Your message dated Mon, 15 Jul 2019 13:34:05 +0000
with message-id <[email protected]>
and subject line Bug#763180: fixed in ahcpd 0.53-3
has caused the Debian Bug report #763180,
regarding Hardening options incomplete: missing CFLAGS
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
763180: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=763180
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: ahcpd
Version: 0.53-2
Severity: normal
Tags: patch
User: [email protected]
Usertags: goal-hardening
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Hello,
The upstream Makefile overwrite CFLAGS variable exported by
dpkg-buildflags (which is "-g -O2 -fstack-protector-strong -Wformat
- -Werror=format-security").
Please find attached a patch that fix that.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=5do+
-----END PGP SIGNATURE-----
diff -Nru ahcpd-0.53/debian/changelog ahcpd-0.53/debian/changelog
--- ahcpd-0.53/debian/changelog 2013-05-26 21:11:53.000000000 +0200
+++ ahcpd-0.53/debian/changelog 2014-09-28 15:08:19.000000000 +0200
@@ -1,3 +1,10 @@
+ahcpd (0.53-2.1) unstable; urgency=medium
+
+ * Non-maintainer upload.
+ * Patch upstream Makefile to not overwrite dpkg-buildflags CFLAGS
+
+ -- Guillaume Delacour <[email protected]> Sun, 28 Sep 2014 15:02:21 +0200
+
ahcpd (0.53-2) unstable; urgency=low
* Add logrotate support
diff -Nru ahcpd-0.53/debian/patches/01_dont_overwrite_cflags.diff ahcpd-0.53/debian/patches/01_dont_overwrite_cflags.diff
--- ahcpd-0.53/debian/patches/01_dont_overwrite_cflags.diff 1970-01-01 01:00:00.000000000 +0100
+++ ahcpd-0.53/debian/patches/01_dont_overwrite_cflags.diff 2014-09-28 15:05:30.000000000 +0200
@@ -0,0 +1,17 @@
+Author Guillaume Delacour <[email protected]>
+Description: Don't overwrite dpkg-buildflags CFLAGS
+Last-Update: 2014-09-28
+
+Index: ahcpd-0.53/Makefile
+===================================================================
+--- ahcpd-0.53.orig/Makefile
++++ ahcpd-0.53/Makefile
+@@ -4,7 +4,7 @@ CDEBUGFLAGS = -Os -g -Wall
+
+ DEFINES = $(PLATFORM_DEFINES)
+
+-CFLAGS = $(CDEBUGFLAGS) $(DEFINES) $(EXTRA_DEFINES)
++CFLAGS += $(CDEBUGFLAGS) $(DEFINES) $(EXTRA_DEFINES)
+
+ SRCS = ahcpd.c monotonic.c transport.c prefix.c configure.c config.c lease.c
+
diff -Nru ahcpd-0.53/debian/patches/series ahcpd-0.53/debian/patches/series
--- ahcpd-0.53/debian/patches/series 1970-01-01 01:00:00.000000000 +0100
+++ ahcpd-0.53/debian/patches/series 2014-09-28 15:06:39.000000000 +0200
@@ -0,0 +1 @@
+01_dont_overwrite_cflags.diff
--- End Message ---
--- Begin Message ---
Source: ahcpd
Source-Version: 0.53-3
We believe that the bug you reported is fixed in the latest version of
ahcpd, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Stéphane Glondu <[email protected]> (supplier of updated ahcpd package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 15 Jul 2019 15:14:13 +0200
Source: ahcpd
Architecture: source
Version: 0.53-3
Distribution: unstable
Urgency: medium
Maintainer: Stéphane Glondu <[email protected]>
Changed-By: Stéphane Glondu <[email protected]>
Closes: 763180
Changes:
ahcpd (0.53-3) unstable; urgency=medium
.
[ Stéphane Glondu ]
* Update Vcs-*
* Update links to upstream sources
* Bump debhelper compat level to 12
* Bump Standards-Version to 4.4.0
.
[ Guillaume Delacour ]
* Patch upstream Makefile to not overwrite dpkg-buildflags CFLAGS
(Closes: #763180)
Checksums-Sha1:
90958ea75889515bfe75e7887720cb7c439eddb6 1544 ahcpd_0.53-3.dsc
31760c4d1a2cec659e340a59daafabfab5d811d2 5012 ahcpd_0.53-3.debian.tar.xz
Checksums-Sha256:
068d387443debd57a86865f3d7204aecfae3b633fae3c5a9dd8e320b36fd1b58 1544
ahcpd_0.53-3.dsc
8228fe7a88cf4dad5d7bde245d6a908ddc292bbfce849f5eea45bde791a1c5f9 5012
ahcpd_0.53-3.debian.tar.xz
Files:
e640f6867f4c94c2383212d0367b92e0 1544 net optional ahcpd_0.53-3.dsc
0769b620de15890fde85b55125d383b5 5012 net optional ahcpd_0.53-3.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
iQEzBAEBCgAdFiEEbeJOl+yohsxW5iUOIbju8bGJMIEFAl0sfjEACgkQIbju8bGJ
MIEQ1Qf9F7t58F2KhOLZzABi0oawBgRslO9QMZtDn9dn53qZJTKB0Cf6QisSeOwB
BXe/sm1vP60qp+jzdCXOECndmqCU9SjXlbD9urh5uUhgCdYncRzqM/nh6BS+pkEJ
weGxAo74LbyNOKwdXCfc/xiCLBxNzEwPYuiULuTlInHcMtZE1D36cEqHtIkOAHJF
wjRZ+RgLgPuEWpVgMmRynHd0jB0/EAti5kGRHmubl2brcMiWDIg+18rLtdK12vgZ
0lI77DkJQT7u9hiPajtqvV2DMi5peeEvlRsGES7weB7D6tFaQ4Wo8t2GN6Zd9VuX
xpLkarclwxmgM3TH31XYUaM/fLj/jQ==
=ko+p
-----END PGP SIGNATURE-----
--- End Message ---