Source: liborbit2-dev Version: 1:2.14.19-1+b1 Severity: important User: [email protected] Usertags: pie-bindnow-20160906 Justification: makes libbonobo FTBFS with extra hardening Affects: libbonobo
Dear Maintainers, During a rebuild of all packages in sid, libbonobo failed to build on amd64 with patched GCC and dpkg. The root cause seems to be that libname-server-2.a is shipped as a non-PIC library. The rebuild tested if packages are ready for a transition enabling PIE and bindnow for amd64 (and selected architectures). For more information about the changes to sid's dpkg and GCC please visit: https://wiki.debian.org/Hardening/PIEByDefaultTransition Relevant part of libbonobo's build log: ... libtool: link: gcc -g -O2 -fdebug-prefix-map=/<<PKGBUILDDIR>>=. -fstack-protector-strong -Wformat -Werror=format-security -Wl,-z -Wl,relro -Wl,-z -Wl,now -o .libs/bonobo-activation-server activation-server-corba-extensions.o activation-context-query.o activation-context-query-lexer.o activation-context-query-parser.o activation-context-corba.o object-directory-corba.o object-directory-load.o object-directory-activate.o object-directory-config-file.o activation-server-main.o -Wl,--export-dynamic -pthread -pthread ../bonobo/.libs/libbonobo-2.so ../bonobo-activation/.libs/libbonobo-activation.so -lname-server-2 -lgmodule-2.0 -lgio-2.0 -lORBitCosNaming-2 -lORBit-2 -lgthread-2.0 -lgobject-2.0 -lglib-2.0 -lxml2 -pthread /usr/bin/ld: /usr/lib/gcc/x86_64-linux-gnu/6/../../../x86_64-linux-gnu/libname-server-2.a(orbit-name-server.o): relocation R_X86_64_32 against `.rodata.str1.8' can not be used when making a shared object; recompile with -fPIC ... The full build log is available from: https://people.debian.org/~rbalint/build-logs/pie-bindnow-20160906/libbonobo_2.32.1-3_amd64.build.gz Thanks, Balint
