This bug was fixed in the package asterisk - 1:1.8.13.1~dfsg-1ubuntu2
---
asterisk (1:1.8.13.1~dfsg-1ubuntu2) quantal; urgency=low
* Build-depend on hardening-wrapper again,
reenables pie and bindnow (LP: #1039542)
-- Julian Taylor jtay...@ubuntu.com Tue, 09 Oct 2012
turns out using buildflags is not so good as it lacks the extra logic to handle
pie and pic clashes which hardening wrapper has.
sorry for the wrong request.
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to asterisk in Ubuntu.
** Branch linked: lp:ubuntu/asterisk
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to asterisk in Ubuntu.
https://bugs.launchpad.net/bugs/1039542
Title:
Please re-enable PIE and BIND_NOW
To manage notifications about this bug go to:
Fyi, on 11.10 we have:
$ hardening-check /usr/sbin/asterisk
/usr/sbin/asterisk:
Position Independent Executable: yes
Stack protected: yes
Fortify Source functions: yes
Read-only relocations: yes
Immediate binding: yes
** Description changed:
On 12.10 asterisk is not compiled with PIE or
** Tags added: precise quantal
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to asterisk in Ubuntu.
https://bugs.launchpad.net/bugs/1039542
Title:
Please re-enable PIE and BIND_NOW
To manage notifications about this bug go to:
** Changed in: asterisk (Ubuntu Precise)
Assignee: (unassigned) = Paul Belanger (pabelanger)
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to asterisk in Ubuntu.
https://bugs.launchpad.net/bugs/1039542
Title:
Please re-enable
** Patch added: asterisk_1.8.10.1~dfsg-1ubuntu1.1.debdiff
https://bugs.launchpad.net/ubuntu/+source/asterisk/+bug/1039542/+attachment/3304252/+files/asterisk_1.8.10.1%7Edfsg-1ubuntu1.1.debdiff
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is
instead of using the old hardening wrapper we should use the new
dpkg-buildflags interface:
export DEB_BUILD_MAINT_OPTIONS=hardening=+pie,+bindnow
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to asterisk in Ubuntu.
I don't see pie or bindnow in the old buildlogs, the current version doesn't
even build with pie (some library/executable code mixup)
so its not a regression.
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to asterisk in Ubuntu.
scratch that, the old hardening wrapper does not show the stuff in the
buildlog.
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to asterisk in Ubuntu.
https://bugs.launchpad.net/bugs/1039542
Title:
Please re-enable PIE and BIND_NOW
** Also affects: asterisk (Ubuntu Precise)
Importance: Undecided
Status: New
** Also affects: asterisk (Ubuntu Quantal)
Importance: High
Status: Triaged
** Changed in: asterisk (Ubuntu Precise)
Status: New = Triaged
** Description changed:
On 12.10 asterisk is not
11 matches
Mail list logo