Package: graphviz Version: 2.26.3-16 Severity: important Tags: patch Hi, please enable hardened build flags, patch attached.
The patch has also unveiled a missing format string in cmd/tools/gc.c This is fixed upstream in https://github.com/ellson/graphviz/commit/1b3b90cd1afd712d1d7153377531f758797a7535 which you will need to pull on top of my patch. Cheers, Moritz
diff -aur graphviz-2.26.3.orig/debian/rules graphviz-2.26.3/debian/rules --- graphviz-2.26.3.orig/debian/rules 2013-12-23 18:54:30.000000000 +0100 +++ graphviz-2.26.3/debian/rules 2014-01-05 06:01:22.328894982 +0100 @@ -39,6 +39,8 @@ CONFIG_SCRIPTS=config/config.guess lib/gd/config/config.guess libltdl/config.guess \ config/config.sub lib/gd/config/config.sub libltdl/config.sub +DEB_LDFLAGS_MAINT_APPEND = -Wl,--as-needed + configure: configure-stamp configure-stamp: dh_testdir @@ -74,7 +76,7 @@ --disable-sharp \ $(shell echo $(PYTHON_VERSIONS) | sed -e's,python,--enable-python,g' -e 's,\.,,g') \ $(CONFIGURE_LIBS) \ - LDFLAGS="-Wl,--as-needed" + $(shell dpkg-buildflags --export=configure) touch configure-stamp build-arch: build Nur in graphviz-2.26.3/debian: rules~.
