Your message dated Sat, 19 May 2012 15:27:55 +0200
with message-id <>
and subject line Closing some hardening flags bugs
has caused the Debian Bug report #653354,
regarding Hardening build flags not enabled
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact

Debian Bug Tracking System
Contact with problems
--- Begin Message ---
Package: amarok
Version: 2.5.0-1
Severity: important

Contrary to what's stated in the changelog, the hardened build flags
are not enabled:

jmm@pisco:~$ dpkg -l amarok
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name                       Version                    Description
ii  amarok                     2.5.0-1                    easy to use media 
player based on the KDE Platform
jmm@pisco:~$ hardening-check /usr/bin/amarok
 Position Independent Executable: no, normal executable!
 Stack protected: no, not found!
 Fortify Source functions: unknown, no protectable libc functions used
 Read-only relocations: yes
 Immediate binding: no not found!

They're likely reset by cmake?


--- End Message ---
--- Begin Message ---
I'm closing these bugs because the involved packages are using the dh 
sequencer addon for kde. While cmake still doesn't respect CPPFLAGS, a 
workaround was added to the mentioned addon, so if you build any of the 
packages involved it will include the hardening flags.

At least one of the involved packages (amarok) was built before the workaround 
mentioned above was done. Therefore if you think it's really important to get 
any of them built with the hardening flags feel free to request a binNMU.

Attachment: signature.asc
Description: This is a digitally signed message part.

--- End Message ---
pkg-kde-extras mailing list

Reply via email to