[Pkg-shadow-devel] Bug#770273: shadow (1:4.2-2+b2) no longer built with hardening flags

Christian PERRIER bubulle at debian.org
Thu Nov 20 06:27:14 UTC 2014

Package: shadow
Version: 1:4.2-2+b2
Severity: serious
Tags: patch

It has been reported (but privately to me only) that the recent binNMU
dropped the hardening flags for the shadow source package.

A later analysis by Simon Ruderich mentioed this is related to cdbs
and #712729. Simon provided a patch which I intend to apply in jessie,
after seeking approval by the release team.

----- Forwarded message from "Dr. Markus Waldeck" <waldeck at gmx.de> -----

Date: Sun, 9 Nov 2014 14:27:36 +0100
From: "Dr. Markus Waldeck" <waldeck at gmx.de>
To: Christian Perrier <bubulle at debian.org>
Cc: Simon Rud­erich <simon at ruderich.org>
Subject: shadow (1:4.2-2+b2)
X-CRM114-Status: UNSURE (-0.4308) This message is 'unsure'; please train it!

Hi Christian,

WHO triggered this "Binary-only non-maintainer upload for amd64"?
It fucked up the correct applied hardening settings for shadow (1:4.2-2+b1)



----- End forwarded message -----


-------------- next part --------------
A non-text attachment was scrubbed...
Name: shadow-hardening.patch
Type: text/x-diff
Size: 1250 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-shadow-devel/attachments/20141120/ec9a1950/attachment.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-shadow-devel/attachments/20141120/ec9a1950/attachment.sig>

More information about the Pkg-shadow-devel mailing list