Jonas Smedegaard
2012-Jun-22 18:19 UTC
[Secure-testing-team] Bug#678563: nodejs-dev: node-waf ignores LINKFLAGS (e.g. to enable security hardening LDFLAGS)
Package: nodejs-dev Version: 0.6.19~dfsg1-2 Severity: important Tags: security node-waf is a wrapper around waf. waf supports passing LDFLAGS with the LINKFLAGS environment variable. node-waf ignores LINKFLAGS, and also ignore LDFLAGS stuffed into CFLAGS or CXXFLAGS, which means no way to enable security hardening flags. Raising severity as building with hardening flags is a release goal. - Jonas