Your message dated Tue, 16 Feb 2016 22:10:46 +0000 with message-id <e1avnpw-0004mh...@franck.debian.org> and subject line Bug#687047: fixed in meterec 0.9.2~ds0-2 has caused the Debian Bug report #687047, regarding meterec: CPPFLAGS hardening flags missing to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 687047: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=687047 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: meterec Version: 0.9.1~ds0-1 Severity: normal Tags: patch Dear Maintainer, The CPPFLAGS hardening flags are missing because are overwritten in ./configure (and ./configure.in). The attached patch fixes the issue, the ./configure.in part should be sent upstream. To check if all flags were correctly enabled you can use `hardening-check` from the hardening-includes package and check the build log with `blhc` (hardening-check doesn't catch everything): $ hardening-check /usr/bin/meterec /usr/bin/meterec: Position Independent Executable: no, normal executable! Stack protected: yes Fortify Source functions: yes (some protected functions found) Read-only relocations: yes Immediate binding: no not found! (Position Independent Executable and Immediate binding is not enabled by default.) Use find -type f \( -executable -o -name \*.so\* \) -exec hardening-check {} + on the build result to check all files. Regards, Simon [1]: https://wiki.debian.org/ReleaseGoals/SecurityHardeningBuildFlags [2]: https://wiki.debian.org/HardeningWalkthrough [3]: https://wiki.debian.org/Hardening -- + privacy is necessary + using gnupg http://gnupg.org + public key id: 0x92FEFDB7E44C32F9Description: Use CPPFLAGS from environment (dpkg-buildflags). Necessary for hardening flags. Author: Simon Ruderich <si...@ruderich.org> Last-Update: 2012-09-08 --- meterec-0.9.1~ds0.orig/configure +++ meterec-0.9.1~ds0/configure @@ -3569,7 +3569,7 @@ PACKAGE_CFLAGS="-g -Wall $SNDFILE_CFLAGS PACKAGE_LIBS="$SNDFILE_LIBS $JACK_LIBS $LIBCONFIG_LIBS" CFLAGS="$CFLAGS $PACKAGE_CFLAGS " -CPPFLAGS="$CFLAGS $PACKAGE_CFLAGS " +CPPFLAGS="$CPPFLAGS $PACKAGE_CFLAGS " ac_ext=c ac_cpp='$CPP $CPPFLAGS' --- meterec-0.9.1~ds0.orig/configure.in +++ meterec-0.9.1~ds0/configure.in @@ -24,7 +24,7 @@ PACKAGE_CFLAGS="-g -Wall $SNDFILE_CFLAGS PACKAGE_LIBS="$SNDFILE_LIBS $JACK_LIBS $LIBCONFIG_LIBS" CFLAGS="$CFLAGS $PACKAGE_CFLAGS " -CPPFLAGS="$CFLAGS $PACKAGE_CFLAGS " +CPPFLAGS="$CPPFLAGS $PACKAGE_CFLAGS " AC_CHECK_HEADERS(jack/session.h)
signature.asc
Description: Digital signature
--- End Message ---
--- Begin Message ---Source: meterec Source-Version: 0.9.2~ds0-2 We believe that the bug you reported is fixed in the latest version of meterec, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 687...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Alessio Treglia <ales...@debian.org> (supplier of updated meterec package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 16 Feb 2016 10:51:52 +0000 Source: meterec Binary: meterec Architecture: source amd64 Version: 0.9.2~ds0-2 Distribution: unstable Urgency: medium Maintainer: Debian QA Group <packa...@qa.debian.org> Changed-By: Alessio Treglia <ales...@debian.org> Description: meterec - minimalistic multi track recorder Closes: 687047 Changes: meterec (0.9.2~ds0-2) unstable; urgency=medium . * QA upload * Orphaning this * Fix missing hardening flags (Closes: #687047) Checksums-Sha1: e414e08c7e1448afad47bfc5d8f91fc45ecc8161 1798 meterec_0.9.2~ds0-2.dsc 42636c3c487481f4385a2a08b41153f61c4af847 4756 meterec_0.9.2~ds0-2.debian.tar.xz 837958aa7fe3edb313cdf65d94d0515aaa220144 59176 meterec-dbgsym_0.9.2~ds0-2_amd64.deb e31ca0b77fbc0fb98d54d59627b57a0e1f39a5c9 39150 meterec_0.9.2~ds0-2_amd64.deb Checksums-Sha256: 7d0fa90dd0ee42248fe95338202d25c8f2eb26fc0c819fef479a62472b0aa3ab 1798 meterec_0.9.2~ds0-2.dsc 580d55e1e4775532e188bb3fe5f4bbceabe5ccda04620bc7f57eb97d75215a2f 4756 meterec_0.9.2~ds0-2.debian.tar.xz 2371ef7a54864dc9b0ac573919daffff91239a377a147fb3c86ea44fa6376044 59176 meterec-dbgsym_0.9.2~ds0-2_amd64.deb 711e6d17b0458f585a8e376880646072644bbaabc06bf9553d139c7d25fff247 39150 meterec_0.9.2~ds0-2_amd64.deb Files: c5902f50b8b1e1abc0c9b6e2e2842d90 1798 sound optional meterec_0.9.2~ds0-2.dsc 664ee8411beecf86bc3c7a52a6be9e87 4756 sound optional meterec_0.9.2~ds0-2.debian.tar.xz 91dc328f69df7f04e45ba49213829bc1 59176 debug extra meterec-dbgsym_0.9.2~ds0-2_amd64.deb edd1e8678f510e67d77bccf67312d6e1 39150 sound optional meterec_0.9.2~ds0-2_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJWwv/jAAoJEOikiuUxHXZaJhUP/2BEIL1Tqz53Qww80I8gClQP G37w+dgj/SSd00oZJ7Mm0b8hjbxSLAHRbfypZR2S8XwjD05LY2UZCYjgIiCqR/7I fnoelVRFiP1QlvOMx9RN0FD6iIkxnJhks2c2j91HInwsD2z0gBLyJNmR4/soxMO+ 9gqSZ/LQY63fb8d4un6ItXGEIpEV4mLROJRKY//Xv6sh8hnEADP/7Qsv3oF3dibQ INZJr59sqphvYnEHR59gaBWusEQF86scVoxNNuXMIXRw3j1GJpjFuj119E8UdZ2C 1MEYpglKzkgdhtvzCNLWnGARU/v2cGKyEGC7xWlt/u9EaOVUz7F6vDvPK0dp28D1 1L4S4CU21P17nSSsqvlz4oZIvOGsFBn5Nb5cQ1v1enD5x/tppHQIjHDkywmtzK2l y14V8In98yXSevr93BmkQOBLhw465yTbTEKDGSKXkunIAvaMIayLWkDdwJnzzyRb 4HvKG5/m9Bo2Eua1h312GndlS3KUQTQeabnsYREwJ0sDZxqS5XKkJ9uFqzgyZgeA i5lMimv0hqPlrd6x+TF+Dth7WHYhgu6dluwSR9ouUWmUlAwbGLUuvlVCfX8Rz1Nu Aoj6IJjGGSMHmDzXgTIlroX6lVUXfA3rLLT9wYZxS9Y3DVzSJvv9EGGfLsvzzDS3 amB9DiVuEaH+umKEvEJE =tFNP -----END PGP SIGNATURE-----
--- End Message ---
_______________________________________________ pkg-multimedia-maintainers mailing list pkg-multimedia-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers
