Your message dated Sun, 29 Jan 2012 22:02:59 +0000
with message-id <[email protected]>
and subject line Bug#655118: fixed in emacs23 23.3+1-5
has caused the Debian Bug report #655118,
regarding Please enabled hardened build flags
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
655118: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=655118
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: emacs23
Version: 23.3+1-4
Severity: important
Tags: patch
Hi Rob,
Please enabled hardened build flags through dpkg-buildflags.
Patch attached. (dpkg-buildflags abides "noopt" from DEB_BUILD_OPTIONS)
Cheers,
Moritz
diff -aur emacs23-23.3+1.orig/debian/rules emacs23-23.3+1/debian/rules
--- emacs23-23.3+1.orig/debian/rules 2011-10-26 02:56:01.000000000 +0200
+++ emacs23-23.3+1/debian/rules 2012-01-08 17:15:27.000000000 +0100
@@ -168,12 +168,16 @@
deb_host_multiarch := $(shell dpkg-architecture -qDEB_HOST_MULTIARCH)
-LDFLAGS := -g
-CFLAGS := -DDEBIAN -g
+CFLAGS = `dpkg-buildflags --get CFLAGS`
+CFLAGS += -Wall
+LDFLAGS = `dpkg-buildflags --get LDFLAGS`
+CPPFLAGS = `dpkg-buildflags --get CPPFLAGS`
-ifneq (,$(findstring noopt,$(DEB_BUILD_OPTIONS)))
- CFLAGS += -O0
-else # not noopt
+
+LDFLAGS += -g
+CFLAGS += -DDEBIAN
+
+ifeq (,$(findstring noopt,$(DEB_BUILD_OPTIONS)))
ifneq (,$(filter $(DEB_HOST_ARCH),m68k ia64))
# Fix a problem with newer versions of gcc on m68k and ia64.
# There -O2 causes a build failure (broken byte compiler) - see
@@ -463,13 +467,13 @@
rm -rf $(1)
mkdir $(1)
cp -a $$(ls -A | grep -v '^debian$$' | grep -v '^.pc$$') "$(1)"
- cd $(1) && CFLAGS="$(CFLAGS)" ./configure $(confflags) $(2)
+ cd $(1) && CFLAGS="$(CFLAGS)" CPPFLAGS="$(CPPFLAGS)" ./configure $(confflags) $(2)
endef
define build_cmd
- $(MAKE) -C $(1) -j $(joblimit) CFLAGS="$(CFLAGS)" LDFLAGS="$(LDFLAGS)"
+ $(MAKE) -C $(1) -j $(joblimit) CFLAGS="$(CFLAGS)" CPPFLAGS="$(CPPFLAGS)" LDFLAGS="$(LDFLAGS)"
# If we don't use bootstrap, we need to explicitly build info.
- $(MAKE) -C $(1) -j $(joblimit) CFLAGS="$(CFLAGS)" LDFLAGS="$(LDFLAGS)" info
+ $(MAKE) -C $(1) -j $(joblimit) CFLAGS="$(CFLAGS)" CPPFLAGS="$(CPPFLAGS)" LDFLAGS="$(LDFLAGS)" info
endef
override_dh_auto_configure: debian/setup-stamp
Nur in emacs23-23.3+1/debian: rules~.
--- End Message ---
--- Begin Message ---
Source: emacs23
Source-Version: 23.3+1-5
We believe that the bug you reported is fixed in the latest version of
emacs23, which is due to be installed in the Debian FTP archive:
emacs23-bin-common_23.3+1-5_amd64.deb
to main/e/emacs23/emacs23-bin-common_23.3+1-5_amd64.deb
emacs23-common_23.3+1-5_all.deb
to main/e/emacs23/emacs23-common_23.3+1-5_all.deb
emacs23-el_23.3+1-5_all.deb
to main/e/emacs23/emacs23-el_23.3+1-5_all.deb
emacs23-lucid_23.3+1-5_amd64.deb
to main/e/emacs23/emacs23-lucid_23.3+1-5_amd64.deb
emacs23-nox_23.3+1-5_amd64.deb
to main/e/emacs23/emacs23-nox_23.3+1-5_amd64.deb
emacs23_23.3+1-5.debian.tar.gz
to main/e/emacs23/emacs23_23.3+1-5.debian.tar.gz
emacs23_23.3+1-5.dsc
to main/e/emacs23/emacs23_23.3+1-5.dsc
emacs23_23.3+1-5_amd64.deb
to main/e/emacs23/emacs23_23.3+1-5_amd64.deb
emacs_23.3+1-5_all.deb
to main/e/emacs23/emacs_23.3+1-5_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Rob Browning <[email protected]> (supplier of updated emacs23 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Sun, 29 Jan 2012 14:06:03 -0600
Source: emacs23
Binary: emacs emacs23-lucid emacs23-nox emacs23 emacs23-bin-common
emacs23-common emacs23-el
Architecture: source all amd64
Version: 23.3+1-5
Distribution: unstable
Urgency: high
Maintainer: Rob Browning <[email protected]>
Changed-By: Rob Browning <[email protected]>
Description:
emacs - The GNU Emacs editor (metapackage)
emacs23 - The GNU Emacs editor (with GTK+ user interface)
emacs23-bin-common - The GNU Emacs editor's shared, architecture dependent
files
emacs23-common - The GNU Emacs editor's shared, architecture independent
infrastru
emacs23-el - GNU Emacs LISP (.el) files
emacs23-lucid - The GNU Emacs editor
emacs23-nox - The GNU Emacs editor (without X support)
Closes: 632142 634336 650976 655118 655299
Changes:
emacs23 (23.3+1-5) unstable; urgency=high
.
