Package: release.debian.org
Severity: normal
User: release.debian....@packages.debian.org
Usertags: unblock
Please unblock package libhdf4
It fixes #859413 by enabling the PIE hardening buildflags.
unblock libhdf4/4.2.12-2
Kind Regards,
Bas
diff -Nru libhdf4-4.2.12/debian/changelog libhdf4-4.2.12/debian/changelog
--- libhdf4-4.2.12/debian/changelog 2016-07-06 17:35:44.000000000 +0200
+++ libhdf4-4.2.12/debian/changelog 2017-04-03 14:28:06.000000000 +0200
@@ -1,3 +1,12 @@
+libhdf4 (4.2.12-2) unstable; urgency=medium
+
+ * Team upload.
+ * Enable PIE hardening flags.
+ (closes: #859413)
+ * Drop unused lintian overrides for hardening-no-pie.
+
+ -- Bas Couwenberg <sebas...@debian.org> Mon, 03 Apr 2017 14:28:06 +0200
+
libhdf4 (4.2.12-1) unstable; urgency=medium
* Team upload.
diff -Nru libhdf4-4.2.12/debian/hdf4-tools.lintian-overrides
libhdf4-4.2.12/debian/hdf4-tools.lintian-overrides
--- libhdf4-4.2.12/debian/hdf4-tools.lintian-overrides 2016-05-20
18:11:05.000000000 +0200
+++ libhdf4-4.2.12/debian/hdf4-tools.lintian-overrides 1970-01-01
01:00:00.000000000 +0100
@@ -1,3 +0,0 @@
-# PIE breaks the build
-hdf4-tools: hardening-no-pie *
-
diff -Nru libhdf4-4.2.12/debian/rules libhdf4-4.2.12/debian/rules
--- libhdf4-4.2.12/debian/rules 2016-06-30 23:28:39.000000000 +0200
+++ libhdf4-4.2.12/debian/rules 2017-04-03 14:26:02.000000000 +0200
@@ -6,7 +6,7 @@
#
# Enable hardening build flags
-export DEB_BUILD_MAINT_OPTIONS=hardening=+all,-pie
+export DEB_BUILD_MAINT_OPTIONS=hardening=+all
DEB_HOST_ARCH ?= $(shell dpkg-architecture -qDEB_HOST_ARCH)
@@ -24,9 +24,9 @@
CXX := g++
LIBS := -ljpeg -lz -lm
-CFLAGS = $(shell DEB_BUILD_MAINT_OPTIONS=hardening=+all,-pie dpkg-buildflags
--get CFLAGS)
-CFLAGS += $(shell DEB_BUILD_MAINT_OPTIONS=hardening=+all,-pie dpkg-buildflags
--get CPPFLAGS)
-LDFLAGS = $(shell DEB_BUILD_MAINT_OPTIONS=hardening=+all,-pie dpkg-buildflags
--get LDFLAGS)
+CFLAGS = $(shell DEB_BUILD_MAINT_OPTIONS=hardening=+all dpkg-buildflags --get
CFLAGS)
+CFLAGS += $(shell DEB_BUILD_MAINT_OPTIONS=hardening=+all dpkg-buildflags --get
CPPFLAGS)
+LDFLAGS = $(shell DEB_BUILD_MAINT_OPTIONS=hardening=+all dpkg-buildflags --get
LDFLAGS)
ifneq (,$(findstring verbose,$(DEB_BUILD_OPTIONS)))
DH_VERBOSE=1
