Your message dated Sat, 17 Dec 2011 15:50:12 +0000
with message-id <[email protected]>
and subject line Bug#646350: fixed in mupdf 0.9-2
has caused the Debian Bug report #646350,
regarding mupdf: FTBFS with -Werror=format-security
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
646350: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=646350
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: mupdf
Version: 0.9-1
Severity: normal
User: [email protected]
Usertags: hardening-format-security hardening
the package mupdf fails to compile with the new hardened compiler
flags dpkg-buildflag outputs [0].
The problematic flag is: -Werror=format-security
See the ubuntu buildlog:
https://launchpadlibrarian.net/83077396/buildlog_ubuntu-precise-i386.mupdf_0.9-1_FAILEDTOBUILD.txt.gz
Snippet:
CC build/release/xps_zip.o
xps/xps_xml.c: In function 'xml_parse_document':
xps/xps_xml.c:379:3: error: format not a string literal and no format
arguments [-Werror=format-security]
The buildflags are not exported in debian, but can be enabled e.g. by
adding this to debian/rules:
DPKG_EXPORT_BUILDFLAGS = 1
include /usr/share/dpkg/buildflags.mk
Please fix the issues and maybe also enable the hardened build in debian.
[0] http://lists.debian.org/debian-devel-announce/2011/09/msg00001.html
signature.asc
Description: OpenPGP digital signature
--- End Message ---
--- Begin Message ---
Source: mupdf
Source-Version: 0.9-2
We believe that the bug you reported is fixed in the latest version of
mupdf, which is due to be installed in the Debian FTP archive:
libmupdf-dev_0.9-2_amd64.deb
to main/m/mupdf/libmupdf-dev_0.9-2_amd64.deb
mupdf-tools_0.9-2_amd64.deb
to main/m/mupdf/mupdf-tools_0.9-2_amd64.deb
mupdf_0.9-2.debian.tar.gz
to main/m/mupdf/mupdf_0.9-2.debian.tar.gz
mupdf_0.9-2.dsc
to main/m/mupdf/mupdf_0.9-2.dsc
mupdf_0.9-2_amd64.deb
to main/m/mupdf/mupdf_0.9-2_amd64.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Kan-Ru Chen <[email protected]> (supplier of updated mupdf package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sat, 17 Dec 2011 22:25:35 +0800
Source: mupdf
Binary: libmupdf-dev mupdf mupdf-tools
Architecture: source amd64
Version: 0.9-2
Distribution: unstable
Urgency: low
Maintainer: Kan-Ru Chen <[email protected]>
Changed-By: Kan-Ru Chen <[email protected]>
Description:
libmupdf-dev - development files for the MuPDF viewer
mupdf - lightweight PDF viewer
mupdf-tools - commmand line tools for the MuPDF viewer
Closes: 621894 646350
Changes:
mupdf (0.9-2) unstable; urgency=low
.
* Enable harden flags.
* debian/copyright: Updated.
* Bump Standards-Version to 3.9.2, no changes needed
* debian/patches/bug621894.patch: Fix text copying with
selection. (Closes: #621894)
* debian/patches/bug646350.patch: Fix FTBFS with
-Werror=format-security. (Closes: #646350)
Checksums-Sha1:
290cb384e272ed11c86a6a3d91cda1bfcde2d89d 2017 mupdf_0.9-2.dsc
1a8d56c48fe606a6015ff6163dbf1fe139e65ff8 10038 mupdf_0.9-2.debian.tar.gz
6f28bd230d86f7373e4ec0c2402624f6d5c6b934 3225996 libmupdf-dev_0.9-2_amd64.deb
b9adda490fb9c7122614bb53f121c40c520f6fbd 3146470 mupdf_0.9-2_amd64.deb
22745413f70935f3970807d275ee36f6803bc3fe 3420100 mupdf-tools_0.9-2_amd64.deb
Checksums-Sha256:
b17cb43566162e70d256c7c77f1560dc636ff13e254118489fd1ddc822c1135c 2017
mupdf_0.9-2.dsc
6c4cdf4402390a291a43a69a529b4223c219fdf04dd5feb76a14bf40d4a506fb 10038
mupdf_0.9-2.debian.tar.gz
b4d066bd27c04fdf86db172cfadd77f19a46a0695cbdd194f5aaaad47f43fae9 3225996
libmupdf-dev_0.9-2_amd64.deb
a229384362bb4abe7c513c0253f3e490c8e85d300526f383a1714917ad06593e 3146470
mupdf_0.9-2_amd64.deb
be8411e781b31cbd1db5a83269cb5dddf197b0a0ac9c3593dfa0b58daa3fad36 3420100
mupdf-tools_0.9-2_amd64.deb
Files:
de77c4e5f9c5c9d0326e9ff13398777d 2017 text optional mupdf_0.9-2.dsc
6a080b0ae765ac191d2bbe05809b7dfa 10038 text optional mupdf_0.9-2.debian.tar.gz
b8544299824a649822b4480ef9bb0fda 3225996 libdevel optional
libmupdf-dev_0.9-2_amd64.deb
ce062ba1da33d2b280f68835e70bca0e 3146470 text optional mupdf_0.9-2_amd64.deb
98cda102ec27cf71f7bad58cfaedd7f0 3420100 text optional
mupdf-tools_0.9-2_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
iQIcBAEBCAAGBQJO7LQHAAoJEAo5NUq25X3hNbYP/iei+ltX3mswjGNde4zsAsUG
i8MdgHIh9HOwgvzAUTtl/X0ni085PhPFSuBlWbHOIKyWQ20GSHe1v/rLWzYKVcPm
gE0TocPaioMPMQWXZo99uM2NZKKZ6oBz8tAPcJgDKZ7uNbh/Vqvc1ZNMe1J+jZcF
DuJQaCRg19Z8lMn8HMDhnxJPQ9V8dbEly0jJH+o4PnwN+tzoNdAGLQbmU1dVWQi9
u1DrB0OfyL5AU1YONmgMai7nS3qVCoY05v9plbgQUPpOsuZkIFrdpYKi9JH30lYr
vmhCQCiR8xUOaXxDojc33NieTWi7II8k6tExYsruxwEfMoSpHZuggiUX+y6FrLdU
SwZhAYS+UQgofEyoh5zphd/PyEjdiA3K5l+/4kdSr9fMxUQ+xsj3JLL59en8+pIe
1oJ+oEEFVAlIIBnXAkG65yt98E9xo6s0yvY82v1rexW2+a+xU02YaZKyz066jq/1
yX/IEoG+ARkKd2vhYvikiO6yJD8rIxBKKvmLHBZau8qfCU+m8Kybd+RkfjpPDCPo
Esh07pkPqtrJqQ5RqFkD/+rMTr6inUaPMAvYgscLCffKJ2XcG+iaBOfrfHx+i40J
s4i99tWiOfVAN62C75QhKSq18CzaS3Cy9EXnZmtcWUqhcxR318QHAHRSwNpdnvXV
HfJghSpUx3dtCf+uYNav
=RJ5A
-----END PGP SIGNATURE-----
--- End Message ---
