Bug#1026168: marked as done (Xwayland: enable full hardening flags (BINDNOW))
Your message dated Tue, 24 Jan 2023 07:54:13 +0000
with message-id <E1pKE8D-0077hU-GE@fasolo.debian.org>
and subject line Bug#1026168: fixed in xwayland 2:22.1.7-1
has caused the Debian Bug report #1026168,
regarding Xwayland: enable full hardening flags (BINDNOW)
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)
--
1026168: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1026168
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
- To: Debian Bug Tracking System <submit@bugs.debian.org>
- Subject: Xwayland: enable full hardening flags (BINDNOW)
- From: Christian Göttsche <cgzones@googlemail.com>
- Date: Thu, 15 Dec 2022 18:12:59 +0100
- Message-id: <CAJ2a_DdXacmuLzxGAzkiQewJebgaWOwkxfj2Q1kFZVW18EqA6Q@mail.gmail.com>
Source: xwayland
Version: 2:22.1.6-1
Tags: security,patch
Dear Maintaner,
please enable full hardening flags for Xwayland; in particular
currently the link feature BINDNOW[1] is missing.
As Xwayland is a long running daemon any potential startup costs are negligible.
[1]: https://wiki.debian.org/Hardening#DEB_BUILD_HARDENING_BINDNOW_.28ld_-z_now.29
diff --git a/debian/rules b/debian/rules
index 9cdefd5..3d384eb 100755
--- a/debian/rules
+++ b/debian/rules
@@ -2,6 +2,8 @@
include /usr/share/dpkg/pkg-info.mk
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all
+
SUPPORT = https://www.debian.org/support
%:
--- End Message ---
--- Begin Message ---
Source: xwayland
Source-Version: 2:22.1.7-1
Done: Timo Aaltonen <tjaalton@debian.org>
We believe that the bug you reported is fixed in the latest version of
xwayland, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1026168@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Timo Aaltonen <tjaalton@debian.org> (supplier of updated xwayland package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 24 Jan 2023 09:37:32 +0200
Source: xwayland
Built-For-Profiles: noudeb
Architecture: source
Version: 2:22.1.7-1
Distribution: unstable
Urgency: medium
Maintainer: Debian X Strike Force <debian-x@lists.debian.org>
Changed-By: Timo Aaltonen <tjaalton@debian.org>
Closes: 1025742 1026168
Changes:
xwayland (2:22.1.7-1) unstable; urgency=medium
.
* New upstream release.
* rules, install: Ship the .pc file. (Closes: #1025742)
* rules: Enable full hardening flags. (Closes: #1026168)
Checksums-Sha1:
9e39637ef7a533d0295d2a469951db8d5ec9dc49 2465 xwayland_22.1.7-1.dsc
fff49898bd8d574e772b2b7f31240721a83d35d2 1273476 xwayland_22.1.7.orig.tar.xz
528f03feaeed3ca652c24b893055c653f53de23a 195 xwayland_22.1.7.orig.tar.xz.asc
d619999fb7066f41161f31add2628e78186f2662 35576 xwayland_22.1.7-1.debian.tar.xz
cca7f103f7e8adcbb04a8d261788f40d50d1c65b 9910 xwayland_22.1.7-1_source.buildinfo
Checksums-Sha256:
8b1a27674b56c4ac928125aa1a0aaf5996b74baf35404ebcc7ef115c88802069 2465 xwayland_22.1.7-1.dsc
d53afac6c71953f5cf66d03d289dacd8961da5bd309c1dff125d5955d9db5f76 1273476 xwayland_22.1.7.orig.tar.xz
6b8fd1dd16873947a56985358c0e295b76f30fe86a6e27658595b889ee69b196 195 xwayland_22.1.7.orig.tar.xz.asc
c4cbfe9da6d564e42fc5bf398be30fea091e744d689bb7fde3b99f1a93a22373 35576 xwayland_22.1.7-1.debian.tar.xz
7a5b3c36360763b35d03d92738b3b06db907e52bd6d6efd0b53752830da5f961 9910 xwayland_22.1.7-1_source.buildinfo
Files:
1d6483c49bc3331d0ec60048ed1ecbc6 2465 x11 optional xwayland_22.1.7-1.dsc
a814892a54e15d17eb096b8c3dd88b5d 1273476 x11 optional xwayland_22.1.7.orig.tar.xz
890020b15c2a8387551131a87437aa3a 195 x11 optional xwayland_22.1.7.orig.tar.xz.asc
cb5d557e031af06752edb34fe1923eda 35576 x11 optional xwayland_22.1.7-1.debian.tar.xz
d2406b78a2a384a963ad64d14f8704cd 9910 x11 optional xwayland_22.1.7-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=H64/
-----END PGP SIGNATURE-----
--- End Message ---
Reply to: