Your message dated Mon, 03 Apr 2017 13:50:26 +0000
with message-id <e1cv2ng-000gu8...@fasolo.debian.org>
and subject line Bug#859424: fixed in mapnik 3.0.12+ds-3
has caused the Debian Bug report #859424,
regarding mapnik shouldn't disable PIE
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
859424: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=859424
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: mapnik
Version: 3.0.12+ds-2
Severity: important
Tags: patch
With gcc in stretch defaulting to PIE, hardening=+all,-pie changed
semantics from "enable hardening but not PIE" to "enable all hardening
and explicitely disable the default PIE".
The latter is usually not intended.
For packages like mapnik that include static libraries the situation
is even worse, since non-PIE static libraries cannot be used with
the stretch gcc unless -no-pie is explicitly passed when linking.
The -pie in hardening flags was in some cases required in pre-stretch
releases to avoid build failures caused by (incorrectly) passing -fPIE
to the compiler when building shared libraries or plugins.
This problem does no longer exist.
I verified that python-mapnik still builds after this change.
Please apply the following patch:
--- debian/rules.old 2017-04-03 11:04:40.000000000 +0000
+++ debian/rules 2017-04-03 11:04:53.000000000 +0000
@@ -4,9 +4,8 @@
# Uncomment this to turn on verbose mode.
#export DH_VERBOSE=1
-# Enable hardening build flags, except:
-# pie: causes python-mapnik build failure
-export DEB_BUILD_MAINT_OPTIONS=hardening=+all,-pie
+# Enable hardening build flags:
+export DEB_BUILD_MAINT_OPTIONS=hardening=+all
NJOBS := -j1
ifneq (,$(filter parallel=%,$(subst $(COMMA), ,$(DEB_BUILD_OPTIONS))))
--- End Message ---
--- Begin Message ---
Source: mapnik
Source-Version: 3.0.12+ds-3
We believe that the bug you reported is fixed in the latest version of
mapnik, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 859...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Bas Couwenberg <sebas...@debian.org> (supplier of updated mapnik package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 03 Apr 2017 14:47:38 +0200
Source: mapnik
Binary: libmapnik3.0 libmapnik-dev mapnik-utils mapnik-doc
Architecture: source amd64 all
Version: 3.0.12+ds-3
Distribution: unstable
Urgency: medium
Maintainer: Debian GIS Project <pkg-grass-devel@lists.alioth.debian.org>
Changed-By: Bas Couwenberg <sebas...@debian.org>
Description:
libmapnik-dev - C++ toolkit for developing GIS applications (devel)
libmapnik3.0 - C++ toolkit for developing GIS applications (libraries)
mapnik-doc - C++ toolkit for developing GIS applications (doc)
mapnik-utils - C++ toolkit for developing GIS applications (utilities)
Closes: 859424
Changes:
mapnik (3.0.12+ds-3) unstable; urgency=medium
.
* Update branch in gbp.conf & Vcs-Git URL.
* Enable PIE hardening buildflags.
(closes: #859424)
Checksums-Sha1:
5ed5044fe26ca1dbaf582e2566c5c999f3e63066 3013 mapnik_3.0.12+ds-3.dsc
193187df79c28a70e94ce9d47ec3a040e1309c46 17404 mapnik_3.0.12+ds-3.debian.tar.xz
e8a650aea8245760c5c76dd15f421327f697b589 674258
libmapnik-dev_3.0.12+ds-3_amd64.deb
910dcbe8cdec58f9b1f7e8b7b2704364076ec9c1 2169062
libmapnik3.0_3.0.12+ds-3_amd64.deb
1b6250660cdbe0ee10716288b1506a8392684738 2136812 mapnik-doc_3.0.12+ds-3_all.deb
896761a1b4696994f91d6016799f9c9759c75a3a 228404
mapnik-utils_3.0.12+ds-3_amd64.deb
032e34c321c46ca4578f362a121890914d7b20b4 13292
mapnik_3.0.12+ds-3_amd64.buildinfo
Checksums-Sha256:
9cc1865ba12bda09be20f93d7ba0b9748b339ede82bc7b30176ba512377b4034 3013
mapnik_3.0.12+ds-3.dsc
833dd61dd346f2cf16bd99da812c1bd2e28329f3b9a3a6e0b42a012507629f6c 17404
mapnik_3.0.12+ds-3.debian.tar.xz
0ac5ebc480daba557976057ecacf7ac2fd751286596a37af87ac5224a1beb8e4 674258
libmapnik-dev_3.0.12+ds-3_amd64.deb
4382d221b985516d1446a456deea58a9fdcce70fa52e16323513b4a89f336ffa 2169062
libmapnik3.0_3.0.12+ds-3_amd64.deb
ca1e0b8e8c0a17b65c9552c44355321f97d45f4cfe35bf673ae0f602dca57337 2136812
mapnik-doc_3.0.12+ds-3_all.deb
e9695cb19e00656f82693cbe82ad4b8877df85e242fca56e0ce83a1e19fe5e03 228404
mapnik-utils_3.0.12+ds-3_amd64.deb
c61f2287d613f75a82b45f2f58984f6c060aadbbfdf62e0f32a8aa537ff79113 13292
mapnik_3.0.12+ds-3_amd64.buildinfo
Files:
eeebfc90e514039894f22409598b3cf9 3013 libs optional mapnik_3.0.12+ds-3.dsc
4c3c5fde3a1344c3c4a9c03bd63abfc8 17404 libs optional
mapnik_3.0.12+ds-3.debian.tar.xz
ece61862517d666a83fc1dbc95904051 674258 libdevel optional
libmapnik-dev_3.0.12+ds-3_amd64.deb
c30d6b38e81b94fb93922edbef71e075 2169062 libs optional
libmapnik3.0_3.0.12+ds-3_amd64.deb
8ee65426354b268fba14c0a798bae4f0 2136812 doc optional
mapnik-doc_3.0.12+ds-3_all.deb
7961d7b8b0f85a9d04727d08e020a24e 228404 utils optional
mapnik-utils_3.0.12+ds-3_amd64.deb
25643a53cb4ca90509cf1540af455536 13292 libs optional
mapnik_3.0.12+ds-3_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=POK9
-----END PGP SIGNATURE-----
--- End Message ---
_______________________________________________
Pkg-grass-devel mailing list
Pkg-grass-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-grass-devel