Your message dated Mon, 13 Jan 2014 03:24:47 +0000
with message-id <[email protected]>
and subject line Bug#734918: fixed in subversion 1.8.5-1
has caused the Debian Bug report #734918,
regarding Please enable hardened build flags
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
734918: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=734918
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: subversion
Version: 1.7.14-1+b1
Severity: important
Tags: patch

Hi,
please enable hardened build flags for Subversion. Patch attached.

Cheers,
        Moritz
diff -aur subversion-1.7.14.orig/debian/rules subversion-1.7.14/debian/rules
--- subversion-1.7.14.orig/debian/rules	2014-01-05 15:36:02.000000000 +0100
+++ subversion-1.7.14/debian/rules	2014-01-05 15:42:09.087084280 +0100
@@ -85,15 +85,15 @@
 		--with-ruby-sitedir=/usr/lib/ruby \
 		--with-swig=/usr \
 		--with-kwallet \
+		$(shell dpkg-buildflags --export=configure) \
 		--with-gnome-keyring
 
 ifdef DEB_OPT_DEBUG
   confflags+= --enable-debug 
 endif
-export EXTRA_CFLAGS := -O2
-ifdef DEB_OPT_NOOPT
-  EXTRA_CFLAGS := -O0
-endif
+
+# dpkg-buildflags respects "noopt"
+export EXTRA_CFLAGS := `dpkg-buildflags --get CFLAGS`
 
 export DH_OPTIONS
 ifdef DEB_OPT_WITH_JAVAHL
Nur in subversion-1.7.14/debian: rules~.

--- End Message ---
--- Begin Message ---
Source: subversion
Source-Version: 1.8.5-1

