Your message dated Sun, 23 Oct 2016 23:10:56 +0000
with message-id <e1byruq-0007xs...@franck.debian.org>
and subject line Bug#837568: fixed in libctl 3.2.2-3
has caused the Debian Bug report #837568,
regarding libctl-dev: Please build libctlgeom.a with -fPIC
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
837568: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=837568
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: libctl-dev
Version: 3.2.2-2
Severity: important
User: bal...@balintreczey.hu
Usertags: pie-bindnow-20160906
Justification: makes mpb FTBFS with extra hardening
Affects: mpb
Dear Maintainers,
During a rebuild of all packages in sid, mpb
failed to build on amd64 with patched GCC and dpkg. The root
cause seems to be that libctlgeom.a is shipped as a non-PIC library.
The rebuild tested if packages are ready for a transition
enabling PIE and bindnow for amd64 (and selected architectures).
For more information about the changes to sid's dpkg and GCC please
visit:
https://wiki.debian.org/Hardening/PIEByDefaultTransition
Relevant part of mpb's build log:
...
libtool: link: mpicc -g -O2 -fdebug-prefix-map=/<<PKGBUILDDIR>>=.
-fstack-protector-strong -Wformat -W
error=format-security -Wall -W -Wbad-function-cast -Wcast-qual
-Wpointer-arith -Wcast-align -pedantic
-Wl,-z -Wl,relro -Wl,-z -Wl,now
-Wl,-L/usr/lib/x86_64-linux-gnu/hdf5/openmpi -o normal_vectors normal_
vectors.o -lctlgeom ../src/.libs/libmpb.a
-L/usr/lib/gcc/x86_64-linux-gnu/6 -L/usr/lib/gcc/x86_64-lin
ux-gnu/6/../../../x86_64-linux-gnu
-L/usr/lib/gcc/x86_64-linux-gnu/6/../../../../lib -L/lib/x86_64-lin
ux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L/usr/lib/../lib
-L/usr/lib/gcc/x86_64-linux-gnu/6/.
./../.. -L/usr/lib/x86_64-linux-gnu/hdf5/openmpi -lctl -lguile-2.0 -lgc
-lhdf5 -lz -llapack -lblas -lf
ftw3 -lgfortran -lm -lquadmath
/usr/bin/ld:
/usr/lib/gcc/x86_64-linux-gnu/6/../../../x86_64-linux-gnu/libctlgeom.a(geom.o):
relocation R_X86_64_32 against `.rodata.str1.1' can not be used when
making a shared object; recompile with -fPIC
...
The full build log is available from:
https://people.debian.org/~rbalint/build-logs/pie-bindnow-20160906/mpb_1.5-2_amd64.build.gz
Thanks,
Balint
--- End Message ---
--- Begin Message ---
Source: libctl
Source-Version: 3.2.2-3
We believe that the bug you reported is fixed in the latest version of
libctl, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 837...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Thorsten Alteholz <deb...@alteholz.de> (supplier of updated libctl package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 22 Oct 2016 12:00:26 +0200
Source: libctl
Binary: libctl-dev libctl5 libctl-doc
Architecture: source amd64 all
Version: 3.2.2-3
Distribution: sid
Urgency: medium
Maintainer: Thorsten Alteholz <deb...@alteholz.de>
Changed-By: Thorsten Alteholz <deb...@alteholz.de>
Description:
libctl-dev - library for flexible control files, development version
libctl-doc - library for flexible control files, documentation
libctl5 - library for flexible control files
Closes: 837568
Changes:
libctl (3.2.2-3) unstable; urgency=medium
.
* debian/copyright: reorder to calm lintian
* debian/control: add ${misc:Pre-Depends} instead of multiarch-suppport
* debian/control: bump standard to 3.9.8 (no change)
* debian/rules: build everything with -fPIC (Closes: #837568)
* remove false positive overrides libctl-doc.lintian-overrides
Checksums-Sha1:
78fa870fa890ddd4a8d81326f3a7ebb95673cca9 1997 libctl_3.2.2-3.dsc
d7f860313d5cc226c51f868bbe9bb930d143ab9c 505796 libctl_3.2.2.orig.tar.gz
b7b4a2458056ec3966a7071a07605a9d8482b663 6744 libctl_3.2.2-3.debian.tar.xz
c405fbf5b641900d7ec364736a8fb66fc37ba488 90986 libctl-dev_3.2.2-3_amd64.deb
dd28563f83a5a19c5b81cf52d883e70839b611cf 76524 libctl-doc_3.2.2-3_all.deb
26719c5703d4826949fd0f7abd039482aead6f3f 74204 libctl5-dbgsym_3.2.2-3_amd64.deb
4d7e78f3a9b6cd77d284fdc57c28eca75d2f83cc 100070 libctl5_3.2.2-3_amd64.deb
Checksums-Sha256:
d9314af124b1a768593b43114a6a19731a3e017b616bc6984cbc5aa4a386c8b3 1997
libctl_3.2.2-3.dsc
8abd8b58bc60e84e16d25b56f71020e0cb24d75b28bc5db86d50028197c7efbc 505796
libctl_3.2.2.orig.tar.gz
57bfa5e238df48f9085482fe0fdd659f6b6e00358794c8e291d7a9d8d093a934 6744
libctl_3.2.2-3.debian.tar.xz
82b67266231b93f41c75d2b0f34b9c98a02255766f81f3e951109c3258ad4acc 90986
libctl-dev_3.2.2-3_amd64.deb
c44d04c1ab47ba1106fc3008056988ce859129d5ebe999e82ac13c19bccbfc14 76524
libctl-doc_3.2.2-3_all.deb
c2d27bcebae3f57cf0c203b164113d17da6d3a37091392fded3a3ddd2a29ef3b 74204
libctl5-dbgsym_3.2.2-3_amd64.deb
61e8873b5c4e58ad225560fbd1f37183202af343b2c077718664a8ef6314eb24 100070
libctl5_3.2.2-3_amd64.deb
Files:
28089be3e737b5c5217acddd4f6e0144 1997 devel optional libctl_3.2.2-3.dsc
5fd7634dc9ae8e7fa70a68473b9cbb68 505796 devel optional libctl_3.2.2.orig.tar.gz
e80fb3bddcba6950157654982522fa23 6744 devel optional
libctl_3.2.2-3.debian.tar.xz
60e62860b30276e2bee68d6dcbca36b2 90986 libdevel optional
libctl-dev_3.2.2-3_amd64.deb
83192704416a5956fbac6aff3884e735 76524 doc optional libctl-doc_3.2.2-3_all.deb
f8821d97057e0822b5fa28e49c17e108 74204 debug extra
libctl5-dbgsym_3.2.2-3_amd64.deb
fc9c0c17439ce8365a941a71c095f093 100070 libs optional libctl5_3.2.2-3_amd64.deb
-----BEGIN PGP SIGNATURE-----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=OZYm
-----END PGP SIGNATURE-----
--- End Message ---