* Add 0017-Define-POSIX_SIGNALS-for-GNU-Hurd.patch. Thanks to
Samuel Thibault <[email protected]> for the report and the
patch. (Closes: #650976)
.
* Add 0018-Don-t-let-CEDET-execute-code-from-an-arbitrary-Proje.patch.
Don't execute arbitrary elisp code from any file named Project.ede
in or above a CEDET-related directory (CVE-2012-0035). Thanks to
Florian Weimer <[email protected]> for the report.
(Closes: #655299)
.
* Add 0019-Add-a-printf-attribute-to-movemail.c-to-allow-harden.patch.
Use varargs in movemail.c error() and add a printf attribute to
support hardened build flags.
.
* Add debian/rules support for hardened build flags. Thanks to
Moritz Muehlenhoff <[email protected]> for the report and the
patch. (Closes: #655118)
.
* Add conflict with cedet, eieio, and speedbar. Don't allow the
older standalone packages to remain installed since they break
emacs23, emacs23 includes them, and they're no longer in
unstable/testing. Thanks to Ivan Vilata i Balaguer
<[email protected]> for the report. (Closes: #632142)
.
* Change negated build-dep [!hurd-i386...] to [linux-any]. Thanks
to Robert Millan <[email protected]> for the report.
(Closes: #634336)
Checksums-Sha1:
8393cc4d1b6c115d9809c3b51934d727b3b749b5 1817 emacs23_23.3+1-5.dsc
592c7ec1aa657ece9b60483cc379194e6bc594b9 60360 emacs23_23.3+1-5.debian.tar.gz
a0170b9cf234e29feebb9fa6fb8c58619d17905f 90588 emacs_23.3+1-5_all.deb
f33d6c42b430ab6e5b8deb9ce7aca5b8105589c2 3425922
emacs23-lucid_23.3+1-5_amd64.deb
cc2c104800dbedd80ad3e8025d6b58d5ab969688 3080330 emacs23-nox_23.3+1-5_amd64.deb
11f649845acd1e175d27e22f3602e10d0a0c70ee 3428034 emacs23_23.3+1-5_amd64.deb
6e32165e50317b9ba634d62ec1bfd8d5810efcad 261966
emacs23-bin-common_23.3+1-5_amd64.deb
e4813832fc178e5fac2bcf97d972fdfd2a84c3c2 18599954
emacs23-common_23.3+1-5_all.deb
99242f92440ddc91727327d2335771f64fc5577d 13787702 emacs23-el_23.3+1-5_all.deb
Checksums-Sha256:
399d028956e37e650fdd4f2797d4aed6b1ddf91d4be6d778350307db519f6560 1817
emacs23_23.3+1-5.dsc
cb8bdf1aa61a1282f6aebefc615ff7f23ae15f5d02e034ea64e9e672d54b6d87 60360
emacs23_23.3+1-5.debian.tar.gz
e2a4e6fc3b918a31d4092e98c48e02cb05c604014ba1cbc45cb4c620a557d7da 90588
emacs_23.3+1-5_all.deb
14d887ec1f07cdcbc8f8c90c748c53d93ee37c7996d55f2d21469c23d5e48b2b 3425922
emacs23-lucid_23.3+1-5_amd64.deb
a0bd7212de5d99a2ffd62324db2721a0378b1f1f89acb44326ac7843edae9b83 3080330
emacs23-nox_23.3+1-5_amd64.deb
ed4dc771744a792dd3cb263387961403e7b0755963f98646a6e5227d9a96ccd7 3428034
emacs23_23.3+1-5_amd64.deb
7ac770c2d2125366cae41fcd6dc1ddef57aa9b7e387257cf2dfea3f359037a48 261966
emacs23-bin-common_23.3+1-5_amd64.deb
1b2f647459f68869488627941804eef450c56f70b295095a1fd971ecc1592c5a 18599954
emacs23-common_23.3+1-5_all.deb
afd1d1695a6be879b28a5d5a4f8627633adffb78c6404d1daf08707c738ff89b 13787702
emacs23-el_23.3+1-5_all.deb
Files:
00cc1af0aeaeea45501c4909207e66be 1817 editors optional emacs23_23.3+1-5.dsc
be7ef987272bbad68391708de2ebd688 60360 editors optional
emacs23_23.3+1-5.debian.tar.gz
798bcde9b27fd9468f06cb883c98baff 90588 editors optional emacs_23.3+1-5_all.deb
69491b0dd9285f801e87ab59b107ea64 3425922 editors optional
emacs23-lucid_23.3+1-5_amd64.deb
ac7a3ddad04b4e44a889fe482db42d70 3080330 editors optional
emacs23-nox_23.3+1-5_amd64.deb
34aaf8a90208fcf5162c557a31f9895a 3428034 editors optional
emacs23_23.3+1-5_amd64.deb
cfd32fdf837e37f4441371aeec5121d4 261966 editors optional
emacs23-bin-common_23.3+1-5_amd64.deb
46eb63536225ad16de16f84d4c045635 18599954 editors optional
emacs23-common_23.3+1-5_all.deb
b7be08b47c0f792539ff94deaa4bb050 13787702 editors optional
emacs23-el_23.3+1-5_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
iEYEARECAAYFAk8lvgsACgkQJcjTd4x+c6RxwgCg1wzh1O8J8v5r4y4ilvzei4Zf
fX4AoMLgCrKedYB2GFlKLeW5vRJYKiJ2
=XFB+
-----END PGP SIGNATURE-----
--- End Message ---