We believe that the bug you reported is fixed in the latest version of
subversion, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
James McCoy <[email protected]> (supplier of updated subversion package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 12 Jan 2014 19:48:33 -0500
Source: subversion
Binary: subversion libsvn1 libsvn-dev libsvn-doc libapache2-mod-svn 
libapache2-svn python-subversion subversion-tools libsvn-java libsvn-perl 
ruby-svn libsvn-ruby1.8
Architecture: source all amd64
Version: 1.8.5-1
Distribution: unstable
Urgency: low
Maintainer: Peter Samuelson <[email protected]>
Changed-By: James McCoy <[email protected]>
Description: 
 libapache2-mod-svn - Apache Subversion server modules for Apache httpd
 libapache2-svn - Apache Subversion server modules for Apache httpd (dummy 
package)
 libsvn-dev - Development files for Apache Subversion libraries
 libsvn-doc - Developer documentation for libsvn
 libsvn-java - Java bindings for Apache Subversion
 libsvn-perl - Perl bindings for Apache Subversion
 libsvn-ruby1.8 - Ruby bindings for Apache Subversion (dummy package)
 libsvn1    - Shared libraries used by Apache Subversion
 python-subversion - Python bindings for Apache Subversion
 ruby-svn   - Ruby bindings for Apache Subversion
 subversion - Advanced version control system
 subversion-tools - Assorted tools related to Apache Subversion
Closes: 273874 507430 566148 601544 654172 678224 687291 690815 722393 725787 
734163 734918
Changes: 
 subversion (1.8.5-1) unstable; urgency=low
 .
   [ Peter Samuelson ]
   * New upstream release.  (Closes: #725787) Rediff patches:
     - Remove apr-abi1 (applied upstream), rename apr-abi2 to apr-abi
     - Remove loosen-sqlite-version-check (shouldn't be needed)
     - Remove java-osgi-metadata (applied upstream)
     - svnmucc prompts for a changelog if none is provided. (Closes: #507430)
     - Remove fix-bdb-version-detection, upstream uses "apu-config --dbm-libs"
     - Remove ruby-test-wc (applied upstream)
     - Fix “svn diff -r N file” when file has svn:mime-type set.
       (Closes: #734163)
     - Support specifying an encoding for mod_dav_svn's environment in which
       hooks are run.  (Closes: #601544)
     - Fix ordering of “svnadmin dump” paths with certain APR versions.
       (Closes: #687291)
     - Provide a better error message when authentication fails with an
       svn+ssh:// URL.  (Closes: #273874)
     - Updated Polish translations.  (Closes: #690815)
 .
   [ James McCoy ]
   * Remove all traces of libneon, replaced by libserf.
   * patches/sqlite_3.8.x_workaround: Upstream fix for wc-queries-test test
     failurse.
   * Run configure with --with-apache-libexecdir, which allows removing part of
     patches/rpath.
   * Re-enable auth-test as upstream has fixed the problem of picking up
     libraries from the environment rather than the build tree.
     (Closes: #654172)
   * Point LD_LIBRARY_PATH at the built auth libraries when running the svn
     command during the build.  (Closes: #678224)
   * Add a NEWS entry describing how to configure mod_dav_svn to understand
     UTF-8.  (Closes: #566148)
   * Remove ancient transitional package, libsvn-ruby.
   * Enable compatibility with Sqlite3 versions back to Wheezy.
   * Enable hardening flags.  (Closes: #734918)
   * patches/build-fixes: Enable verbose build logs.
   * Build against the default ruby version.  (Closes: #722393)
Checksums-Sha1: 
 8170720208b26aaf798d163ee5859022107c6341 2787 subversion_1.8.5-1.dsc
 2859de4cdce4494cecc7a71df4dfbf7a765d7759 9226700 subversion_1.8.5.orig.tar.gz
 649f9489b4ec7129a7f3f41bd250026664b66b1f 270170 subversion_1.8.5-1.diff.gz
 9635bda5c41a5db9aee19d80056422a1794bf596 1395800 libsvn-doc_1.8.5-1_all.deb
 c29e96317387c432a88f64f72b586fde4891f3c2 120094 libapache2-svn_1.8.5-1_all.deb
