Your message dated Fri, 22 Jun 2012 12:33:25 +0000
with message-id <[email protected]>
and subject line Bug#653852: fixed in groff 1.21-8
has caused the Debian Bug report #653852,
regarding Please enabled hardened build flags
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
653852: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=653852
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: groff
Version: 1.21-6
Severity: important
Tags: patch
Please enabled hardened build flags through dpkg-buildflags.
Patch attached. (dpkg-buildflags abides "noopt" from DEB_BUILD_OPTIONS)
Cheers,
Moritz
diff -aur groff-1.21.orig/debian/rules groff-1.21/debian/rules
--- groff-1.21.orig/debian/rules 2011-01-11 04:37:31.000000000 +0100
+++ groff-1.21/debian/rules 2011-12-31 15:42:56.000000000 +0100
@@ -6,11 +6,12 @@
CC = gcc
CXX = g++
-ifeq (,$(filter noopt,$(DEB_BUILD_OPTIONS)))
-CFLAGS = -O2 -g -Wall
-else
-CFLAGS = -g -Wall
-endif
+
+CFLAGS = `dpkg-buildflags --get CFLAGS`
+CFLAGS += -Wall
+LDFLAGS = `dpkg-buildflags --get LDFLAGS`
+CXXFLAGS = `dpkg-buildflags --get CXXFLAGS`
+CPPFLAGS = `dpkg-buildflags --get CPPFLAGS`
# From Makefile.in
version = $(shell cat VERSION)
@@ -33,7 +34,7 @@
override_dh_auto_configure:
-rm -f config.log config.cache
- CC="$(CC)" CXX="$(CXX)" CFLAGS="$(CFLAGS)" CXXFLAGS="$(CFLAGS)" \
+ CC="$(CC)" CXX="$(CXX)" CFLAGS="$(CFLAGS)" CXXFLAGS="$(CFLAGS)" CPPFLAGS="$(CPPFLAGS)" LDFLAGS="$(LDFLAGS)" \
YACC='bison -y' PSPRINT=lpr PAGE=A4 \
dh_auto_configure -- $(confflags) \
--with-appresdir=/etc/X11/app-defaults
Nur in groff-1.21/debian: rules~.
--- End Message ---
--- Begin Message ---
Source: groff
Source-Version: 1.21-8
We believe that the bug you reported is fixed in the latest version of
groff, which is due to be installed in the Debian FTP archive:
groff-base_1.21-8_i386.deb
to main/g/groff/groff-base_1.21-8_i386.deb
groff_1.21-8.debian.tar.gz
to main/g/groff/groff_1.21-8.debian.tar.gz
groff_1.21-8.dsc
to main/g/groff/groff_1.21-8.dsc
groff_1.21-8_i386.deb
to main/g/groff/groff_1.21-8_i386.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Colin Watson <[email protected]> (supplier of updated groff package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 22 Jun 2012 13:11:24 +0100
Source: groff
Binary: groff-base groff
Architecture: source i386
Version: 1.21-8
Distribution: unstable
Urgency: low
Maintainer: Colin Watson <[email protected]>
Changed-By: Colin Watson <[email protected]>
Description:
groff - GNU troff text-formatting system
groff-base - GNU troff text-formatting system (base system components)
Closes: 611904 653852
Changes:
groff (1.21-8) unstable; urgency=low
.
* Use dpkg-buildflags to enable hardening options (based on a patch from
Moritz Muehlenhoff; closes: #653852).
* Adjust paths in groff_mom(7) (closes: #611904).
Checksums-Sha1:
4f35dd300c3ef61c039d5d9cd0b0efb390cde600 2070 groff_1.21-8.dsc
37d55064ab2bf50b76754a44284b3ec1b5c0284f 39183 groff_1.21-8.debian.tar.gz
9b830a41aabe6037c179b2e153adc723ea437b25 1130928 groff-base_1.21-8_i386.deb
e401f24136679f52678bb6cf059c1e61d57e1dde 3563290 groff_1.21-8_i386.deb
Checksums-Sha256:
1e90666682837f7e4a62f53f334976df68e5e8c7e901bf99d9fe3186771d0979 2070
groff_1.21-8.dsc
4a07c0a60db4fd7971558ea613adb67546a448acafc7f6d8ce5e2cbb8dc50956 39183
groff_1.21-8.debian.tar.gz
45d81eeecdd6fd7665a0ee8eaa2439ee7f7dd23b8f6a4fd0296779c5912e406f 1130928
groff-base_1.21-8_i386.deb
0011ccd2850c6e95b2edf1101cc68c26b9a0ee3eee3c93fb4ba7d679cefaf11c 3563290
groff_1.21-8_i386.deb
Files:
86c685e4896d6b5c679720200585bb8f 2070 text important groff_1.21-8.dsc
e2177a0014d02dc6412b83f0c42dddfd 39183 text important
groff_1.21-8.debian.tar.gz
3c021b8c9d0be77edc33f621573445a8 1130928 text important
groff-base_1.21-8_i386.deb
cd73e866c043f02227be20ad3d226262 3563290 text optional groff_1.21-8_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Colin Watson <[email protected]> -- Debian developer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=MdG3
-----END PGP SIGNATURE-----
--- End Message ---
