Bug#920072: marked as done (ITA: blhc -- build log hardening check)
Your message dated Thu, 24 Jan 2019 01:34:07 +0000
with message-id <E1gmTuB-000HFu-VM@fasolo.debian.org>
and subject line Bug#920072: fixed in blhc 0.09-1
has caused the Debian Bug report #920072,
regarding ITA: blhc -- build log hardening check
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)
--
920072: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=920072
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: wnpp
The current maintainer of blhc, Jari Aalto <jari.aalto@cante.net>,
is apparently not active anymore. Therefore, I orphan this package now.
Maintaining a package requires time and skills. Please only adopt this
package if you will have enough time and attention to work on it.
If you want to be the new maintainer, please see
https://www.debian.org/devel/wnpp/#howto-o for detailed
instructions how to adopt a package properly.
Some information about this package:
Package: blhc
Binary: blhc
Version: 0.09-0.1
Maintainer: Jari Aalto <jari.aalto@cante.net>
Build-Depends: debhelper (>= 11), libmodule-build-perl
Architecture: all
Standards-Version: 4.2.1
Format: 3.0 (quilt)
Files:
60da76ebe2ca664b10d29e9f10780eb4 1852 blhc_0.09-0.1.dsc
c0c008113cb31414bef1216fc1e66912 68314 blhc_0.09.orig.tar.gz
034d9bd778bafc0ab7e7861bae391117 10700 blhc_0.09-0.1.debian.tar.xz
Vcs-Browser: https://salsa.debian.org/debian/blhc
Vcs-Git: https://salsa.debian.org/debian/blhc.git/
Checksums-Sha256:
e8ca5d92b5bf8da4fc22d647e17b743986a598a5a1d0b33cb02ef9c727a9862d 1852 blhc_0.09-0.1.dsc
2fd1b9d31c760189d19bfec7d63599397caed78dea59bfb11b815baaff3160f6 68314 blhc_0.09.orig.tar.gz
cd7e7d0efbc20c082ecbf618a8c15c1752305cdfc062f4b162142c1a1a1472e9 10700 blhc_0.09-0.1.debian.tar.xz
Homepage: https://ruderich.org/simon/blhc
Package-List:
blhc deb utils optional arch=all
Testsuite: autopkgtest
Testsuite-Triggers: build-essential
Directory: pool/main/b/blhc
Priority: source
Section: utils
Package: blhc
Binary: blhc
Version: 0.07+20161116+gitbf41976-1
Maintainer: Jari Aalto <jari.aalto@cante.net>
Build-Depends: debhelper (>= 10), libmodule-build-perl
Architecture: all
Standards-Version: 3.9.8
Format: 3.0 (quilt)
Files:
645557b06d90b2cf7fc59fdf8ed9b930 1950 blhc_0.07+20161116+gitbf41976-1.dsc
847d038174c9777b0ba51b90df2d9b3c 51027 blhc_0.07+20161116+gitbf41976.orig.tar.gz
6abc99ee566a6b35a16572abebc56d0a 3472 blhc_0.07+20161116+gitbf41976-1.debian.tar.xz
Vcs-Browser: https://anonscm.debian.org/cgit/collab-maint/blhc.git
Vcs-Git: https://anonscm.debian.org/git/collab-maint/blhc.git
Checksums-Sha256:
9669b6bef50d202a3c8235e535fbe86a1ddc351514d6928a10f1339ae903649f 1950 blhc_0.07+20161116+gitbf41976-1.dsc
c0851f994c9e47ffe0dc4face3c8b40b98ebd162431ad493efa9f587704f46ae 51027 blhc_0.07+20161116+gitbf41976.orig.tar.gz
1e9bd77defc51968e4e5bb86aff8b4bd055067f84ec9d9b1e8d9135a69b71efd 3472 blhc_0.07+20161116+gitbf41976-1.debian.tar.xz
Homepage: https://ruderich.org/simon/blhc
Package-List:
blhc deb utils optional arch=all
Directory: pool/main/b/blhc
Priority: source
Section: utils
Package: blhc
Version: 0.09-0.1
Installed-Size: 82
Maintainer: Jari Aalto <jari.aalto@cante.net>
Architecture: all
Depends: libdpkg-perl
Description-en: build log hardening check
Perl tool which checks build logs for missing hardening
flags. Hardening flags enable additional security features in the
compiler to prevent e.g. stack overflows, format string
vulnerabilities, GOT overwrites, etc. See e.g.
