Your message dated Tue, 21 Jun 2016 11:21:57 +0000
with message-id <[email protected]>
and subject line Bug#725360: fixed in fair 0.5.3-2
has caused the Debian Bug report #725360,
regarding please enable build hardening
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
725360: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725360
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: fair
Version: 0.5.3-1
Severity: normal
Tags: patch
Hoi Guus, Joost,
Attached patch enabled build-time hardening of the fair binaries. I have
tested this on dogars and donfan and found no issues.
Cheers,
Thijs
diff -Nru fair-0.5.3/debian/changelog fair-0.5.3/debian/changelog
--- fair-0.5.3/debian/changelog 2011-12-04 13:43:47.000000000 +0100
+++ fair-0.5.3/debian/changelog 2013-10-04 17:02:28.000000000 +0200
@@ -1,3 +1,10 @@
+fair (0.5.3-1.1) unstable; urgency=low
+
+ * Non-maintainer upload.
+ * Enable compiler hardening of built binaries.
+
+ -- Thijs Kinkhorst <[email protected]> Fri, 04 Oct 2013 17:01:47 +0200
+
fair (0.5.3-1) unstable; urgency=low
* New upstream release.
diff -Nru fair-0.5.3/debian/control fair-0.5.3/debian/control
--- fair-0.5.3/debian/control 2011-12-04 13:43:52.000000000 +0100
+++ fair-0.5.3/debian/control 2013-10-04 17:00:15.000000000 +0200
@@ -3,7 +3,7 @@
Priority: extra
Maintainer: Guus Sliepen <[email protected]>
Uploaders: Joost van Baal <[email protected]>
-Build-Depends: debhelper (>= 5), autotools-dev, libavl-dev (>= 0.3.5-3)
+Build-Depends: debhelper (>= 5), autotools-dev, libavl-dev (>= 0.3.5-3), dpkg-dev (>= 1.16.1~)
Standards-Version: 3.9.2
Package: fair
diff -Nru fair-0.5.3/debian/rules fair-0.5.3/debian/rules
--- fair-0.5.3/debian/rules 2011-12-04 13:52:35.000000000 +0100
+++ fair-0.5.3/debian/rules 2013-10-04 17:00:49.000000000 +0200
@@ -9,6 +9,9 @@
DEB_HOST_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE)
DEB_BUILD_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE)
+DEB_BUILD_MAINT_OPTIONS = hardening=+all
+DPKG_EXPORT_BUILDFLAGS = 1
+include /usr/share/dpkg/buildflags.mk
config.status: configure
dh_testdir
@@ -19,7 +22,7 @@
ifneq "$(wildcard /usr/share/misc/config.guess)" ""
cp -f /usr/share/misc/config.guess config.guess
endif
- ./configure --host=$(DEB_HOST_GNU_TYPE) --build=$(DEB_BUILD_GNU_TYPE) --prefix=/usr --mandir=\$${prefix}/share/man --infodir=\$${prefix}/share/info --sysconfdir=/etc CFLAGS="$(CFLAGS)" LDFLAGS="-Wl,-z,defs"
+ ./configure --host=$(DEB_HOST_GNU_TYPE) --build=$(DEB_BUILD_GNU_TYPE) --prefix=/usr --mandir=\$${prefix}/share/man --infodir=\$${prefix}/share/info --sysconfdir=/etc CFLAGS="$(CFLAGS)" LDFLAGS="$(LDFLAGS) -Wl,-z,defs"
build: build-arch build-indep
--- End Message ---
--- Begin Message ---
Source: fair
Source-Version: 0.5.3-2
We believe that the bug you reported is fixed in the latest version of
fair, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Guus Sliepen <[email protected]> (supplier of updated fair package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 21 Jun 2016 12:55:06 +0200
Source: fair
Binary: fair
Architecture: source amd64
Version: 0.5.3-2
Distribution: unstable
Urgency: medium
Maintainer: Guus Sliepen <[email protected]>
Changed-By: Guus Sliepen <[email protected]>
Description:
fair - high availability load balancer for TCP connections
Closes: 725360
Changes:
fair (0.5.3-2) unstable; urgency=medium
.
* Convert debian/rules to dh.
* Bump Standards-Version and debian/compat.
- This also enables hardening flags. Closes: #725360
* Source /lib/lsb/init-functions in the init script.
Checksums-Sha1:
c6795e09ee0daf393b7a5d3502729d80ce8e173b 1691 fair_0.5.3-2.dsc
a2efaa17adf8847d6d7e268c35d9d6322d3bf79f 4464 fair_0.5.3-2.debian.tar.xz
d85482391634d488e66b5288beb752bdd44e3937 67648 fair-dbgsym_0.5.3-2_amd64.deb
d1ab28d2fdd0d4200d81bd9e2452cde90111ca38 31042 fair_0.5.3-2_amd64.deb
Checksums-Sha256:
63c2e99c5be175fd3fd39d773cd17317f7a30eaf3795eb58c77649af749d0ac4 1691
fair_0.5.3-2.dsc
a91ed7ea9ab008cd5e53de85ef6ae76a6b931d881e8049bbd0fa65d051f5e31c 4464
fair_0.5.3-2.debian.tar.xz
a18308645502cc858e3358fd454118c6105458b4fce9e3e1bd6a276ac99be3f3 67648
fair-dbgsym_0.5.3-2_amd64.deb
222c873d8f065a3674a6b4c038896db6349f9915996347f1f8f64688f86f2284 31042
fair_0.5.3-2_amd64.deb
Files:
f98cdffcb87eb69f4085acecaad21c60 1691 net extra fair_0.5.3-2.dsc
ea3795abc3bd3412a14ff95854581f04 4464 net extra fair_0.5.3-2.debian.tar.xz
cb9ff3f406eaa10df1fb71bbec8042ca 67648 debug extra
fair-dbgsym_0.5.3-2_amd64.deb
97154473814e43745fee30c3e67e2d81 31042 net extra fair_0.5.3-2_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=M3Bt
-----END PGP SIGNATURE-----
--- End Message ---
