Your message dated Thu, 14 Aug 2014 16:04:35 +0000
with message-id <[email protected]>
and subject line Bug#758069: fixed in grep 2.20-2
has caused the Debian Bug report #758069,
regarding grep: Hardening CPPFLAGS are missing
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
758069: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=758069
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: grep
Version: 2.20-1
Severity: normal
Tags: patch
Hello,
The (hardening) CPPFLAGS are not applied correctly because they
are overwritten in debian/rules. The attached patch fixes the
issue.
Regards
Simon
--
+ privacy is necessary
+ using gnupg http://gnupg.org
+ public key id: 0x92FEFDB7E44C32F9
diff -Nru grep-2.20/debian/rules grep-2.20/debian/rules
--- grep-2.20/debian/rules 2014-08-12 10:03:05.000000000 +0200
+++ grep-2.20/debian/rules 2014-08-14 01:07:02.000000000 +0200
@@ -10,6 +10,8 @@
export DEB_BUILD_MAINT_OPTIONS = hardening=+all
+CPPFLAGS="-DHAVE_DYNAMIC_LIBPCRE"
+
##########################################################################
# I need to investigate why CDBS doesn't export automatically build flags
# needed for hardening. This block should be temporal.
@@ -17,7 +19,7 @@
CFLAGS += -O3
LDFLAGS = `dpkg-buildflags --get LDFLAGS`
LDFLAGS += -Wl,-z,defs
-CPPFLAGS = `dpkg-buildflags --get CPPFLAGS`
+CPPFLAGS += `dpkg-buildflags --get CPPFLAGS`
DEB_CONFIGURE_SCRIPT_ENV += CFLAGS="$(CFLAGS)"
DEB_CONFIGURE_SCRIPT_ENV += LDFLAGS="$(LDFLAGS)"
DEB_CONFIGURE_SCRIPT_ENV += CPPFLAGS="$(CPPFLAGS)"
@@ -28,7 +30,6 @@
DEB_CONFIGURE_EXTRA_FLAGS += --without-included-regex
DEB_CONFIGURE_SCRIPT_ENV += LIBS="-Wl,--no-as-needed -ldl -Wl,--as-needed"
-DEB_CONFIGURE_SCRIPT_ENV += CPPFLAGS="-DHAVE_DYNAMIC_LIBPCRE"
# FIXME: CDBS should include a specific var for this
# (e.g. DEB_CONFIGURE_EXECDIR in autotools-vars.mk)?
signature.asc
Description: Digital signature
--- End Message ---
--- Begin Message ---
Source: grep
Source-Version: 2.20-2
We believe that the bug you reported is fixed in the latest version of
grep, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Santiago Ruano Rincón <[email protected]> (supplier of updated grep package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 14 Aug 2014 17:40:36 +0200
Source: grep
Binary: grep
Architecture: source amd64
Version: 2.20-2
Distribution: unstable
Urgency: low
Maintainer: Anibal Monsalve Salazar <[email protected]>
Changed-By: Santiago Ruano Rincón <[email protected]>
Description:
grep - GNU grep, egrep and fgrep
Closes: 758069
Changes:
grep (2.20-2) unstable; urgency=low
.
* Add 85-412370-F-x-documentation.patch to d/patches/series
* d/rules:
- Correct hardening CPPFLAGS. Thanks to Simon Ruderich.
(Closes: #758069)
- Set DEB_MAKE_CHECK_TARGET = check to run make check after build.
Checksums-Sha1:
ab9c55fcdd848abb054dc7a18235b622defd82bb 1925 grep_2.20-2.dsc
eb86839f39a031a6d46aec1aec90d42c7aa5028f 108970 grep_2.20-2.debian.tar.bz2
3e21e301200b5198f8b7f6a8db9fb35b1be9acae 323566 grep_2.20-2_amd64.deb
Checksums-Sha256:
b69c2f7704faa70524dcad6fbd630cf8aa83f29bece5f2d4bd70582ba294559b 1925
grep_2.20-2.dsc
5c2075597c2d5f31a9c42e168637d3d933ce85197ae051c8ee6e28f24fbf2dce 108970
grep_2.20-2.debian.tar.bz2
d8d035dd0269925d3ae723c3d3fa1869e8563973b8da001874bdd82dd60752d7 323566
grep_2.20-2_amd64.deb
Files:
1c00d8e36ce90b3efca3db2f082eed4d 323566 utils required grep_2.20-2_amd64.deb
18f8d36e2d6d7a5fec7dce8c57e44813 1925 utils required grep_2.20-2.dsc
1bbaa1e838cc4dffa7cc0f6b347a7d25 108970 utils required
grep_2.20-2.debian.tar.bz2
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=ulob
-----END PGP SIGNATURE-----
--- End Message ---