<http://wiki.debian.org/ReleaseGoals/SecurityHardeningBuildFlags>.
.
Because most build systems are quite complicated there are many
places where compiler flags from the environment might be ignored.
The parser verifies that all compiler commands use the correct
hardening flags and thus all hardening features are correctly used.
.
It's designed to check build logs generated by Debian's
dpkg-buildpackage (or tools using dpkg-buildpackage like pbuilder or
the official buildd build logs) to help maintainers detect missing
hardening flags in their packages.
Description-md5: 677f2a00e31e316c282b8bf13f2fbe19
Multi-Arch: foreign
Homepage: https://ruderich.org/simon/blhc
Section: utils
Priority: optional
Filename: pool/main/b/blhc/blhc_0.09-0.1_all.deb
Size: 28968
MD5sum: 2dd026728c4289bf77c7bcf1c8555ee9
SHA256: b8c87c3287bcd32f36c3a6a30296bd8260be0d39908d4f68a45b395ebdb1285e
Package: blhc
Version: 0.07+20161116+gitbf41976-1
Installed-Size: 76
Maintainer: Jari Aalto <jari.aalto@cante.net>
Architecture: all
Depends: libdpkg-perl
Description-en: build log hardening check
Perl tool which checks build logs for missing hardening
flags. Hardening flags enable additional security features in the
compiler to prevent e.g. stack overflows, format string
vulnerabilities, GOT overwrites, etc. See e.g.
<http://wiki.debian.org/ReleaseGoals/SecurityHardeningBuildFlags>.
.
Because most build systems are quite complicated there are many
places where compiler flags from the environment might be ignored.
The parser verifies that all compiler commands use the correct
hardening flags and thus all hardening features are correctly used.
.
It's designed to check build logs generated by Debian's
dpkg-buildpackage (or tools using dpkg-buildpackage like pbuilder or
the official buildd build logs) to help maintainers detect missing
hardening flags in their packages.
Description-md5: 677f2a00e31e316c282b8bf13f2fbe19
Homepage: https://ruderich.org/simon/blhc
Section: utils
Priority: optional
Filename: pool/main/b/blhc/blhc_0.07+20161116+gitbf41976-1_all.deb
Size: 26730
MD5sum: aa6c240a6f9e061690ea41eab8437b65
SHA256: f0711a92ffe168b0f542836a2d52a50bbdc91d11561049c8e95bf2978f8ebce6
Package: blhc
Version: 0.09-0.1
Installed-Size: 82
Maintainer: Jari Aalto <jari.aalto@cante.net>
Architecture: all
Depends: libdpkg-perl
Description-en: build log hardening check
Perl tool which checks build logs for missing hardening
flags. Hardening flags enable additional security features in the
compiler to prevent e.g. stack overflows, format string
vulnerabilities, GOT overwrites, etc. See e.g.
<http://wiki.debian.org/ReleaseGoals/SecurityHardeningBuildFlags>.
.
Because most build systems are quite complicated there are many
places where compiler flags from the environment might be ignored.
The parser verifies that all compiler commands use the correct
hardening flags and thus all hardening features are correctly used.
.
It's designed to check build logs generated by Debian's
dpkg-buildpackage (or tools using dpkg-buildpackage like pbuilder or
the official buildd build logs) to help maintainers detect missing
hardening flags in their packages.
Description-md5: 677f2a00e31e316c282b8bf13f2fbe19
Multi-Arch: foreign
Homepage: https://ruderich.org/simon/blhc
Section: utils
Priority: optional
Filename: pool/main/b/blhc/blhc_0.09-0.1_all.deb
Size: 28968
MD5sum: 2dd026728c4289bf77c7bcf1c8555ee9
SHA256: b8c87c3287bcd32f36c3a6a30296bd8260be0d39908d4f68a45b395ebdb1285e
Package: blhc
Version: 0.07+20161116+gitbf41976-1
Installed-Size: 76
Maintainer: Jari Aalto <jari.aalto@cante.net>
Architecture: all
Depends: libdpkg-perl
Description-en: build log hardening check
Perl tool which checks build logs for missing hardening
flags. Hardening flags enable additional security features in the
compiler to prevent e.g. stack overflows, format string
vulnerabilities, GOT overwrites, etc. See e.g.
