Debian Bug report logs - #859425
mecab shouldn't disable PIE

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Adrian Bunk <bunk@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: mecab shouldn't disable PIE

Date: Mon, 03 Apr 2017 15:17:02 +0300

Source: mecab
Version: 0.996-3
Severity: important
Tags: patch

With gcc in stretch defaulting to PIE, hardening=+all,-pie changed
semantics from "enable hardening but not PIE" to "enable all hardening
and explicitely disable the default PIE".
The latter is usually not intended.

For packages like mecab that include static libraries the situation
is even worse, since non-PIE static libraries cannot be used with
the stretch gcc unless -no-pie is explicitly passed when linking.

The -pie in hardening flags was in some cases required in pre-stretch
releases to avoid build failures caused by (incorrectly) passing -fPIE
to the compiler when building shared libraries or plugins.
This problem does no longer exist.

Please apply the following patch:

--- debian/rules.old	2017-04-03 12:13:47.000000000 +0000
+++ debian/rules	2017-04-03 12:13:54.000000000 +0000
@@ -1,7 +1,7 @@
 #!/usr/bin/make -f
 # -*- Makefile -*-
 
-export DEB_BUILD_MAINT_OPTIONS = hardening=+all,-pie
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all
 DEB_HOST_MULTIARCH ?= $(shell dpkg-architecture -qDEB_HOST_MULTIARCH)
 
 %:

Message #10 received at 859425@bugs.debian.org (full text, mbox, reply):

From: Adrian Bunk <bunk@debian.org>

To: 859425@bugs.debian.org

Subject: mecab: diff for NMU version 0.996-3.1

Date: Mon, 10 Apr 2017 22:03:51 +0300

[Message part 1 (text/plain, inline)]

Control: tags 859425 + pending

Dear maintainer,

I've prepared an NMU for mecab (versioned as 0.996-3.1) and
uploaded it to DELAYED/5. Please feel free to tell me if you
want to make an upload yourself.

cu
Adrian

-- 

       "Is there not promise of rain?" Ling Tan asked suddenly out
        of the darkness. There had been need of rain for many days.
       "Only a promise," Lao Er said.
                                       Pearl S. Buck - Dragon Seed

[mecab-0.996-3.1-nmu.diff (text/x-diff, attachment)]

Message #17 received at 859425-close@bugs.debian.org (full text, mbox, reply):

From: Adrian Bunk <bunk@debian.org>

To: 859425-close@bugs.debian.org

Subject: Bug#859425: fixed in mecab 0.996-3.1

Date: Sat, 15 Apr 2017 19:34:13 +0000

Source: mecab
Source-Version: 0.996-3.1

We believe that the bug you reported is fixed in the latest version of
mecab, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 859425@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Adrian Bunk <bunk@debian.org> (supplier of updated mecab package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 10 Apr 2017 21:55:12 +0300
Source: mecab
Binary: mecab mecab-utils libmecab2 libmecab-dev
Architecture: source
Version: 0.996-3.1
Distribution: unstable
Urgency: medium
Maintainer: Natural Language Processing, Japanese <pkg-nlp-ja-devel@lists.alioth.debian.org>
Changed-By: Adrian Bunk <bunk@debian.org>
Description:
 libmecab-dev - Header files of Mecab
 libmecab2  - Libraries of Mecab
 mecab      - Japanese morphological analysis system
 mecab-utils - Support programs of Mecab
Closes: 859425
Changes:
 mecab (0.996-3.1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Don't disable PIE, to make static libraries usable with
     gcc defaulting to PIE. (Closes: #859425)
Checksums-Sha1:
 f61ca7ee11a78d90ccaea62fb0a29569011f5f0c 2158 mecab_0.996-3.1.dsc
 7bf61d9533cd7095687eb922105a67a687365eb9 7536 mecab_0.996-3.1.debian.tar.xz
Checksums-Sha256:
 4c7c49688a62f89916ac8e2bd132899b181243004b1f254ded04fa88c1514456 2158 mecab_0.996-3.1.dsc
 29a0aef836b36a9543fa32bb48f98b90690ece9a12bab4ce359406f290d9a249 7536 mecab_0.996-3.1.debian.tar.xz
Files:
 e7c4fb595356519956acc59fefa0b8cf 2158 misc optional mecab_0.996-3.1.dsc
 f3232eb143ff37e6240f4ce87bcef488 7536 misc optional mecab_0.996-3.1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=UL3Y
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.