Bug 1008395

Summary: no hardened build
Product: [Fedora] Fedora Reporter: Harald Reindl <h.reindl>
Component: avahiAssignee: Rex Dieter <rdieter>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 19CC: lpoetter, rdieter, stefw
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: avahi-0.6.31-18.fc20 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-09-23 00:47:19 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Harald Reindl 2013-09-16 10:07:49 UTC
avahi-daemon Partial RELRO     Canary found           NX enabled    No PIE
https://fedoraproject.org/wiki/Packaging:Guidelines?rd=Packaging/Guidelines#PIE

If your package meets any of the following criteria you 
MUST  enable the PIE compiler flags:
 * Your package is long running
 * Your package runs as root

since there is no way to disable avahi without get the syslog messed up all day long it should at least respect the packaging guidelines

Comment 1 Fedora Update System 2013-09-19 19:53:20 UTC
avahi-0.6.31-16.fc20 has been submitted as an update for Fedora 20.
https://admin.fedoraproject.org/updates/avahi-0.6.31-16.fc20

Comment 2 Fedora Update System 2013-09-20 18:56:40 UTC
Package avahi-0.6.31-16.fc20:
* should fix your issue,
* was pushed to the Fedora 20 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing avahi-0.6.31-16.fc20'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2013-17264/avahi-0.6.31-16.fc20
then log in and leave karma (feedback).

Comment 3 Fedora Update System 2013-09-21 19:40:53 UTC
Package avahi-0.6.31-18.fc20:
* should fix your issue,
* was pushed to the Fedora 20 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing avahi-0.6.31-18.fc20'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2013-17264/avahi-0.6.31-18.fc20
then log in and leave karma (feedback).

Comment 4 Harald Reindl 2013-09-21 19:44:06 UTC
F19 builds are on topic because there is a drop-down with the fedora version and if it doe snot matter maybe someone should remove it completly from bugzilla - this fact makes me angry over years 

if i submit a bugreport and select a specific Fedora version there is a high chance that i am running exactly this one and i can hardly confrim whatever fix with packages for a different release 

so dear maintainers: learn to fix bugs in the reported release and *after* they are confirmed build packages fro other ones

Comment 5 Fedora Update System 2013-09-23 00:47:19 UTC
avahi-0.6.31-18.fc20 has been pushed to the Fedora 20 stable repository.  If problems still persist, please make note of it in this bug report.