Your message dated Mon, 17 Sep 2012 21:01:46 +0000
with message-id <[email protected]>
and subject line Bug#649817: fixed in sniffit 0.3.7.beta-17
has caused the Debian Bug report #649817,
regarding sniffit: please enable hardening options
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
649817: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=649817
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: sniffit
Version: 0.3.7.beta-15.1
Severity: normal
Tags: patch
User: [email protected]
Usertags: goal-hardening
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hardening options is a proposed release goal for Wheezy [1].
Having important package compiled with the hardening options will add
various protections against issues such as stack smashing, predictable
locations of values in memory, etc.
I have rebuilt the package with hardening options enabled and there was
no error (during build, or at runtime).
The attached patch adds a minimal modification to the debian/rules file
to add support for hardening flags (other methods are available).
Note that PIE and bindnow are not enabled by default, and that you can
decide to enable this options for additional features (see the following
link for details).
You can control and enable/disable each hardening flag independently,
see
http://lists.debian.org/debian-devel-announce/2011/09/msg00001.html
for details.
[1] http://wiki.debian.org/ReleaseGoals/SecurityHardeningBuildFlags
- --
Regards,
dai
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
iEYEARECAAYFAk7NsfkACgkQglIHF/kTvg/O7gCgxWghTczN2JzAS+RvnN60x4Xj
tGQAnivRzOqIjczPLrTjwYw4XpO+YBMz
=HVxb
-----END PGP SIGNATURE-----
--- End Message ---
--- Begin Message ---
Source: sniffit
Source-Version: 0.3.7.beta-17
We believe that the bug you reported is fixed in the latest version of
sniffit, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
William Vera <[email protected]> (supplier of updated sniffit package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Thu, 16 Aug 2012 17:40:22 -0500
Source: sniffit
Binary: sniffit
Architecture: source amd64
Version: 0.3.7.beta-17
Distribution: unstable
Urgency: low
Maintainer: William Vera <[email protected]>
Changed-By: William Vera <[email protected]>
Description:
sniffit - packet sniffer and monitoring tool
Closes: 649817
Changes:
sniffit (0.3.7.beta-17) unstable; urgency=low
.
* Acknowledge NMU.
+ Thanks Aron Xu.
* Added a patch to enable hardening options. (Closes: #649817).
+ Thanks Simon Ruderich.
* Added a patch to fix spelling error on binary.
* Fixed spelling error on debian/README.Debian.
* Added "DM-Upload-Allowed: yes" at debian/control.
Checksums-Sha1:
926830c7cc82cd3b00b5dc986602eb31ebcbfa94 1449 sniffit_0.3.7.beta-17.dsc
20bede68909d0f5cac3ae4dfeb184af0d644181f 17130
sniffit_0.3.7.beta-17.debian.tar.gz
adbacaa8f41af2305fd5ef120a0f89250d935a73 59130 sniffit_0.3.7.beta-17_amd64.deb
Checksums-Sha256:
5aaf09a9dbd17a177b03cb3649cde3daefa677ef0278e7b18b7370f1a45cc0cf 1449
sniffit_0.3.7.beta-17.dsc
95e4f425aa2ecc99133b3fc35cab6e6850ba02408323b9f1dbe2f9e9cb134818 17130
sniffit_0.3.7.beta-17.debian.tar.gz
124e583cc1d377f9bbdeb23154fcf1197288a1dc4ec4d3c458d1748eef9af0e1 59130
sniffit_0.3.7.beta-17_amd64.deb
Files:
de0542813ddca0cffc8bf514b30325f6 1449 net optional sniffit_0.3.7.beta-17.dsc
f51e49499aaf09408414b08e7bfede02 17130 net optional
sniffit_0.3.7.beta-17.debian.tar.gz
2809344b3a8f4bc30fbbc34b3401980a 59130 net optional
sniffit_0.3.7.beta-17_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
iQEcBAEBAgAGBQJQV1a0AAoJEIAhAkTu07wNh9kH/1BMOkVTvjDfeu2cYhoA2+DP
ICik6m5IZ2BcIYRozxiyJrRhKrPeC9cHNNLX/g9918npflCltgdHGFF7ce4+oCpu
RKI8ltXH49d/4AQoIYHiIx1iRMr7hI5T5HJE+ozkLSWWMG4lIGCKnCraS6we6xD2
cKzb7fz98WgY26cdigLL2gRypHL1a/XOFmq+qFQwaShcG+1YPVDTm9JXjv/jjtI3
pmR0W7o+dAw7BuXlRfcthqLcLEosgPrZuG7lYeOrvtEJfPFEHHISyfWJKIFWG5+b
bB4zrP9z8AzAOC82s8+sylzLVOSWmHK99nJ+qlR3FUATBLVYrgGQbCLOlu7ilAA=
=m5cd
-----END PGP SIGNATURE-----
--- End Message ---
