Makefile.am | 2 1 + 1 - 0 !
configure.ac | 1 0 + 1 - 0 !
2 files changed, 1 insertion(+), 2 deletions(-)

 remove texinfo documentation.
 The original source contained a licensing
 of the Texinfo source which is incompatible
 with DFSG. The build target is now removed.

src/socket.c | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 use sensible mode flags in fdopen().
 A socket cannot be rewound, therefore the only sensible
 opening mode is "a+". The original mode fails for Linux.
 .
 Remove an annoying carrage return that only makes the
 report look uglier. The TCPMUX daemon does not care
 so late into the message exchange.

src/rush.c | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 security of chroots.
 Improve security by calling chdir("/") immediately
 after chroot(), in order to release any old directory
 handle, thus making references to the chroot external
 directories impossible.

gnu/stdio.in.h | 2 2 + 0 - 0 !
1 file changed, 2 insertions(+)

 ftbfs with eglibc-2.17
 The macro gets has been removed on recent eglibc,
 but the upstream package for GNU Rush contains
 embedded code from GNUlib which uses some tests
 accessing gets.
 .
 Protect against accessing that macro.
Bug-Debian: http://bugs.debian.org/701417

src/rush.c | 4 4 + 0 - 0 !
1 file changed, 4 insertions(+)

 cve-2013-6889, elevated access.
 The executable will, when used with SUID-bit set,
 allow opening and reading access to every system
 file also by an unprivileged user, whenever invocation
 is done in testing mode, i.e., using '-t' without '-u'.
 .
 Prevent this mistake by resetting the effective user
 identification to the real user identification when-
 ever testing mode is asked for.

src/getopt.m4 | 2 1 + 1 - 0 !
src/rwopt.h | 2 1 + 1 - 0 !
2 files changed, 2 insertions(+), 2 deletions(-)

 clean translated help text.
 The localized help message of `rushwho' prints the
 result of translating the empty string, resulting
 in the message preamble of the relevant translation.
 Suppress this mistake.