Your message dated Sat, 15 Dec 2012 22:17:36 +0000
with message-id <[email protected]>
and subject line Bug#661398: fixed in libdata-alias-perl 1.16-2
has caused the Debian Bug report #661398,
regarding libdata-alias-perl: FTBFS with hardening flags enabled: 
-Werror=format-security
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
661398: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=661398
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: libdata-alias-perl
Severity: normal
Version: 1.16-1

With hardening flags enabled, this package FTBFS:

Alias.xs: In function 'DataAlias_pp_rv2sv':
Alias.xs:783:4: error: format not a string literal and no format arguments 
[-Werror=format-security]
cc1: some warnings being treated as errors

(this is the first error of this type seen: it's possible that there
could be others once this is fixed).

A likely fix is to change croak(var) to croak("%s", var)[1].

Note that I haven't verified whether an externally-controlled string is
used; if so, it would be appropriate to upgrade this bug RC severity
with the security tag[2].

This was found during testing of perl 5.14.2-8 in experimental; however,
since that version was prepared, it has been decided not to export
those build flags in Config_heay.pl. Nevertheless, it is likely that at
some point, either in debhelper 9 or 10, the hardening flags will be
enabled for all perl modules.

Thanks,
Dominic.

[1] <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=657853#92>
[2] <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=657853#117>

-- 
Dominic Hargreaves | http://www.larted.org.uk/~dom/
PGP key 5178E2A5 from the.earth.li (keyserver,web,email)



--- End Message ---
--- Begin Message ---
Source: libdata-alias-perl
Source-Version: 1.16-2

We believe that the bug you reported is fixed in the latest version of
libdata-alias-perl, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
gregor herrmann <[email protected]> (supplier of updated libdata-alias-perl 
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sat, 15 Dec 2012 23:14:13 +0100
Source: libdata-alias-perl
Binary: libdata-alias-perl
Architecture: source amd64
Version: 1.16-2
Distribution: unstable
Urgency: low
Maintainer: Debian Perl Group <[email protected]>
Changed-By: gregor herrmann <[email protected]>
Description: 
 libdata-alias-perl - module to create aliases instead of copies
Closes: 661398
Changes: 
 libdata-alias-perl (1.16-2) unstable; urgency=low
 .
   [ Dominic Hargreaves ]
   * Bump debhelper compat level to 9
   * Apply patch from Niko Tyni fixing FTBFS with -Werror=format-security
     (Closes: #661398)
 .
   [ gregor herrmann ]
   * Use debhelper 9.20120312 to get all hardening flags.
   * debian/copyright: update to Copyright-Format 1.0.
   * Bump Standards-Version to 3.9.4 (no changes).
   * Update years of packaging copyright.
Checksums-Sha1: 
 6138697a600e7f5af9457467c6692a6448f19dd6 2333 libdata-alias-perl_1.16-2.dsc
 75580792d8d465aafc3b3c459a6fdc9fa273e66b 3535 
libdata-alias-perl_1.16-2.debian.tar.gz
 f0b69e737ab6dd19b560f9d980b3d1394b256aec 39162 
libdata-alias-perl_1.16-2_amd64.deb
Checksums-Sha256: 
 4b23bcf95e140abcdabf5d5a8fa5b840da1d78d34c730bfe40f8f10c6d607ba5 2333 
libdata-alias-perl_1.16-2.dsc
 789ca48da5aeaaf26ba4435ee87839b9a88fc5a25968a971f6f6e93bb74e955c 3535 
libdata-alias-perl_1.16-2.debian.tar.gz
 88c0b91e94761424a53b66d574a6cba43c12112c5cb9d086670dd87397158d0d 39162 
libdata-alias-perl_1.16-2_amd64.deb
Files: 
 d161b0bf7bcfa10afa2b1b722ed942f6 2333 perl optional 
libdata-alias-perl_1.16-2.dsc
 73b0e833c3fb600a5d8376ff3fc29302 3535 perl optional 
libdata-alias-perl_1.16-2.debian.tar.gz
 ed27dad938c27041e0194cbf379630ef 39162 perl optional 
libdata-alias-perl_1.16-2_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iQIcBAEBCAAGBQJQzPZeAAoJELs6aAGGSaoGGwsP/0NqfDqx8RB1UOSTHjpi0Ql2
sbOx/PnCKTWSTJZC1vSDM4PJn1kbSQysLRm4DaEY5bGt1315CsMvVTrjj4cjFxcG
+XERxgDZaKSkzz61onPbQdeCxoU685WH31YjM8ppjP91jZrlCn1vbw0zoVbEwSaF
uWR/ndH/8WvzDOleSVpIQ2YziP7xaIi0tDd8M/70olIBe8p2fErlL394U7XJYQmw
JvLtIcV1zU2G3lEMtzxbcpVyhZOWJzpBlg+9ZsuhtyMXhuonAxPqHSSdF1MkkWPp
sRHS0NZW+cXUeGNcs2OnaRxow73zmYtIDLVMF4yVf3JIvnsdqmLp6wJNiCZQ4iXf
2iUPJW3FrZjWcKF730NIxtOd6nAG2vNoxHsY91bIV6qse6nsmyshmniY599Zu3R4
JApTTLCKmU8tq8Tj3CouZABx+x5W0c8otpe9aB8F0FYBDZ2Zd5S6JGULydvW1Kwx
Iutfljnj1rBQwgcd9+HZ07c4dxcVIPHAU9RmW6DmDX5CknHYyCGUKbeRLbO8c3vj
IWbHku4YV16qAyiVGu6PtVEUqXScRBZ94W6ujjVSOAQc5eFZCKD8Baj0Ra+MwdWb
fWThHt3kUiCnMTjNpkfqu+9CWFgZ4udjYXAcOEIeWR81OjUbPnCq7wtJiMtxQV+Y
OeeLROWLWCLY1K5/lLIq
=RQ4R
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to