: ii libpython3.11-stdlib 3.11.2-6 ii media-types 10.0.0 ii mime-support 3.66 ii python3.11-minimal 3.11.2-6 Versions of packages python3.11 recommends: ii ca-certificates 20230311 Versions of packages python3.11 suggests: ii binutils 2.40-2 ii python3.11-doc 3.11.2-6 ii python3.11-venv 3.11.2-6 -- no debconf information
