Your message dated Sun, 29 Jul 2012 16:02:13 +0000 with message-id <[email protected]> and subject line Bug#655164: fixed in bzip2 1.0.6-4 has caused the Debian Bug report #655164, regarding Please enabled hardened build flags to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 655164: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=655164 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Package: bzip2 Version: 1.0.6-1 Severity: important Tags: patch Please enabled hardened build flags through dpkg-buildflags. Patch attached. Cheers, Moritzdiff -aur bzip2-1.0.6.orig/debian/rules bzip2-1.0.6/debian/rules --- bzip2-1.0.6.orig/debian/rules 2011-12-04 09:39:46.000000000 +0100 +++ bzip2-1.0.6/debian/rules 2012-01-08 23:54:52.000000000 +0100 @@ -25,11 +25,10 @@ DEBSTRIP=strip endif -DEBCFLAGS:= +DEBCFLAGS:=`dpkg-buildflags --get CFLAGS` +DEBCFLAGS +=`dpkg-buildflags --get CPPFLAGS` WGET=wget -ifneq (,$(findstring debug,$(DEB_BUILD_OPTIONS))) -DEBCFLAGS += -g -endif + ifneq (,$(findstring nostrip,$(DEB_BUILD_OPTIONS))) DEBSTRIP:=: endif Nur in bzip2-1.0.6/debian: rules~. diff -aur bzip2-1.0.6.orig/Makefile bzip2-1.0.6/Makefile --- bzip2-1.0.6.orig/Makefile 2011-12-26 13:38:19.000000000 +0100 +++ bzip2-1.0.6/Makefile 2012-01-08 23:56:06.000000000 +0100 @@ -20,10 +20,10 @@ CC=gcc AR=ar RANLIB=ranlib -LDFLAGS= +LDFLAGS= `dpkg-buildflags --get LDFLAGS` BIGFILES=-D_FILE_OFFSET_BITS=64 -CFLAGS=-Wall -Winline -O2 -g $(BIGFILES) $(DEBCFLAGS) +CFLAGS=-Wall -Winline $(BIGFILES) $(DEBCFLAGS) # Where you want it installed when you do 'make install' PREFIX=/usr/local Nur in bzip2-1.0.6: Makefile~.
--- End Message ---
--- Begin Message ---Source: bzip2 Source-Version: 1.0.6-4 We believe that the bug you reported is fixed in the latest version of bzip2, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [email protected], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Santiago Ruano Rincón <[email protected]> (supplier of updated bzip2 package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Fri, 27 Jul 2012 16:14:34 +0200 Source: bzip2 Binary: libbz2-1.0 libbz2-dev bzip2 lib64bz2-1.0 lib64bz2-dev lib32bz2-1.0 lib32bz2-dev bzip2-doc Architecture: source all i386 Version: 1.0.6-4 Distribution: unstable Urgency: low Maintainer: Anibal Monsalve Salazar <[email protected]> Changed-By: Santiago Ruano Rincón <[email protected]> Description: bzip2 - high-quality block-sorting file compressor - utilities bzip2-doc - high-quality block-sorting file compressor - documentation lib32bz2-1.0 - high-quality block-sorting file compressor library - 32bit runtim lib32bz2-dev - high-quality block-sorting file compressor library - 32bit develo lib64bz2-1.0 - high-quality block-sorting file compressor library - 64bit runtim lib64bz2-dev - high-quality block-sorting file compressor library - 64bit develo libbz2-1.0 - high-quality block-sorting file compressor library - runtime libbz2-dev - high-quality block-sorting file compressor library - development Closes: 655164 Changes: bzip2 (1.0.6-4) unstable; urgency=low . * Updating 30-bzip2-harden.patch, hardening LDFLAGS was missing for libbz2.so. Thanks to Simon Ruderich. Closes: #655164 Checksums-Sha1: f92600e42e74761e436736b70b046d634dc83e53 1751 bzip2_1.0.6-4.dsc 0d18086b0e37fc50c6a70bdc566b69bc6b0a357c 60821 bzip2_1.0.6-4.debian.tar.bz2 cdd1cf43a4ce4e8ef4ade854a4d78923babd0934 306730 bzip2-doc_1.0.6-4_all.deb 4d0645c15264e6fa1f1aa5222d35d1c372a39421 46314 libbz2-1.0_1.0.6-4_i386.deb 5300ce8d3f2ad8693219905b124799ca8881ed82 31604 libbz2-dev_1.0.6-4_i386.deb 88015733dc099742e1f3d527aceb83e4128626b4 49482 bzip2_1.0.6-4_i386.deb e4ec91cb0659026f2cbc8d6a33947f550e17f47b 40716 lib64bz2-1.0_1.0.6-4_i386.deb bc6545867dd6260a2cdb698b3b37b97044f20732 30428 lib64bz2-dev_1.0.6-4_i386.deb Checksums-Sha256: c8899f7143588b46652d603b66b2f51e39b75d7dc4a0a5d0f546c7b15c74280a 1751 bzip2_1.0.6-4.dsc 87cf84fbef058d13c32f065e63caa9c705c9e029e29babb9f8266674ba6814b2 60821 bzip2_1.0.6-4.debian.tar.bz2 293e8cd577f8367420d01a40e0879705b4233a5173a537ed36f4bead430ca734 306730 bzip2-doc_1.0.6-4_all.deb 122e7213f9a6b277356ecceeeb57cb86d19300d588c74f7124e3a8dddfb37881 46314 libbz2-1.0_1.0.6-4_i386.deb 3c5ddfaebec196aed8413b9b430158b6e7b2bf4b9982751df39c8a15af9607b4 31604 libbz2-dev_1.0.6-4_i386.deb e9997aaf028bdff04526736dec5a10c27969c0661e09663ce97b5e749d36e1e4 49482 bzip2_1.0.6-4_i386.deb 82e0c00db0fb63844afd84ec158e3b7f3c2a7198d1b537af685fe2908bdf57eb 40716 lib64bz2-1.0_1.0.6-4_i386.deb 6297d01d78c5f6982fedd83c2b32640bcab364608e2094567e84f997b2d62fe9 30428 lib64bz2-dev_1.0.6-4_i386.deb Files: 869da1b77a5c7c3b25223f8b0d9eccf6 1751 utils important bzip2_1.0.6-4.dsc 155b7a8914cd45302b440e3f4c822906 60821 utils important bzip2_1.0.6-4.debian.tar.bz2 c11f30b1e399862d6932bbb5addcc57c 306730 doc optional bzip2-doc_1.0.6-4_all.deb 6a808c271306fa7db4409baa882cd9ab 46314 libs important libbz2-1.0_1.0.6-4_i386.deb 6c5aede587400c67b866d89bfa487d38 31604 libdevel optional libbz2-dev_1.0.6-4_i386.deb 594214b2469de4e3715397f6e03af03b 49482 utils standard bzip2_1.0.6-4_i386.deb 3fbeaaf06085e393505ddc066b34a2e7 40716 libs optional lib64bz2-1.0_1.0.6-4_i386.deb 27cebcf9d5e7ee35259401be47448e45 30428 libdevel optional lib64bz2-dev_1.0.6-4_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iEYEARECAAYFAlAVWtoACgkQQUuEI2/szeDvBgCePczB/Hnb4exW0gAJn4/09bhA ojMAn1T75DNRU6E2ZATLE92tkbttO4p3 =yauE -----END PGP SIGNATURE-----
--- End Message ---
