Your message dated Thu, 29 Dec 2011 19:02:48 +0000
with message-id <[email protected]>
and subject line Bug#653538: fixed in fetchmail 6.3.21-3
has caused the Debian Bug report #653538,
regarding Please enable hardened build flags
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
653538: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=653538
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: fetchmail
Version: 6.3.21-2
Severity: important
Tags: patch
Please enable hardened build flags using dpkg-buildflags.
Patch attached.
Cheers,
Moritz
diff -aur fetchmail-6.3.21.orig/debian/rules fetchmail-6.3.21/debian/rules
--- fetchmail-6.3.21.orig/debian/rules 2011-09-04 16:08:44.000000000 +0200
+++ fetchmail-6.3.21/debian/rules 2011-12-29 07:00:34.000000000 +0100
@@ -92,13 +92,12 @@
endif
# Turn off optimization if the user requests it.
-CFLAGS = -Wall -pipe -g
-ifneq (,$(findstring noopt,$(DEB_BUILD_OPTIONS)))
- CFLAGS += -O0
-else
- CFLAGS += -O2
-endif
-export CFLAGS
+CFLAGS = -Wall -pipe
+CFLAGS += `dpkg-buildflags --get CFLAGS`
+
+LDFLAGS = `dpkg-buildflags --get LDFLAGS`
+CPPFLAGS = `dpkg-buildflags --get CPPFLAGS`
+
clean: unpatch
dh_testdir
@@ -116,7 +115,7 @@
cp /usr/share/misc/config.sub config.sub
cp /usr/share/misc/config.guess config.guess
- ./configure $(CONFFLAGS) --prefix=/usr --enable-nls \
+ ./configure CPPFLAGS="$(CPPFLAGS)" CFLAGS="$(CFLAGS)" LDFLAGS="$(LDFLAGS)" $(CONFFLAGS) --prefix=/usr --enable-nls \
--disable-fallback $(FETCHCONFOPT)
sed -e "s/-lcrypt//; s/-lk5crypto//g;" < Makefile > Makefile.tmp
Nur in fetchmail-6.3.21/debian: rules~.
--- End Message ---
--- Begin Message ---
Source: fetchmail
Source-Version: 6.3.21-3
We believe that the bug you reported is fixed in the latest version of
fetchmail, which is due to be installed in the Debian FTP archive:
fetchmail_6.3.21-3.debian.tar.gz
to main/f/fetchmail/fetchmail_6.3.21-3.debian.tar.gz
fetchmail_6.3.21-3.dsc
to main/f/fetchmail/fetchmail_6.3.21-3.dsc
fetchmail_6.3.21-3_amd64.deb
to main/f/fetchmail/fetchmail_6.3.21-3_amd64.deb
fetchmailconf_6.3.21-3_all.deb
to main/f/fetchmail/fetchmailconf_6.3.21-3_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Nico Golde <[email protected]> (supplier of updated fetchmail package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Thu, 29 Dec 2011 18:55:30 +0100
Source: fetchmail
Binary: fetchmail fetchmailconf
Architecture: source all amd64
Version: 6.3.21-3
Distribution: unstable
Urgency: low
Maintainer: Fetchmail Maintainers <[email protected]>
Changed-By: Nico Golde <[email protected]>
Description:
fetchmail - SSL enabled POP3, APOP, IMAP mail gatherer/forwarder
fetchmailconf - fetchmail configurator
Closes: 653538
Changes:
fetchmail (6.3.21-3) unstable; urgency=low
.
* Build with hardening compiler flags (Closes: #653538).
- Add Build-Depends on dpkg-dev (>= 1.16.1~).
- Use buildflags.mk snippet in debian/rules.
- Make all hardening flags default for DEB_BUILD_MAINT_OPTIONS.
* Use log_warning_msg rather than echo to inform user that the
fetchmail daemon has been disabled.
Checksums-Sha1:
cdf164e972357a6fda62ab3ff535e838724c7028 1411 fetchmail_6.3.21-3.dsc
c6f9466ac8343c4ac21694189948ff5df9ba469d 51999 fetchmail_6.3.21-3.debian.tar.gz
5db2db54aa5e3eabb2a96aad04f7446d88ae02e7 66408 fetchmailconf_6.3.21-3_all.deb
2895f706e60dff75de4ae6a08bb51f561bad2661 928228 fetchmail_6.3.21-3_amd64.deb
Checksums-Sha256:
d417333b9d4b2c86563b6d2f81dfcd83965250d135feb591dd81a2ec5f5330a8 1411
fetchmail_6.3.21-3.dsc
3a133a24b2fbae36f24e3a251c00275291c19ddd8e62c0fd12ea710fabcf6cd7 51999
fetchmail_6.3.21-3.debian.tar.gz
6b6c0da9787c5f568f3473de5f7d67fa081720090057aac1ccc7b69980c72732 66408
fetchmailconf_6.3.21-3_all.deb
72c97e894eaafee48bbab3d1a8ff5e56e725aad4d639248afeccbeff75500690 928228
fetchmail_6.3.21-3_amd64.deb
Files:
a6ff4a518a86b57a14575faa3b88aff3 1411 mail optional fetchmail_6.3.21-3.dsc
177b9bd63d57f6558fee1b0a1a36c13a 51999 mail optional
fetchmail_6.3.21-3.debian.tar.gz
30519aa1d227a498f90b775a53a143b6 66408 mail optional
fetchmailconf_6.3.21-3_all.deb
be9a14c42d0f307afb5c791d871011e5 928228 mail optional
fetchmail_6.3.21-3_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
iEYEARECAAYFAk78tsAACgkQHYflSXNkfP9Y1gCfZbfAkunzuPY9pUWlJjhdOtDd
sckAnR0+meF/CzvSrgPKmVjV6F8MO/Iv
=s6ew
-----END PGP SIGNATURE-----
--- End Message ---
