Bug 1281829

Summary:	Harden all packages: wget should be a position-independent executable
Product:	[Fedora] Fedora	Reporter:	Christian Stadelmann <fedora>
Component:	wget	Assignee:	Tomáš Hozza <thozza>
Status:	CLOSED ERRATA	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	23	CC:	micah, thozza
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	wget-1.17-1.fc23	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2015-11-30 21:20:18 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Christian Stadelmann 2015-11-13 14:29:19 UTC

Description of problem:
According to https://fedoraproject.org/wiki/Changes/Harden_All_Packages all binary executables should be position-independent. wget is not:

$ checksec --file /usr/bin/wget 
RELRO           STACK CANARY      NX            PIE             RPATH      RUNPATH      FILE
Partial RELRO   Canary found      NX enabled    No PIE          No RPATH   No RUNPATH   /usr/bin/wget

Version-Release number of selected component (if applicable):
wget-1.16.3-2.fc23.x86_64

Comment 1 Tomáš Hozza 2015-11-27 10:07:21 UTC

Thanks. I found the issue...

Comment 2 Fedora Update System 2015-11-27 20:49:22 UTC

wget-1.17-1.fc23 has been submitted as an update to Fedora 23. https://bodhi.fedoraproject.org/updates/FEDORA-2015-10f92d4d06

Comment 3 Fedora Update System 2015-11-29 02:23:18 UTC

wget-1.17-1.fc23 has been pushed to the Fedora 23 testing repository. If problems still persist, please make note of it in this bug report.
If you want to test the update, you can install it with
$ su -c 'dnf --enablerepo=updates-testing update wget'
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2015-10f92d4d06

Comment 4 Fedora Update System 2015-11-30 21:20:06 UTC

wget-1.17-1.fc23 has been pushed to the Fedora 23 stable repository. If problems still persist, please make note of it in this bug report.