debian/changelog

-liblas (1.8.1-10) UNRELEASED; urgency=medium
+liblas (1.8.1-10) unstable; urgency=medium
 
   * Add upstream patch to fix CVE-2018-20540.
+    (closes: #922459)
+  * Append -DNDEBUG to C{,XX}FLAGS to remove buildpath from binaries.
+  * Update symbols for amd64.
+  * Add lintian overrides for file-references-package-build-path.
 
- -- Bas Couwenberg <sebastic@debian.org>  Sun, 20 Jan 2019 09:06:54 +0100
+ -- Bas Couwenberg <sebastic@debian.org>  Sat, 16 Feb 2019 13:37:29 +0100
 
 liblas (1.8.1-9) unstable; urgency=medium
 

debian/liblas-bin.lintian-overrides

+# Cannot easily be fixed
+file-references-package-build-path *
+

debian/liblas-c3.lintian-overrides

+# Cannot easily be fixed
+file-references-package-build-path *
+

debian/liblas-dev.lintian-overrides

+# Cannot easily be fixed
+file-references-package-build-path *
+

debian/liblas3.lintian-overrides

+# Cannot easily be fixed
+file-references-package-build-path *
+

debian/liblas3.symbols

@@ -407,7 +407,7 @@ liblas.so.3 #PACKAGE# #MINVER#
  _ZN6liblas13property_tree6detail8rapidxml8internal13lookup_tablesILi0EE24lookup_text_pure_with_wsE@Base 1.8.0
  _ZN6liblas13property_tree6detail8rapidxml8internal13lookup_tablesILi0EE28lookup_attribute_data_1_pureE@Base 1.8.0
  _ZN6liblas13property_tree6detail8rapidxml8internal13lookup_tablesILi0EE28lookup_attribute_data_2_pureE@Base 1.8.0
- (optional=templinst)_ZN6liblas13property_tree6detail8rapidxml8xml_nodeIcE11append_nodeEPS4_@Base 1.8.0
+ (optional=templinst|arch=!amd64)_ZN6liblas13property_tree6detail8rapidxml8xml_nodeIcE11append_nodeEPS4_@Base 1.8.0
  _ZN6liblas14Classification16class_table_sizeE@Base 1.8.0
  _ZN6liblas14Classification8SetClassEj@Base 1.8.0
  _ZN6liblas14GetFullVersionB5cxx11Ev@Base 1.8.0

debian/rules

@@ -3,6 +3,10 @@
 # Enable hardening build flags
 export DEB_BUILD_MAINT_OPTIONS=hardening=+all
 
+# Remove buildpath from binaries
+export DEB_CFLAGS_MAINT_APPEND=-DNDEBUG
+export DEB_CXXFLAGS_MAINT_APPEND=-DNDEBUG
+
 include /usr/share/dpkg/pkg-info.mk
 
 UPSTREAM_VERSION=$(shell echo $(DEB_VERSION_UPSTREAM) | sed -e 's/\+.*//')