Your message dated Fri, 29 Nov 2019 20:46:07 +0000
with message-id <[email protected]>
and subject line Bug#942798: fixed in subversion 1.13.0-1
has caused the Debian Bug report #942798,
regarding subversion: FTBFS with PIE hardening due to disabling PIC, on x32
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
942798: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=942798
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: subversion
Version: 1.10.6-1
Severity: important
Justification: FTBFS on ports arch, built successfully before
Currently, subversion FTBFS on some architectures (at least x32) with:
checking for KWallet... no
configure: error: cannot find KWallet
See:
https://buildd.debian.org/status/fetch.php?pkg=subversion&arch=x32&ver=1.10.6-1&stamp=1564626123&raw=0
The real error message, however, is thus:
configure:16137: checking for KWallet
configure:16187: g++ -o conftest -g -O2 -fdebug-prefix-map=/<<PKGBUILDDIR>>=.
-specs=/usr/share/dpkg/pie-compile.specs -fstack-protector-strong -Wformat
-Werror=format-security -std=c++11 -I/usr/include/dbus-1.0
-I/usr/lib/x86_64-linux-gnux32/dbus-1.0/include
-I/usr/include/x86_64-linux-gnux32/qt5/QtDBus
-I/usr/include/x86_64-linux-gnux32/qt5
-I/usr/include/x86_64-linux-gnux32/qt5/QtGui
-I/usr/include/x86_64-linux-gnux32/qt5
-I/usr/include/x86_64-linux-gnux32/qt5/QtCore
-I/usr/include/x86_64-linux-gnux32/qt5 -I/usr/include/KF5/KWallet
-I/usr/include/KF5/KCoreAddons -I/usr/include/KF5/KI18n -fPIC -Wdate-time
-D_FORTIFY_SOURCE=2 -DLINUX -D_REENTRANT -D_GNU_SOURCE -DQT_DBUS_LIB
-DQT_GUI_LIB -DQT_CORE_LIB -specs=/usr/share/dpkg/pie-link.specs -Wl,-z,relro
-Wl,-z,now -L/usr/lib/x86_64-linux-gnux32 conftest.cpp -ldbus-1
-lKF5Wallet -lKF5I18n -lKF5CoreAddons -lQt5Gui -lQt5DBus -lQt5Core >&5
In file included from
/usr/include/x86_64-linux-gnux32/qt5/QtCore/qalgorithms.h:43,
from /usr/include/x86_64-linux-gnux32/qt5/QtCore/qlist.h:43,
from
/usr/include/x86_64-linux-gnux32/qt5/QtCore/qstringlist.h:41,
from /usr/include/x86_64-linux-gnux32/qt5/QtCore/QStringList:1,
from /usr/include/KF5/KWallet/kwallet.h:24,
from conftest.cpp:39:
/usr/include/x86_64-linux-gnux32/qt5/QtCore/qglobal.h:1177:4: error: #error
"You must build your code with position independent code if Qt was built with
-reduce-relocations. " "Compile your code with -fPIC (-fPIE is not enough)."
# error "You must build your code with position independent code if Qt was
built with -reduce-relocations. "\
^~~~~
configure:16187: $? = 1
The reason this fails is because how dpkg implements PIE on some
architectures. This is buggy, but the dpkg maintainer seems to be
unable to fix it in dpkg due to some GCC change enabling PIE by
default sometimes. Basically, PIC should override PIE but, when
PIE is implemented with -specs=, doesn’t.
The following change to debian/rules allows the build to proceed:
@@
+DEB_HOST_ARCH?=$(shell dpkg-architecture -qDEB_HOST_ARCH)
+ifneq (,$(filter x32,${DEB_HOST_ARCH}))
+DEB_BUILD_MAINT_OPTIONS=hardening=+all,-pie
+else
DEB_BUILD_MAINT_OPTIONS=hardening=+all
+endif
include /usr/share/dpkg/default.mk
Please apply.
