gnutls28 requires write and executable bits

[Julian Andres Klode]

On i386, systemd-resolved fails to start with

/lib/systemd/systemd-resolved: error while loading shared libraries: /lib/i386-linux-gnu/libgnutls.so.30: cannot make segment writable for relocation:

due to the option MemoryDenyWriteExecute=yes. This only happens after upgrading to the new gnutls28 (3.6.9).

[Julian Andres Klode (juliank)]

This is breaking autopkgtests with all-proposed as well as any autopkgtest for package names starting with linux

[Julian Andres Klode (juliank)]

As a workaround to get autopkgtest going again, I deleted all i386 tests triggered by this package, and the following ones:

2019-08-07 16:20:43,093 - queue item: b'slepc4py {"all-proposed": "1", "requester": "costamagnagianfranco", "triggers": ["petsc4py/3.11.0-2"]}' (deleting)
2019-08-07 16:20:43,094 - queue item: b'pacemaker {"all-proposed": "1", "requester": "ahasenack", "triggers": ["pacemaker/2.0.1-4ubuntu2"]}' (deleting)
2019-08-07 16:20:43,095 - queue item: b'petsc {"all-proposed": "1", "requester": "costamagnagianfranco", "triggers": ["petsc/3.11.3+dfsg1-2"]}' (deleting)
2019-08-07 16:20:43,096 - queue item: b'ocaml-visitors {"all-proposed": "1", "requester": "costamagnagianfranco", "triggers": ["findlib/1.8.1-1"]}' (deleting)
2019-08-07 16:20:43,097 - queue item: b'fig2dev {"all-proposed": "1", "requester": "costamagnagianfranco", "triggers": ["texlive-base/2019.20190710-1"]}' (deleting)
2019-08-07 16:20:43,098 - queue item: b'sagetex {"all-proposed": "1", "requester": "costamagnagianfranco", "triggers": ["tex-common/6.12", "graphicsmagick/1.4+really1.3.33-1", "texlive-base/2019.20190710-1", "texlive-extra/2019.20190710-1"]}' (deleting)
2019-08-07 16:20:43,126 - queue item: b'pacemaker {"all-proposed": "1", "requester": "ahasenack", "triggers": ["pacemaker/2.0.1-4ubuntu2"]}' (deleting)
2019-08-07 16:20:43,130 - queue item: b'petsc {"all-proposed": "1", "requester": "costamagnagianfranco", "triggers": ["petsc/3.11.3+dfsg1-2"]}' (deleting)
2019-08-07 16:20:43,130 - queue item: b'firewalld {"all-proposed": "1", "requester": "costamagnagianfranco", "triggers": ["firewalld/0.7.1-1ubuntu3"]}' (deleting)
2019-08-07 16:20:43,131 - queue item: b'libvirt {"all-proposed": "1", "requester": "costamagnagianfranco", "triggers": ["firewalld/0.7.1-1ubuntu3", "systemd/243~rc1-0ubuntu1", "debconf/1.5.73", "gnutls28/3.6.9-3"]}' (deleting)
2019-08-07 16:20:43,132 - queue item: b'plinth {"all-proposed": "1", "requester": "costamagnagianfranco", "triggers": ["firewalld/0.7.1-1ubuntu3", "python-apt/1.9.0ubuntu1", "pyyaml/5.1.2-1", "debconf/1.5.73", "openssh/1:8.0p1-4"]}' (deleting)
2019-08-07 16:20:43,133 - queue item: b'firewalld {"all-proposed": "1", "requester": "costamagnagianfranco", "triggers": ["nftables/0.9.1-2ubuntu2"]}' (deleting)
2019-08-07 16:20:43,138 - queue item: b'burp {"all-proposed": "1", "requester": "vorlon", "triggers": ["librsync/2.0.2-1"]}' (deleting)
2019-08-07 16:20:43,212 - queue item: b'petsc {"all-proposed": "1", "requester": "costamagnagianfranco", "triggers": ["petsc/3.11.3+dfsg1-2"]}' (deleting)
2019-08-07 16:20:43,242 - queue item: b'morsmall {"all-proposed": "1", "requester": "costamagnagianfranco", "triggers": ["findlib/1.8.1-1"]}' (deleting)
2019-08-07 16:20:43,243 - queue item: b'morbig {"all-proposed": "1", "requester": "costamagnagianfranco", "triggers": ["findlib/1.8.1-1"]}' (deleting)
2019-08-07 16:20:43,244 - queue item: b'ocaml-visitors {"all-proposed": "1", "requester": "costamagnagianfranco", "triggers": ["findlib/1.8.1-1"]}' (deleting)
2019-08-07 16:20:43,245 - queue item: b'ppx-deriving {"all-proposed": "1", "requester": "costamagnagianfranco", "triggers": ["findlib/1.8.1-1"]}' (deleting)
2019-08-07 16:20:43,2...

[Steve Langasek (vorlon)]

I managed to not include the bug ref in the changelog, but this is uploaded to eoan-proposed now, and since the problem never made it past eoan-proposed (since, well, it crashed all the autopkgtests), I think we can consider this closed.
Changelog:

gnutls28 (3.6.9-3ubuntu1) eoan; urgency=medium

  * debian/patches/i386-fix-wrong-reloc.patch: fix relocation problem on
    i386.