Source: bash Version: 4.4-5 Severity: normal Tags: patch Since both stretch and xenial use a recent enough kernel, please consider applying the following patch to enable PIE:
--- debian/rules.old 2017-06-23 03:06:41.000000000 +0000 +++ debian/rules 2017-06-23 03:07:03.000000000 +0000 @@ -39,7 +39,7 @@ endif -dpkg_buildflags = DEB_CFLAGS_MAINT_APPEND="-Wall -no-pie" dpkg-buildflags +dpkg_buildflags = DEB_CFLAGS_MAINT_APPEND="-Wall" dpkg-buildflags CFLAGS := $(shell $(dpkg_buildflags) --get CFLAGS) CPPFLAGS := $(shell $(dpkg_buildflags) --get CPPFLAGS) LDFLAGS := $(shell $(dpkg_buildflags) --get LDFLAGS)