Thanks in advance,
//mirabilos
--
tarent solutions GmbH
Rochusstraße 2-4, D-53123 Bonn • http://www.tarent.de/
Tel: +49 228 54881-393 • Fax: +49 228 54881-235
HRB 5168 (AG Bonn) • USt-ID (VAT): DE122264941
Geschäftsführer: Dr. Stefan Barth, Kai Ebenrett, Boris Esser, Alexander Steeg
**********
Mit der tarent Academy bieten wir auch Trainings und Schulungen in den
Bereichen Softwareentwicklung, Agiles Arbeiten und Zukunftstechnologien an.
Besuchen Sie uns auf www.tarent.de/academy. Wir freuen uns auf Ihren Kontakt.
**********
--- End Message ---
--- Begin Message ---
Source: subversion
Source-Version: 1.13.0-1
We believe that the bug you reported is fixed in the latest version of
subversion, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
James McCoy <[email protected]> (supplier of updated subversion package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 28 Nov 2019 22:11:05 -0500
Source: subversion
Architecture: source
Version: 1.13.0-1
Distribution: unstable
Urgency: medium
Maintainer: James McCoy <[email protected]>
Changed-By: James McCoy <[email protected]>
Closes: 942798
Changes:
subversion (1.13.0-1) unstable; urgency=medium
.
* New upstream release
* debian/watch:
+ Monitor 1.13.x versions
* Update upstream signing keys
* debian/control:
+ Bump minimum jdk version to 1.8
+ Switch to junit4 for Java tests
+ Bump libsvn-dev Build-Conflicts to << 1.13~
+ Remove obsolete Build-Depends on apache2-dev
+ Fix a typos in the pkg.subversion.nokde profile name
* Declare compliance with Policy 4.4.1, no changes needed
* Fix FTBFS on certain archs due to PIC/PIE interaction.
Thanks to Thorsten Glaser for the patch (Closes: #942798)
* libsvn1.symbols:
+ Mark private/experimental symbols as optional
+ Update symbols for 1.11, 1.12, and 1.13
* debian/tests:
+ Replace $ADTTMP with $AUTOPKGTEST_TMP
* Add fetch-keys script to update/minimize signing-key.asc
* Add a pkg.subversion.nojava build profile
Checksums-Sha1:
b1597289849c35c7963fc720aa77564ff2b072c7 3642 subversion_1.13.0-1.dsc
56a58df2337bbe9196cbdca4770c50be55e14ed5 11544359 subversion_1.13.0.orig.tar.gz
eef4d6675189d5b9f83d3e3b350a3ca7d86df6b8 2954 subversion_1.13.0.orig.tar.gz.asc
1508d4689dbb665ba572119857eb82cd7ac45c1a 420392
subversion_1.13.0-1.debian.tar.xz
Checksums-Sha256:
d8f4bc1d90b56e429158bdee1dfa083fcf8713de2a6524d5f91a48dee683bc8f 3642
subversion_1.13.0-1.dsc
daad440c03b8a86fcca804ea82217bb1902cfcae1b7d28c624143c58dcb96931 11544359
subversion_1.13.0.orig.tar.gz
ed4f87b947b8172fcaa4c741d8ccc7929914b18cf1ccffc32b4f159fdee3070d 2954
subversion_1.13.0.orig.tar.gz.asc
1a25d666bd2f302c4aa2e8c542b9c5b8decd681177d588ef4b6b4471d781e669 420392
subversion_1.13.0-1.debian.tar.xz
Files:
8e10547697fdbf01cade67a2bb118b10 3642 vcs optional subversion_1.13.0-1.dsc
5b827637ce9f81564156b832c0f039a7 11544359 vcs optional
subversion_1.13.0.orig.tar.gz
2cfa1de6fd6567fc34066aeb0cfecaa5 2954 vcs optional
subversion_1.13.0.orig.tar.gz.asc
0f183a82dc8c1ba8433cc5e8341682a1 420392 vcs optional
subversion_1.13.0-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=cICc
-----END PGP SIGNATURE-----
--- End Message ---
