[hardening-discuss] Bug#836162: diversions for linkers need an update

Matthias Klose doko at debian.org
Thu Sep 1 15:19:17 UTC 2016


On 01.09.2016 17:17, Moritz Muehlenhoff wrote:
> On Wed, Aug 31, 2016 at 09:00:07AM +0200, Matthias Klose wrote:
>> Package: hardening-wrapper
>> Version: 2.8+nmu2
>> Severity: serious
>> Tags: sid stretch
>>
>> starting with binutils 2.27-6, binutils now ships the triplet prefixed binaries
>> as files instead of symlinks.  hardening-wrapper now has to divert the triplet
>> prefixed binaries.
>>
>> however looking at the upload rate for hardening-wrapper, maybe it's just better
>> to file issues to obsolete the use of hardening-wrapper instead.
> 
> I think we should remove hardening-wrapper for the stretch release? dpkg-buildflags/dh
> are around for a long time now and we're down to about 50 reverse dependencies at
> this point. Plus, lintian marks it as deprecated for quite a while now.
> 
> Kees, what do you think?
> 
> Cheers,
>         Moritz
> 

these are the affected packages:

animals 201207131226-1
array-info 0.16-1
bogl 0.1.18-9
brltty 5.3.1-3
ccd2iso 0.3-4
cdcover 0.9.1-11
cnrun 1.1.14-1.1
diffpdf 2.1.3-1
dns-flood-detector 1.20-2
eflite 0.4.1-6
espeak 1.48.04+dfsg-1
espeakup 1:0.71-19+deb8u1
fractalnow 0.8.1-1
grap 1.44-1
gsmartcontrol 0.8.7-1.1
gtg-trace 0.2-2+dfsg-1
jmagick 6.6.9~20130201-svn99-2
libevocosm 4.0.2-3
libjna-java 4.2.2-1
liblouis 2.6.4-2
libmsn 4.2.1+dfsg-1
libpam-mount 2.14-1.1
libprelude 1.0.0-11.7
libtritonus-java 20070428-11
nagios3 3.5.1.dfsg-2.1
nast 0.2.0-6
opari 1.1+dfsg-4
opari2 1.0.7+dfsg-5
openafs 1.6.18.3-1
otf 1.12.5+dfsg-1
passwordmaker-cli 1.5+dfsg-3
pidgin 2.11.0-1
ploop 1.15-1
postgresql-9.5 9.5.4-1
prelude-manager 1.0.1-5.1
python-utmp 0.8.2
qt-at-spi 0.4.0-4
quisk 3.6.18-2
rtpproxy 1.2.1-2.1
shadow 1:4.2-3.1
siege 4.0.2-1
sonic 0.2.0-3
svox 1.0+git20130326-3
switchsh 0~20070801-3.2
tacacs+ 4.0.4.27a-1
units-filter 3.7-1
vzctl 4.9.4-2
vzquota 3.1-1
wdq2wav 1.0.0-1
witty 3.3.5+dfsg-1
wsjtx 1.1.r3496-3
xpaint 2.9.1.4-3.1
yasr 0.6.9-5



More information about the hardening-discuss mailing list