Your message dated Sun, 08 Sep 2013 19:18:58 +0000
with message-id <[email protected]>
and subject line Bug#721799: fixed in ruby2.0 2.0.0.299-1
has caused the Debian Bug report #721799,
regarding ruby2.0: LDFLAGS overwritten when building C extensions
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
721799: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=721799
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: ruby2.0
Version: 2.0.0.247-1
Severity: important
Tags: upstream patch

Hi!

When building ruby-nokogiri extension for ruby2.0, I noticed that the
hardening linker flags were not passed when building the Makefile with
extconf/mkmf.

A change in the code of lib/mkmf.rb from ruby1.9.3 to ruby2.0 is causing
this, thus affecting all extension that are going to be built against
ruby2.0.

This has been fixed upstream with the following commit:

https://github.com/ruby/ruby/commit/47434dc12f90431fabfc7e9b1829ee0437bdee0a.patch

An adapted version of this patch against the Git repo of the Debian
package is attached.

Cheers,

Cédric



-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (990, 'unstable'), (500, 'testing'), (150, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.10-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages ruby2.0 depends on:
ii  libc6                 2.17-92+b1
ii  libruby2.0            2.0.0.247-1
ii  rubygems-integration  1.2

ruby2.0 recommends no packages.

ruby2.0 suggests no packages.

-- no debconf information
diff --git a/lib/mkmf.rb b/lib/mkmf.rb
index d4d5846..6fec4bd 100644
--- a/lib/mkmf.rb
+++ b/lib/mkmf.rb
@@ -1709,12 +1709,13 @@ SRC
       # default to package specific config command, as a last resort.
       get = proc {|opt| `#{pkgconfig} --#{opt}`.strip}
     end
+    orig_ldflags = $LDFLAGS
     if get and try_ldflags(ldflags = get['libs'])
       cflags = get['cflags']
       libs = get['libs-only-l']
       ldflags = (Shellwords.shellwords(ldflags) - Shellwords.shellwords(libs)).quote.join(" ")
       $CFLAGS += " " << cflags
-      $LDFLAGS += " " << ldflags
+      $LDFLAGS = [orig_ldflags, ldflags].join(' ')
       $libs += " " << libs
       Logging::message "package configuration for %s\n", pkg
       Logging::message "cflags: %s\nldflags: %s\nlibs: %s\n\n",

Attachment: signature.asc
Description: Digital signature


--- End Message ---
--- Begin Message ---
Source: ruby2.0
Source-Version: 2.0.0.299-1

