Package: sed Version: 4.2.1-9 Severity: important Tags: patch Please enable hardened build flags through dpkg-buildflags.
Patch attached. Cheers, Moritz
diff -aur sed-4.2.1.orig/debian/rules sed-4.2.1/debian/rules --- sed-4.2.1.orig/debian/rules 2011-02-11 22:57:03.000000000 +0100 +++ sed-4.2.1/debian/rules 2011-12-30 15:38:16.000000000 +0100 @@ -11,18 +11,17 @@ CONFARGS = --host=$(DEB_HOST_GNU_TYPE) endif -CFLAGS = -Wall -g +CFLAGS = `dpkg-buildflags --get CFLAGS` +CFLAGS += -Wall +LDFLAGS = `dpkg-buildflags --get LDFLAGS` +CPPFLAGS = `dpkg-buildflags --get CPPFLAGS` + INSTALL = install INSTALL_FILE = $(INSTALL) -p -o root -g root -m 644 INSTALL_PROGRAM = $(INSTALL) -p -o root -g root -m 755 INSTALL_SCRIPT = $(INSTALL) -p -o root -g root -m 755 INSTALL_DIR = $(INSTALL) -p -d -o root -g root -m 755 -ifneq (,$(findstring noopt,$(DEB_BUILD_OPTIONS))) -CFLAGS += -O0 -else -CFLAGS += -O2 -endif ifeq (,$(findstring nostrip,$(DEB_BUILD_OPTIONS))) INSTALL_PROGRAM += -s endif @@ -44,7 +43,7 @@ test ! -f Makefile || $(MAKE) distclean Makefile: Makefile.in - CFLAGS="$(CFLAGS)" ./configure --prefix=/usr \ + CFLAGS="$(CFLAGS)" CPPFLAGS="$(CPPFLAGS)" LDFLAGS="$(LDFLAGS)" ./configure --prefix=/usr \ --exec-prefix=/ \ --datadir=/usr/share \ --mandir=/usr/share/man \ Nur in sed-4.2.1/debian: rules~.