<http://wiki.debian.org/ReleaseGoals/SecurityHardeningBuildFlags>.
.
Because most build systems are quite complicated there are many
places where compiler flags from the environment might be ignored.
The parser verifies that all compiler commands use the correct
hardening flags and thus all hardening features are correctly used.
.
It's designed to check build logs generated by Debian's
dpkg-buildpackage (or tools using dpkg-buildpackage like pbuilder or
the official buildd build logs) to help maintainers detect missing
hardening flags in their packages.
Description-md5: 677f2a00e31e316c282b8bf13f2fbe19
Homepage: https://ruderich.org/simon/blhc
Section: utils
Priority: optional
Filename: pool/main/b/blhc/blhc_0.07+20161116+gitbf41976-1_all.deb
Size: 26730
MD5sum: aa6c240a6f9e061690ea41eab8437b65
SHA256: f0711a92ffe168b0f542836a2d52a50bbdc91d11561049c8e95bf2978f8ebce6
--- End Message ---
--- Begin Message ---
Source: blhc
Source-Version: 0.09-1
We believe that the bug you reported is fixed in the latest version of
blhc, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 920072@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Joao Eriberto Mota Filho <eriberto@debian.org> (supplier of updated blhc package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 23 Jan 2019 20:51:03 -0200
Source: blhc
Architecture: source
Version: 0.09-1
Distribution: unstable
Urgency: medium
Maintainer: Joao Eriberto Mota Filho <eriberto@debian.org>
Changed-By: Joao Eriberto Mota Filho <eriberto@debian.org>
Closes: 845339 853265 898332 899137 920072
Changes:
blhc (0.09-1) unstable; urgency=medium
.
[ Joao Eriberto Mota Filho ]
* New maintainer. (Closes: #920072)
* Ack for previous NMU. Thanks to Fabian Wolff <fabi.wolff@arcor.de>. I
did a NMU too. (Closes: #845339, #853265, #898332, #899137)
* Using new DH level format. Consequently:
- debian/compat: removed.
- debian/control: changed from 'debhelper' to 'debhelper-compat' in
Build-Depends field and bumped level to 12.
* debian/control:
- Bumped Standards-Version to 4.3.0.
- Improved long description.
* debian/copyright:
- Added rights for Fabian Wolff and Ondřej Nový.
- Updated upstream and packaging copyright years.
* debian/rules: simplified.
* debian/upstream/signing-key.asc: removed signatures to make the key
minimal.
.
[ Ondřej Nový ]
* debian/copyright: Change Format URL to correct one.
Checksums-Sha1:
3ddf232c98a66413de35582b4642be9d53d40efb 1859 blhc_0.09-1.dsc
96ec3f7d06bf3faa1356ea193a7dfabd81dfb0b1 5788 blhc_0.09-1.debian.tar.xz
f0b16ddc766158c93259f9398920c0ace0415498 4946 blhc_0.09-1_source.buildinfo
Checksums-Sha256:
da7c283fe67291d851607c064558bc1074947d7d5486f809f26c9e1dbcea01dd 1859 blhc_0.09-1.dsc
0487fb6397dcf130edf9250adbd2ed8d0d449e7a1e78e1e8b3ab48d2348de337 5788 blhc_0.09-1.debian.tar.xz
4246744c65d56f5857355bcddc8cb66786d218ea0009aff7fbc44ff717942b9c 4946 blhc_0.09-1_source.buildinfo
Files:
0afaa7d2bfd1f5f60bddf5f11becbbbf 1859 utils optional blhc_0.09-1.dsc
3db9fe23d9a85343e6620fe8fb161201 5788 utils optional blhc_0.09-1.debian.tar.xz
e9b5cb100d5f15a81ae4edc323274522 4946 utils optional blhc_0.09-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=SDtz
-----END PGP SIGNATURE-----
--- End Message ---
Reply to: