Package: nodejs-dev
Version: 0.6.19~dfsg1-2
Severity: important
Tags: security

node-waf is a wrapper around waf.

waf supports passing LDFLAGS with the LINKFLAGS environment variable.

node-waf ignores LINKFLAGS, and also ignore LDFLAGS stuffed into CFLAGS
or CXXFLAGS, which means no way to enable security hardening flags.

Raising severity as building with hardening flags is a release goal.


 - Jonas



_______________________________________________
Pkg-javascript-devel mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-javascript-devel

Reply via email to