Your message dated Sun, 29 May 2016 13:24:03 +0000 with message-id <[email protected]> and subject line Bug#823967: fixed in libapache2-mod-perl2 2.0.9-6 has caused the Debian Bug report #823967, regarding libapache2-mod-perl2: hardening-no-relro mod_perl.so to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 823967: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823967 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Package: libapache2-mod-perl2 Version: 2.0.9-4 As noticed by lintian, mod_perl.so is not linked with -Wl,-z,relro. W: libapache2-mod-perl2: hardening-no-relro usr/lib/apache2/modules/mod_perl.so It looks like we're currently using the debhelper default behaviour where linker flags are passed to Makefile.PL in an LD=[...] argument. This normally works with ExtUtils::MakeMaker, but apparently not with the libapache2-mod-perl2 build system. I see Apache2::Build::ldopts uses my $ld = $self->perl_config('ld'); so that part probably needs some work. Filing this to track the issue, but I'm not promising a patch any time soon... -- Niko Tyni [email protected]
--- End Message ---
--- Begin Message ---Source: libapache2-mod-perl2 Source-Version: 2.0.9-6 We believe that the bug you reported is fixed in the latest version of libapache2-mod-perl2, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [email protected], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Damyan Ivanov <[email protected]> (supplier of updated libapache2-mod-perl2 package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 29 May 2016 12:46:55 +0000 Source: libapache2-mod-perl2 Binary: libapache2-mod-perl2 libapache2-mod-perl2-dev libapache2-mod-perl2-doc Architecture: source Version: 2.0.9-6 Distribution: unstable Urgency: medium Maintainer: Debian Perl Group <[email protected]> Changed-By: Damyan Ivanov <[email protected]> Closes: 823967 825430 Description: libapache2-mod-perl2-dev - Integration of perl with the Apache2 web server - development fil libapache2-mod-perl2-doc - Integration of perl with the Apache2 web server - documentation libapache2-mod-perl2 - Integration of perl with the Apache2 web server Changes: libapache2-mod-perl2 (2.0.9-6) unstable; urgency=medium . [ gregor herrmann ] * debian/copyright: change Copyright-Format 1.0 URL to HTTPS. . [ Damyan Ivanov ] * replace usage of 'prename' with 'file-rename' and add explicit build dependency on 'rename' (Closes: #825430) * rules: pass CPPFLAGS to the build * refresh patches to apply cleanly * Patch Apache2::Build to add LDFLAGS to ldopts() result (Closes: #823967) * Claim conformance with Policy 3.9.6 Checksums-Sha1: dbf2a6916872f0d65ee7eec5501fe03039e901dc 2647 libapache2-mod-perl2_2.0.9-6.dsc 88635ca3885b1e8e060729dff4e3ef74d6d38537 29304 libapache2-mod-perl2_2.0.9-6.debian.tar.xz Checksums-Sha256: 2345406ca4fd2a627f8c72f22bdd9bdfba5c8ffb047ece6515c1169981739f08 2647 libapache2-mod-perl2_2.0.9-6.dsc 6cebe881892c59db68a4424fa1ed206d6dbb93d9738cdc5535258e666d18074d 29304 libapache2-mod-perl2_2.0.9-6.debian.tar.xz Files: 308a8a54652ba4fd43da20114c8e2dd0 2647 httpd optional libapache2-mod-perl2_2.0.9-6.dsc e001946b8577f4af8bbd4bb8863c509c 29304 httpd optional libapache2-mod-perl2_2.0.9-6.debian.tar.xz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJXSudjAAoJENu+nU2Z0qAEgBgQAIPxI1IQRmt4zRv9Uxg+HCyI QyzSRWk/TmUNq4mQTItL71eCFMngJ67D/MuvmR/CRyesVfXv743aCirzjR1+zYfU U3K1BsFGTTnmj8Wc3wtb1lbtz/vdzjxKcvVCcy1jmqSdXeMFXTiVyOMKpzQYO49Q E5CJ6Z+icjpm2rZVM7RhY5y9A2rTqjPwhG6rAThdb1uQQCz59G+97EYr5xjCx4YH dVJEfLtSNvcTAmpNHuIDHtZ89R8q3EE0Spl2//WWDHYNF34Y4WFxfX61Ol6p1Eoc cm8jTRpumXBn58ZbutAzwHkdB1cgdCaGSFYsU9j7Yumo/uc5NypdmlLMFkCpm/lb lLwfO4EzKgPi64VgHvkXT3gi0XJQ/ptY+4XS8nvk/muCOP79QOJ74VosuyO9ptrj oiKLWFcBXLcwQT2FSG8LOEIu5N2GUar1UVLSHCbMEP8QHZG5uVYOmIEXtn+QVAmr us7CSmpdSzEdIwCD2mOYaTW2SEmy61in/Qm/3hN2TU/4vKZr2+QVT27mJwEB2Tz9 +W5Qodl325ASTDZgedYyZ4dqjpgOhTRB5FOlmdCizuUtAVfeLRshf1KJj/4p9puN nhKaWPTwwLj3cQB20jjX1hXioeGA07JtV3jAEtZrQGuSnDxu6+aUbzvGdssSIMMH sK9gL1ZMJB1qe1vv0QGD =sS0A -----END PGP SIGNATURE-----
--- End Message ---