We believe that the bug you reported is fixed in the latest version of
ruby2.0, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Antonio Terceiro <[email protected]> (supplier of updated ruby2.0 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Sun, 08 Sep 2013 12:38:34 -0300
Source: ruby2.0
Binary: ruby2.0 libruby2.0 ruby2.0-dev ruby2.0-doc
Architecture: source amd64 all
Version: 2.0.0.299-1
Distribution: unstable
Urgency: low
Maintainer: Antonio Terceiro <[email protected]>
Changed-By: Antonio Terceiro <[email protected]>
Description: 
 libruby2.0 - Libraries necessary to run Ruby 2.0
 ruby2.0    - Interpreter of object-oriented scripting language Ruby
 ruby2.0-dev - Header files for compiling extension modules for the Ruby 2.0
 ruby2.0-doc - Documentation for Ruby 2.0
Closes: 721799
Changes: 
 ruby2.0 (2.0.0.299-1) unstable; urgency=low
 .
   * New upstream release
     + Includes a fix for override of existing LDFLAGS when building compiled
       extensions that use pkg-config (Closes: #721799).
   * debian/rules: forward-port to tcl/tk packages with multi-arch support.
     Thanks to Tristan Hill for reporting on build for Ubuntu saucy
   * debian/control: ruby2.0 now provides ruby-interpreter
   * Now using tarballs generated from the git mirror.
     + The released tarballs will modify shipped files on clean. Without this
       we can stop messing around with files that need to be recovered after a
       `debian/rules clean` to make them match the orig tarball and avoid
       spurious diffs.
     + This also lets us drop the diffs against generated files such as
       tool/config.* and configure.
     + documented in debian/README.source
   * debian/libruby2.0.symbols: refreshed with 2 new symbols added since last
     version.
Checksums-Sha1: 
 14a0efd597565d564fa4c6dd76c923488cfb10e5 1578 ruby2.0_2.0.0.299-1.dsc
 f21690f83603a4499995d9dd4d86fc0cb0d612bb 9022599 ruby2.0_2.0.0.299.orig.tar.bz2
 06ede5d88e09f7523af030b61c2c6883f789bd46 85066 
ruby2.0_2.0.0.299-1.debian.tar.gz
 ac5ea4fe3b343f48f7f400587b0af75c54bd62d3 334642 ruby2.0_2.0.0.299-1_amd64.deb
 c2009bf327305c09e1bbb3b4d94622950ffa293e 3445016 
libruby2.0_2.0.0.299-1_amd64.deb
 68c562e8b87512d14f61b2920601ea23f1002b70 1175534 
ruby2.0-dev_2.0.0.299-1_amd64.deb
 410bde68ed00a20bd216582f8ad2c803afd4e287 3248708 
ruby2.0-doc_2.0.0.299-1_all.deb
Checksums-Sha256: 
 d229b9ccc380c10ac2477bce397001e17b7a68e636aae41a011459fccb3f5c86 1578 
ruby2.0_2.0.0.299-1.dsc
 cb48a260fbce88593aabe77bf17b7b2f3d154dfc97113590495fd7f6abde5508 9022599 
ruby2.0_2.0.0.299.orig.tar.bz2
 4a5251e2f60d9b4286a96f1ac25a47644d95efdc9b4a8efabaad4748bdb2bbd6 85066 
ruby2.0_2.0.0.299-1.debian.tar.gz
 62e104b2b0fa25259db8b6d1ae1ace32c971b5840387e4b1b1ce7d46e86c38fc 334642 
ruby2.0_2.0.0.299-1_amd64.deb
 b489c88633cca182eaf8838cfb83c5afa6ff2a8962ed5c6ecb787c413806ebbc 3445016 
libruby2.0_2.0.0.299-1_amd64.deb
 6baf142d1467b129856f804756fed904822a4378e3837df0d5901029ddde152c 1175534 
ruby2.0-dev_2.0.0.299-1_amd64.deb
 90771e3d39e56083dd469c3de174e86cd9b6749b4b00fff5d4b816a99d97ac5f 3248708 
ruby2.0-doc_2.0.0.299-1_all.deb
Files: 
 18d469fdb0985374287f7cf7ed5673f4 1578 ruby extra ruby2.0_2.0.0.299-1.dsc
 afb3e9b539abb620f58756e52d5af640 9022599 ruby extra 
ruby2.0_2.0.0.299.orig.tar.bz2
 814978772ef6bb71065da14c776633c2 85066 ruby extra 
ruby2.0_2.0.0.299-1.debian.tar.gz
 8f540174caaff5a5f8999f15577c5a74 334642 ruby extra 
ruby2.0_2.0.0.299-1_amd64.deb
 e2bb3a41a7a05b855532f335815d1953 3445016 libs extra 
libruby2.0_2.0.0.299-1_amd64.deb
 d739f486f5faa26e1731f4a2af2a722e 1175534 ruby extra 
ruby2.0-dev_2.0.0.299-1_amd64.deb
 88b81222c02f5608a79629126c110b4a 3248708 doc extra 
ruby2.0-doc_2.0.0.299-1_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (GNU/Linux)

iEYEARECAAYFAlIsx5cACgkQDOM8kQ+cso+qcACcDu9I4B7xrXCToKx5i4SXs71e
vPsAnicNx5sV9+D76yrs3rznT6KXKlql
=xCuI
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to