Your message dated Sat, 12 Sep 2015 11:19:09 +0000
with message-id <[email protected]>
and subject line Bug#760100: fixed in pixman 0.33.2-1
has caused the Debian Bug report #760100,
regarding pixman: Simplify handling of dpkg-buildflags
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
760100: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=760100
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: pixman
Version: 0.32.6-3
Severity: wishlist
Tags: patch
X-Debbugs-Cc: Simon Ruderich <[email protected]>
Hi,
please consider applying the attached patchset, that simplifies the
handling of dpkg-buildflags, and makes the hardening flags more
future-proof.
Cheers,
--
intrigeri
>From 173bc48d419d88982f1ce8efe389aad51d114f8f Mon Sep 17 00:00:00 2001
From: intrigeri <[email protected]>
Date: Sun, 31 Aug 2014 16:53:25 +0000
Subject: [PATCH 1/3] Simplify hardening build flags handling. Thanks to Simon
Ruderich <[email protected]> for the patch.
Quoting Simon Ruderich <[email protected]>:
"There's no need to use dpkg-buildflags manually in debian/rules.
Debhelper with compat=9 automatically enables the hardening flags when
dh_auto_configure is used. So just by calling dh_auto_configure [...]
the hardening flags get automatically passed to the build system.
DEB_BUILD_MAINT_OPTIONS is also respected."
---
debian/rules | 3 +--
1 file changed, 1 insertion(+), 2 deletions(-)
diff --git a/debian/rules b/debian/rules
index a8100d2..99d67fc 100755
--- a/debian/rules
+++ b/debian/rules
@@ -11,8 +11,7 @@ override_dh_auto_configure:
# changelog entry:
LS_CFLAGS=" " dh_auto_configure -- --disable-gtk \
--disable-silent-rules \
- --disable-arm-iwmmxt \
- $(shell dpkg-buildflags --export=configure)
+ --disable-arm-iwmmxt
# Install in debian/tmp to retain control through dh_install:
override_dh_auto_install:
--
2.1.0
>From 7a54bf14aaab563d9dda268c14d8116a569385b8 Mon Sep 17 00:00:00 2001
From: intrigeri <[email protected]>
Date: Sun, 31 Aug 2014 16:54:54 +0000
Subject: [PATCH 2/3] Enable all hardening build flags. Thanks to Simon
Ruderich <[email protected]> for the patch.
Quoting Simon again: "It currently has the same effect as hardening=+bindnow,
but will automatically enable future hardening options and in case the package
will ever build binaries those are immediately protected with PIE as well."
---
debian/rules | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/debian/rules b/debian/rules
index 99d67fc..a0e0b9e 100755
--- a/debian/rules
+++ b/debian/rules
@@ -3,7 +3,7 @@
PACKAGE = libpixman-1-0
SHLIBS = 0.25.2
-export DEB_BUILD_MAINT_OPTIONS = hardening=+bindnow
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all
# Disable Gtk+ autodetection:
override_dh_auto_configure:
--
2.1.0
>From 90bc2385a5cda5ed95af24f8b2e183e550175d88 Mon Sep 17 00:00:00 2001
From: intrigeri <[email protected]>
Date: Sun, 31 Aug 2014 16:56:42 +0000
Subject: [PATCH 3/3] Update changelog.
Git-Dch: Ignore
---
debian/changelog | 10 ++++++++++
1 file changed, 10 insertions(+)
diff --git a/debian/changelog b/debian/changelog
index f5ebabf..ee81d21 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,13 @@
+pixman (0.32.6-4~1.gbp7a54bf) UNRELEASED; urgency=medium
+
+ ** SNAPSHOT build @7a54bf14aaab563d9dda268c14d8116a569385b8 **
+
+ * Simplify hardening build flags handling.
+ Thanks to Simon Ruderich <[email protected]> for the patch.
+ * Enable all hardening build flags. Thanks to Simon Ruderich too.
+
+ -- intrigeri <[email protected]> Sun, 31 Aug 2014 09:56:17 -0700
+
pixman (0.32.6-3) sid; urgency=medium
[ intrigeri ]
--
2.1.0
--- End Message ---
--- Begin Message ---
Source: pixman
Source-Version: 0.33.2-1
We believe that the bug you reported is fixed in the latest version of
pixman, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Julien Cristau <[email protected]> (supplier of updated pixman package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sat, 12 Sep 2015 13:08:02 +0200
Source: pixman
Binary: libpixman-1-0 libpixman-1-0-udeb libpixman-1-0-dbg libpixman-1-dev
Architecture: source
Version: 0.33.2-1
Distribution: sid
Urgency: medium
Maintainer: Debian X Strike Force <[email protected]>
Changed-By: Julien Cristau <[email protected]>
Description:
libpixman-1-0 - pixel-manipulation library for X and cairo
libpixman-1-0-dbg - pixel-manipulation library for X and cairo (debugging
symbols)
libpixman-1-0-udeb - pixel-manipulation library for X and cairo (udeb)
libpixman-1-dev - pixel-manipulation library for X and cairo (development
files)
Closes: 760100 786345
Changes:
pixman (0.33.2-1) sid; urgency=medium
.
[ Andreas Boll ]
* New upstream release candidate.
* Enable vmx on ppc64el (closes: #786345).
* Update Vcs-* fields.
* Add upstream url.
* Drop XC- prefix from Package-Type field.
* Bump standards version to 3.9.6.
.
[ intrigeri ]
* Simplify hardening build flags handling (closes: #760100).
Thanks to Simon Ruderich <[email protected]> for the patch.
* Enable all hardening build flags. Thanks to Simon Ruderich too.
Checksums-Sha1:
5a170e2977e7ea225ae6a53e3874a8475f43289c 2050 pixman_0.33.2-1.dsc
fa093856557737d0a2e570261bae0f3ae9bc6b45 846982 pixman_0.33.2.orig.tar.gz
f784f9be2f4c3c5db6987aea187eebb79dfa50ad 305928 pixman_0.33.2-1.diff.gz
Checksums-Sha256:
d79b492f52da8d6f9bf3b7432839f2d9fd6fc6894b7985f62e7179a901062609 2050
pixman_0.33.2-1.dsc
fcd593cc841ae7a060814b8b7335be5c5e378b8fbda5054bc423c29993e16007 846982
pixman_0.33.2.orig.tar.gz
0d9df8c05ef55a55beb90935b5266902c3980c0da42a8d1271b1928cf5a47fc7 305928
pixman_0.33.2-1.diff.gz
Files:
04119a9657e4a55da86a9795e5cd6491 2050 devel optional pixman_0.33.2-1.dsc
fdf5211a551ce1a6737bdf9049019df3 846982 devel optional
pixman_0.33.2.orig.tar.gz
cd48a122de9f3a09ef50f1f41c2050fc 305928 devel optional pixman_0.33.2-1.diff.gz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=I7Od
-----END PGP SIGNATURE-----
--- End Message ---