 5496d29173522bbc2d9a00264bf2ccf21198db5d 269956 
subversion-tools_1.8.5-1_all.deb
 6ddebc92e0551972dcc101736f4cfc2185284bd1 960 libsvn-ruby1.8_1.8.5-1_all.deb
 0b0bf953056de8e6221efe3b9cc3ee8eff165cf0 926102 subversion_1.8.5-1_amd64.deb
 2102c189e91d4efbffefdd0f6a5f4345573d20e8 1029402 libsvn1_1.8.5-1_amd64.deb
 afe37036bceb967f7e82c5cb0aedbe72f9a9cc17 1171496 libsvn-dev_1.8.5-1_amd64.deb
 e1ccdcd78ae353ae1f807e288f0b41b5b9f9f05e 193116 
libapache2-mod-svn_1.8.5-1_amd64.deb
 13b3a3f39ad1077d14fdd66fea26607a19f298ad 628848 
python-subversion_1.8.5-1_amd64.deb
 c61c1203c9bf2c81f033168c49305ecd940f8880 356542 libsvn-java_1.8.5-1_amd64.deb
 92e8b6b2a56b6a021153d12b21fc4cc751329dc0 905036 libsvn-perl_1.8.5-1_amd64.deb
 59cac31da122dfacd316ab91405d3279c1949668 537200 ruby-svn_1.8.5-1_amd64.deb
Checksums-Sha256: 
 7a7fc9ff47d17e427a1ebc61f6561e4f9909df4056486415789370b627596c46 2787 
subversion_1.8.5-1.dsc
 9ac12cef7a66652080f76bd1c387ea9704b93b2078ea458874dd05ec5f2dbcd5 9226700 
subversion_1.8.5.orig.tar.gz
 8ccb0b5f7097511a60d5f04e7f70303a52295e838e5854b8c70fd3dbcbf76668 270170 
subversion_1.8.5-1.diff.gz
 d200d6132e62d14d11c102af4d546f028b485b4ece290c8accdd90b9f091defe 1395800 
libsvn-doc_1.8.5-1_all.deb
 a534bfcbaf6dbd3d5ce5c7a19de643d51477e52ec5e680f6488ff3dd6b78897e 120094 
libapache2-svn_1.8.5-1_all.deb
 08a4458ed0c3231e65a0d8a2ba1251227b552c5965a7807d8cbcba6e6a070cba 269956 
subversion-tools_1.8.5-1_all.deb
 3dad912040ab82930c7e11f5d9da5fae22b54865ea2a1b8fa8d8d91632e5e2d6 960 
libsvn-ruby1.8_1.8.5-1_all.deb
 e9fd39fc6cf9ef3ce8de8e24183de8b02209c57c3c9b2e1aaa005d99ebc50212 926102 
subversion_1.8.5-1_amd64.deb
 3bb4c070d5a9cbdcfb30919697c4c3afe651cc437f90113790e01d7f49b22a8f 1029402 
libsvn1_1.8.5-1_amd64.deb
 afcc98fc19f0158f4a08537fdc846f17c5b95c23d7632520ad5853f572ba8569 1171496 
libsvn-dev_1.8.5-1_amd64.deb
 a1dc56b4c20c101ae4bb1861c327c2e09af172dc8af0bbf3878cdfd64b6e5344 193116 
libapache2-mod-svn_1.8.5-1_amd64.deb
 b3d8e628c6517c8d5d0980414058358affeeb3655c194f747801a7951fd2bc2e 628848 
python-subversion_1.8.5-1_amd64.deb
 489946956fefe624e1584e31ece81fd0c1f01cd78a02d185a47e9b1ab201365a 356542 
libsvn-java_1.8.5-1_amd64.deb
 66b40e2ca22a3946d6478ca4e364bdac0d8e6d0afe820b5581712f0c1a148fc7 905036 
libsvn-perl_1.8.5-1_amd64.deb
 e850062ba71d26f5867a51051a4325bdbe9e9a30554a529fa7f070f4a06983e2 537200 
ruby-svn_1.8.5-1_amd64.deb
Files: 
 ea845320616f557a72ab184ed17b659b 2787 vcs optional subversion_1.8.5-1.dsc
 64742e4692af5d5f170ebc21215c36b4 9226700 vcs optional 
subversion_1.8.5.orig.tar.gz
 0239025e65091a96f6148fb8744cdbea 270170 vcs optional subversion_1.8.5-1.diff.gz
 7ceb2a9329976d0e4c0ba91ffbcbb978 1395800 doc extra libsvn-doc_1.8.5-1_all.deb
 440acf3a54ba9b5b73d08d69596fb943 120094 oldlibs extra 
libapache2-svn_1.8.5-1_all.deb
 86a9ff4c03313d370f4356e89c1a5e8e 269956 vcs extra 
subversion-tools_1.8.5-1_all.deb
 62abffdd01e0b17e50859ab721d5a27c 960 oldlibs extra 
libsvn-ruby1.8_1.8.5-1_all.deb
 4883fcadc3108a9339e729885df1b630 926102 vcs optional 
subversion_1.8.5-1_amd64.deb
 2c121e6fe8fa6569ec5c9c1a128d0c84 1029402 libs optional 
libsvn1_1.8.5-1_amd64.deb
 d6f62990ae9e6e170001b91cdca2f37a 1171496 libdevel extra 
libsvn-dev_1.8.5-1_amd64.deb
 65d8c32f0ef3a4b34dd06feab1cc2ad9 193116 httpd optional 
libapache2-mod-svn_1.8.5-1_amd64.deb
 cae86b4dd928c09aab15da2cd9f15002 628848 python optional 
python-subversion_1.8.5-1_amd64.deb
 c30c8e8f3c27429d86fd335b63fe408c 356542 java optional 
libsvn-java_1.8.5-1_amd64.deb
 6bcb58742e619358a698f74a06873bdc 905036 perl optional 
libsvn-perl_1.8.5-1_amd64.deb
 b3daaf8389eaec396b31c6f94ee67468 537200 ruby optional 
ruby-svn_1.8.5-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=Xybn
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to