Your message dated Wed, 02 Dec 2015 00:36:06 +0000 with message-id <[email protected]> and subject line Bug#656004: fixed in netrik 1.16.1-2 has caused the Debian Bug report #656004, regarding Please enabled hardened build flags to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 656004: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=656004 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Package: netrik Version: 1.16.1-1 Severity: important Tags: patch Please enabled hardened build flags through dpkg-buildflags. Patch attached. (dpkg-buildflags abides "noopt" from DEB_BUILD_OPTIONS) Cheers, Moritzdiff -aur netrik-1.16.1.orig/debian/rules netrik-1.16.1/debian/rules --- netrik-1.16.1.orig/debian/rules 2012-01-15 21:27:04.000000000 +0100 +++ netrik-1.16.1/debian/rules 2012-01-15 21:27:48.000000000 +0100 @@ -11,13 +11,11 @@ DEB_BUILD_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE) DESTDIR=$(CURDIR)/debian/netrik -CFLAGS = -Wall -g +CFLAGS = `dpkg-buildflags --get CFLAGS` +CFLAGS += -Wall +LDFLAGS = `dpkg-buildflags --get LDFLAGS` +CPPFLAGS = `dpkg-buildflags --get CPPFLAGS` -ifneq (,$(findstring noopt,$(DEB_BUILD_OPTIONS))) - CFLAGS += -O0 -else - CFLAGS += -O2 -endif ifeq (,$(findstring nostrip,$(DEB_BUILD_OPTIONS))) INSTALL_PROGRAM += -s endif @@ -33,7 +31,7 @@ config.status: configure dh_testdir # Add here commands to configure the package. - ./configure --host=$(DEB_HOST_GNU_TYPE) --build=$(DEB_BUILD_GNU_TYPE) --prefix=/usr --mandir=\$${prefix}/share/man --infodir=\$${prefix}/share/info + ./configure CFLAGS="$(CFLAGS)" CPPFLAGS="$(CPPFLAGS)" LDFLAGS="$(LDFLAGS)" --host=$(DEB_HOST_GNU_TYPE) --build=$(DEB_BUILD_GNU_TYPE) --prefix=/usr --mandir=\$${prefix}/share/man --infodir=\$${prefix}/share/info build: build-stamp Nur in netrik-1.16.1/debian: rules~.
--- End Message ---
--- Begin Message ---Source: netrik Source-Version: 1.16.1-2 We believe that the bug you reported is fixed in the latest version of netrik, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [email protected], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Axel Beckert <[email protected]> (supplier of updated netrik package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 02 Dec 2015 00:31:56 +0100 Source: netrik Binary: netrik Architecture: source amd64 Version: 1.16.1-2 Distribution: unstable Urgency: medium Maintainer: Debian QA Group <[email protected]> Changed-By: Axel Beckert <[email protected]> Description: netrik - text mode WWW browser with vi like keybindings Closes: 656004 Changes: netrik (1.16.1-2) unstable; urgency=medium . * QA upload. (See #770237) + Set Maintainer to QA group * Add collab-maint git repository and according Vcs-* headers. * Apply wrap-and-sort. * Convert to source format "3.0 (quilt)". + Fix AUTHORS.patch to properly convert file to UTF-8. * Bump debhelper compatibility to 9 as recommended. + Update versioned build-dependency on debhelper accordingly. * Rewrite debian/rules with dh v7 style and dh-autoreconf + Replace build-dependency on automake with dh-autoreconf + Remove debian/Makefile.* and patch out "SUBDIRS = debian" + No more delete files from orig.tar.gz in clean target. + Use dh_auto_{configure,build,install,clean} * Remove no more needed lintian override. * Rename all debian/netrik.… files to debian/… for consistency. * Declare compliance with Debian Policy 3.9.6. * Don't install test suite into binary package. (Also fixes lintian warning package-contains-timestamped-gzip.) * Install NEWS as upstream changelog instead just as documentation. * Fix lintian warning copyright-refers-to-symlink-license. * Apply configure.ac patch by Simon Ruderich to properly pass hardening flags. (Closes: #656004) * Add patch to fix spelling errors found by lintian. * Convert debian/copyright to machine-readable DEP-3 format. * Update long package description: + Add asterisks in front of list items. + Remove upstream author name (that's what debian/copyright is for) + Mention that there's neither HTTPS nor IPv6 support. Checksums-Sha1: 0d801f5cbbfe055c662dfdd3e6d7d6911c4da7f0 1855 netrik_1.16.1-2.dsc 8108d4a7cd0490f0b7e8273fe8fee6de643a9a38 11012 netrik_1.16.1-2.debian.tar.xz f75c309a111e7bda90965f39ce1d4bd8bc23add4 242962 netrik_1.16.1-2_amd64.deb Checksums-Sha256: 6b213ccceefa1b9738156417e2664e2268fa844d3bd784b08bc07de2a45c3d93 1855 netrik_1.16.1-2.dsc d2e05d9fbb63b4d69b3167d8ddd8395d86cb1be915257f2c41c4c8d6a297c126 11012 netrik_1.16.1-2.debian.tar.xz 241407ee1636eae34f4ef7262304d3f0eb64d568e6044dbb043b0ce41e313a5f 242962 netrik_1.16.1-2_amd64.deb Files: 504f188eb69477b1009fa7be8aac303f 1855 web optional netrik_1.16.1-2.dsc 328161271c1f1f59545e31d5dc343158 11012 web optional netrik_1.16.1-2.debian.tar.xz 699c34f642133540e24d9e8cc7627a8e 242962 web optional netrik_1.16.1-2_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJWXjUPAAoJEGvmY8daNcl1GVkQALBw/4llBnrwcCAvHL+laHOO jlLryIFYsEP5b3XG6FVSQrirWQiJmwotKFu6nYjNtn42wO7uKrHfMO2rzLvAUmyt mc2G3Xh4iB1co3NvYzHo6GrubpCCzLo0bINlVd/9vbe6kWStbWlgKTVHltswShWf R/qugrdpNobMSojF+A7lOtbSHPtRoelYoTiXVGOMurHiG2i9xjjJkjAL3ROMdOi1 JJRTAx9Dupr1sJR9FAihZLp9xW5rygGouMGEfVn13MVlSm9wAgYPCGZ7E2D/zVCw +NFNckxAyeMAExzj2lsUsfUvcFJzVZnbN8aP4pwTdEbZcoeqKYImCFvoToLlFhyA aJE+rNyI4N8PQ8l9DlG9/LVebvfthhqUohxPkjb8+ltHkLM8vDmy14cIPgIikZ+h EguVILTmnNhhKVIpQ9tbiCMEYt2xuuj+zH8w1bMIi3X8RXaQksnYWnxsgN7gzZgD NOYNsW7EHDZX2/kl02P2tzRqw/KWiNfoERwBbeBhHHzqsK1+Y5jEEaFYFqB0bDhQ enPXfVmgsRop4mOeVPmbY9tkXlPbwuCh0/pOzvFKqln/r/3ryDdZfMJn3CCKcHhr eWNSlYFYG3EPlRKzT8b36UgLrK6TLgg8yGuO5ptSCUUwWIuXOyNGi/MVe3sAdpDW HHKHXJOJZxZy4PhY8wzU =nNv4 -----END PGP SIGNATURE-----
--- End Message ---
