Bug#687704: speex: Hardening flags missing

2012-09-19 Thread Simon Ruderich
On Mon, Sep 17, 2012 at 11:26:44PM +0930, Ron wrote: The following flag is missing: -Werror=format-security Uh. That's not a hardening option. That's road spikes for people who blindly applied dpkg-buildflags and didn't actually bother to look at their build logs ... It's not really

Bug#687704: speex: Hardening flags missing

2012-09-17 Thread Ron
On Sun, Sep 16, 2012 at 07:03:27PM +0200, Simon Ruderich wrote: On Sun, Sep 16, 2012 at 08:10:12PM +0930, Ron wrote: On Sat, Sep 15, 2012 at 12:53:53PM +0200, Simon Ruderich wrote: Some hardening flags (format flags and relro on some archs) are still missing because they are not set in

Bug#687704: speex: Hardening flags missing

2012-09-16 Thread Simon Ruderich
On Sun, Sep 16, 2012 at 08:10:12PM +0930, Ron wrote: On Sat, Sep 15, 2012 at 12:53:53PM +0200, Simon Ruderich wrote: Some hardening flags (format flags and relro on some archs) are still missing because they are not set in debian/rules. Do you have some actual evidence of that? Hello Ron,

Bug#687704: speex: Hardening flags missing

2012-09-15 Thread Simon Ruderich
Package: speex Version: 1.2~rc1-6 Severity: normal Tags: patch Dear Maintainer, Some hardening flags (format flags and relro on some archs) are still missing because they are not set in debian/rules. For more hardening information please have a look at [1], [2] and [3]. The attached patch fixes