diff -Nru libsndfile-1.0.25/debian/changelog libsndfile-1.0.25/debian/changelog
--- libsndfile-1.0.25/debian/changelog	2011-08-12 23:49:09.000000000 +0000
+++ libsndfile-1.0.25/debian/changelog	2012-01-06 10:27:52.000000000 +0000
@@ -1,3 +1,9 @@
+libsndfile (1.0.25-4) unstable; urgency=low
+
+  * Patch from Moritz Muehlenhoff enabling harden build flags (Closes: #654831).
+
+ -- Erik de Castro Lopo <erikd@mega-nerd.com>  Fri,  6 Jan 2012 21:19:17 +1100
+
 libsndfile (1.0.25-3) unstable; urgency=low
 
   * Patch from Steve Langasek to enable multiarch (Closes: #637585).
diff -Nru libsndfile-1.0.25/debian/rules libsndfile-1.0.25/debian/rules
--- libsndfile-1.0.25/debian/rules	2011-08-12 23:49:09.000000000 +0000
+++ libsndfile-1.0.25/debian/rules	2012-01-06 10:27:52.000000000 +0000
@@ -11,9 +11,6 @@
 DEB_BUILD_GNU_TYPE  ?= $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE)
 DEB_HOST_MULTIARCH  ?= $(shell dpkg-architecture -qDEB_HOST_MULTIARCH)
 
-ifneq (,$(findstring debug,$(DEB_BUILD_OPTIONS)))
-	CFLAGS += -g
-endif
 ifeq (,$(findstring nostrip,$(DEB_BUILD_OPTIONS)))
 	INSTALL_PROGRAM += -s
 endif
@@ -21,7 +18,10 @@
 config.status: configure
 	dh_testdir
 	#autoreconf -f
-	./configure --host=$(DEB_HOST_GNU_TYPE) --build=$(DEB_BUILD_GNU_TYPE) --prefix=/usr --libdir=\$${prefix}/lib/$(DEB_HOST_MULTIARCH) --mandir=\$${prefix}/share/man --infodir=\$${prefix}/share/info
+	./configure $(shell dpkg-buildflags --export=configure) \
+		--host=$(DEB_HOST_GNU_TYPE) --build=$(DEB_BUILD_GNU_TYPE) --prefix=/usr \
+		--libdir=\$${prefix}/lib/$(DEB_HOST_MULTIARCH) \
+		--mandir=\$${prefix}/share/man --infodir=\$${prefix}/share/info
 
 
 build: patch build-stamp