Package: groff Version: 1.21-6 Severity: important Tags: patch Please enabled hardened build flags through dpkg-buildflags.
Patch attached. (dpkg-buildflags abides "noopt" from DEB_BUILD_OPTIONS) Cheers, Moritz
diff -aur groff-1.21.orig/debian/rules groff-1.21/debian/rules --- groff-1.21.orig/debian/rules 2011-01-11 04:37:31.000000000 +0100 +++ groff-1.21/debian/rules 2011-12-31 15:42:56.000000000 +0100 @@ -6,11 +6,12 @@ CC = gcc CXX = g++ -ifeq (,$(filter noopt,$(DEB_BUILD_OPTIONS))) -CFLAGS = -O2 -g -Wall -else -CFLAGS = -g -Wall -endif + +CFLAGS = `dpkg-buildflags --get CFLAGS` +CFLAGS += -Wall +LDFLAGS = `dpkg-buildflags --get LDFLAGS` +CXXFLAGS = `dpkg-buildflags --get CXXFLAGS` +CPPFLAGS = `dpkg-buildflags --get CPPFLAGS` # From Makefile.in version = $(shell cat VERSION) @@ -33,7 +34,7 @@ override_dh_auto_configure: -rm -f config.log config.cache - CC="$(CC)" CXX="$(CXX)" CFLAGS="$(CFLAGS)" CXXFLAGS="$(CFLAGS)" \ + CC="$(CC)" CXX="$(CXX)" CFLAGS="$(CFLAGS)" CXXFLAGS="$(CFLAGS)" CPPFLAGS="$(CPPFLAGS)" LDFLAGS="$(LDFLAGS)" \ YACC='bison -y' PSPRINT=lpr PAGE=A4 \ dh_auto_configure -- $(confflags) \ --with-appresdir=/etc/X11/app-defaults Nur in groff-1.21/debian: rules~.