Accepted hardening-wrapper 2.1~bpo60+1 (source all amd64)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 13 Apr 2012 21:54:19 +0200
Source: hardening-wrapper
Binary: hardening-wrapper hardening-includes
Architecture: source amd64 all
Version: 2.1~bpo60+1
Distribution: squeeze-backports
Urgency: low
Maintainer: Package Hardening <hardening-discuss@lists.alioth.debian.org>
Changed-By: Luca Falavigna <dktrkranz@debian.org>
Description:
hardening-includes - Makefile for enabling compiler flags for security hardening
hardening-wrapper - Compiler wrapper to enable security hardening flags
Closes: 587358 592846 592847 596150 635642 664495 664862 666471 666520 666895
Changes:
hardening-wrapper (2.1~bpo60+1) squeeze-backports; urgency=low
.
* Rebuild for squeeze-backports.
.
hardening-wrapper (2.1) unstable; urgency=low
.
* hardening-check:
- handle _local suffix for non-ELF i386 objects (Closes: 666895).
- add "-h" for "--help".
- sort and indent libc function list for easier review.
* Makefile: retain newlines when generating libc function list.
.
hardening-wrapper (2.0) unstable; urgency=low
.
* hardening-check: add color, based on a patch from Simon Ruderich.
* hardening-check: fix lintian tag for non-PIE ELF to "no-pie".
* debian/rules, debian/hardening-wrapper.{prerm,postinst}: add gcc-4.7
to the diversion list (Closes: 666520).
* debian/control:
- fix Vcs-Browser link for loggerhead (Closes: 664495).
- add Multiarch tag to hardening-includes (Closes: 666471).
* Makefile, debian/*: convert to dh(1).
* hardening-check: generate list of libc functions at build time.
* hardening-check, tests/Makefile.common: add support for scanning
object archives for stack-protector and fortify (Closes: 664862).
.
hardening-wrapper (1.36) unstable; urgency=low
.
* hardening-check: fix function-finder to accept IFUNC too, improve
reporting slightly, improve manpage to explain false alarms.
.
hardening-wrapper (1.35) unstable; urgency=low
.
* debian/control: switch to "optional" priority so lintian can depend
on hardening-includes.
* hardening-check: rewrite in Perl, add "--lintian" mode, to support
fixing bug 650536.
.
hardening-wrapper (1.34) unstable; urgency=low
.
* debian/control: update VCS tags for bzr.
* hardening{-check,.make}: correct documentation from -O2 to -O1.
* hardened-{cc,ld}, hardening.make, debian/rules: use DEB_HOST_ARCH instead
of of DEB_HOST_ARCH_CPU for behavioral defaults (Closes: 635642).
.
hardening-wrapper (1.33) unstable; urgency=low
.
* debian/control:
- bump to standards 3.9.2; no changes needed
- hardening-wrapper: mark as Multi-Arch: foreign for build sanity.
* debian/source/format: mark as 3.0 native.
.
hardening-wrapper (1.32) unstable; urgency=low
.
* debian/rules, debian/hardening-wrapper.{prerm,preinst,postinst}:
remove gcc-4.1 diversions since it has been removed from unstable.
* hardened-cc, hardening.make: add "-Werror=format-security" by default
(Closes: #587358).
* tests/Makefile.common, tests/format.c: add test for newly added
"-Werror=format-security" default option.
* hardened-cc, hardening.make: add "--param ssp-buffer-size=4" by
default to catch smaller character arrays.
* tests/Makefile.common, tests/ssp-buffer-size-{protect,skip}.c:
add tests for newly added "--param ssp-buffer-size=4" default.
* debian/README.Debian: updated to include newly added options.
* hardened-cc: disable -fstack-protector when -ffreestanding used.
* hardening.make: provide examples for working around build-time
collisions between "-fPIE" and "-fPIC" (Closes: #596150).
.
hardening-wrapper (1.31) unstable; urgency=low
.
* tests/Makefile.common: do not require @@GLIBC suffix for nm tests.
* tests/Makefile.wrapper: include symlink for ld.gold testing.
* hardening-check: improve hardening-check to parse BIND_NOW also from
the FLAGS dynamic section.
.
hardening-wrapper (1.30) unstable; urgency=low
.
* debian/README.Debian: update for gcc versions, include minimal
notes on hardening-includes (Closes: 592847, 592846).
* debian/rules, debian/hardening-wrapper.{prerm,postinst}: add gcc-4.6
to the diversion list.
* debian/control: remove binutils-multiarch conflict now that ld.bfd
is no longer diverted.
Checksums-Sha1:
b2a59e18233009a552ebd80927df37c5871a865c 1758 hardening-wrapper_2.1~bpo60+1.dsc
c8b450b9ea1d39947b281cba1d830a9b1dd58f18 22069 hardening-wrapper_2.1~bpo60+1.tar.gz
1a326967dceff749cb25fa3adf5637371e274933 13448 hardening-wrapper_2.1~bpo60+1_amd64.deb
0d4d2837d94f6fe678623eaecc7717cefe3d0156 17558 hardening-includes_2.1~bpo60+1_all.deb
Checksums-Sha256:
0f6d15cd6b5b55609fd8bb1d631ace1969d6411cc888c904ee4f01e6827c837f 1758 hardening-wrapper_2.1~bpo60+1.dsc
90d53460a95b588aa805d629fbce1221df415dd842b3a367aedbb6ffffbb3f7e 22069 hardening-wrapper_2.1~bpo60+1.tar.gz
790791f5b720dc17cef6bd0c1595966d899959fa6d6358310fa035487167d56e 13448 hardening-wrapper_2.1~bpo60+1_amd64.deb
41cf09e8aa1b4dbb4fd216e3cd98e0268a8b485a8f3311cabf61eb27d3572eb4 17558 hardening-includes_2.1~bpo60+1_all.deb
Files:
65f773e4df661f7e5d479b5525f51d18 1758 devel optional hardening-wrapper_2.1~bpo60+1.dsc
5045fed5357433421eb3046620d379fc 22069 devel optional hardening-wrapper_2.1~bpo60+1.tar.gz
1dc009bafd805794c60c960eab1fbf36 13448 devel optional hardening-wrapper_2.1~bpo60+1_amd64.deb
736aea8a7f705b5b874acc21e39d7051 17558 devel optional hardening-includes_2.1~bpo60+1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)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=vaag
-----END PGP SIGNATURE-----
Accepted:
hardening-includes_2.1~bpo60+1_all.deb
to main/h/hardening-wrapper/hardening-includes_2.1~bpo60+1_all.deb
hardening-wrapper_2.1~bpo60+1.dsc
to main/h/hardening-wrapper/hardening-wrapper_2.1~bpo60+1.dsc
hardening-wrapper_2.1~bpo60+1.tar.gz
to main/h/hardening-wrapper/hardening-wrapper_2.1~bpo60+1.tar.gz
hardening-wrapper_2.1~bpo60+1_amd64.deb
to main/h/hardening-wrapper/hardening-wrapper_2.1~bpo60+1_amd64.deb
Reply to: