[Bug 1926504] Re: [Possible bug] dpkg-XXX (where XXX is name) does not read env variables

[Michal Dziczkowski]

There are meant all the developer related flags with are listed when
running the dpkg-buildflags with given the parameter to list them (for
example CPPFLAGS).

I have other parameters set in enviroment for them (according to getting
the best required result of compilation) and when attempting to build a
deb archive, it's beeing build with the ones from the mentioned in above
program, with creates a trash in form of debug files (and related), with
is by some applications a "bad thing to have" because it can create a
vulnerabilities (especially it it's a security related software)

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to dpkg in Ubuntu.
https://bugs.launchpad.net/bugs/1926504

Title:
  [Possible bug] dpkg-XXX (where XXX is  name) does not read env
  variables

Status in dpkg package in Ubuntu:
  New

Bug description:
  The reported problem (who exist in the most versions of Ubuntu and
  Debian) apply to the tools, who's name begin with "dpkg-". I'll give
  the problem description, basing on the example of "dpkg-buildflags".

  After running the dpkg-buildflags command with a propper parameter, in
  the terminal is displayed a list of compiler, linker, etc. flags, who
  differ themself from the ones with are set in the enviroment and with
  I wanted to use (instead of the displayed ones).

  The problem that the enviroment aren't read in any way thru this
  programs and use only the "build-in" ones, with is a quite serrios
  issue because it may create vulnerabilities in the created archives or
  even software.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dpkg/+bug/1926504/+subscriptions