Your message dated Tue, 31 Jul 2012 18:17:24 +0000
with message-id <e1swh0w-0001ho...@franck.debian.org>
and subject line Bug#678563: fixed in nodejs 0.6.19~dfsg1-3
has caused the Debian Bug report #678563,
regarding nodejs-dev: node-waf ignores LINKFLAGS (e.g. to enable security 
hardening LDFLAGS)
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
678563: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=678563
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: nodejs-dev
Version: 0.6.19~dfsg1-2
Severity: important
Tags: security

node-waf is a wrapper around waf.

waf supports passing LDFLAGS with the LINKFLAGS environment variable.

node-waf ignores LINKFLAGS, and also ignore LDFLAGS stuffed into CFLAGS
or CXXFLAGS, which means no way to enable security hardening flags.

Raising severity as building with hardening flags is a release goal.


 - Jonas



--- End Message ---
--- Begin Message ---
Source: nodejs
Source-Version: 0.6.19~dfsg1-3

We believe that the bug you reported is fixed in the latest version of
nodejs, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 678...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Jonas Smedegaard <d...@jones.dk> (supplier of updated nodejs package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 28 Jul 2012 11:19:38 +0200
Source: nodejs
Binary: nodejs-dev nodejs nodejs-dbg nodejs-legacy
Architecture: source all amd64
Version: 0.6.19~dfsg1-3
Distribution: unstable
Urgency: low
Maintainer: Debian Javascript Maintainers 
<pkg-javascript-devel@lists.alioth.debian.org>
Changed-By: Jonas Smedegaard <d...@jones.dk>
Description: 
 nodejs     - Node.js event-based server-side javascript engine
 nodejs-dbg - Node.js event-based server-side javascript engine (debug)
 nodejs-dev - Development files for Node.js
 nodejs-legacy - Node.js event-based server-side javascript engine (legacy 
symlink
Closes: 611698 678563 681360
Changes: 
 nodejs (0.6.19~dfsg1-3) unstable; urgency=low
 .
   [ Jérémy Lal ]
   * debian/patches:
     + 2012_fix_v8_3_10.patch, fix crash on exit when building
       against libv8-3.10.8.
     + 2013_waf_linkflags.patch, waf must support LINKFLAGS,
       Closes: #678563.
 .
   [ Jonas Smedegaard ]
   * Rename binary node → nodejs:
     + Adjust paths of binary and manpage.
     + Fix avoid bogus explicit installation of debug files.
     + Adjust install scripts and add cleanup for old alternative.
     + Patch manpage to adjust command name.
     + Have binary package nodejs break any packages in Debian that
       reference /usr/bin/node.
     + Add new binary package nodejs-legacy, and have that (not nodejs)
       conflict with node.
     + Add NEWS entry.
     Closes: bug#611698, #681360. See also bug#614907. Thanks to
     tech-ctte and everyone else helping to resolve this.
   * Work around upstream shipping docs in wrong subdir, and disable huge
     patch 1002 attempting same but causing FTBFS for me. Keep patch 1002
     in source, to ease proof-reading by release team.
   * Add patch 2004 to fix FTBFS: Relax a test to work with slightly
     different output when linked against recent v8.
Checksums-Sha1: 
 a9af12c782ae7d7e3c84921b63bd44990caa88aa 2339 nodejs_0.6.19~dfsg1-3.dsc
 d76fa86368c6c3f38e0e1166fea8bbada663bf23 743280 
nodejs_0.6.19~dfsg1-3.debian.tar.gz
 fe2a39ac9daf89cb51bab913dc92dd954dd581df 51562 
nodejs-legacy_0.6.19~dfsg1-3_all.deb
 4abb962dcd2664829bb62b48a327250e0fb30f8b 191636 
nodejs-dev_0.6.19~dfsg1-3_amd64.deb
 65d44c48f2d40c1c52e25d5083374d5b705d42f4 801780 nodejs_0.6.19~dfsg1-3_amd64.deb
 5365fb6cdf55667af8c35e19257eb682c826e735 1167708 
nodejs-dbg_0.6.19~dfsg1-3_amd64.deb
Checksums-Sha256: 
 00bb4a8e01ac329ca6601ed45cb43923d1fb57b7c78dbf2f66f574339d06ec9f 2339 
nodejs_0.6.19~dfsg1-3.dsc
 cda975efd4137c333ec9a0faee821570d39f2c997b6fc1afc6f3dd6971d3a98a 743280 
nodejs_0.6.19~dfsg1-3.debian.tar.gz
 07b0dfb72d261be0af8318f4e67a5b7dd662edacdd00bc1c328ff285b626ab11 51562 
nodejs-legacy_0.6.19~dfsg1-3_all.deb
 df4cedc2e92db717c8af7631368f2642f7d538bb4533ccc6dfb43e1da14db472 191636 
nodejs-dev_0.6.19~dfsg1-3_amd64.deb
 a3b77621200a70c910c1b2043f427dbf89f6f894f179f5887ed7fcb7488ad336 801780 
nodejs_0.6.19~dfsg1-3_amd64.deb
 80b28244e3585f111377cd9fe09e3a28411e2c412cddcd6d6575ff66b7160ee0 1167708 
nodejs-dbg_0.6.19~dfsg1-3_amd64.deb
Files: 
 5d3c09cd6c26b1e2d6c893bae42eca4d 2339 web extra nodejs_0.6.19~dfsg1-3.dsc
 bf3035ee37dbe10135d4b2a3f768627e 743280 web extra 
nodejs_0.6.19~dfsg1-3.debian.tar.gz
 de23de0f246814242e53e5c7e5f8ff9d 51562 web extra 
nodejs-legacy_0.6.19~dfsg1-3_all.deb
 76f363d354c6d15e89938888ac26f7de 191636 devel extra 
nodejs-dev_0.6.19~dfsg1-3_amd64.deb
 6e8d5cdbe9fef69a0fda203e178aa277 801780 web extra 
nodejs_0.6.19~dfsg1-3_amd64.deb
 b6b1e67f06074b4f1fc3961da7be3ce0 1167708 debug extra 
nodejs-dbg_0.6.19~dfsg1-3_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iQIcBAEBCgAGBQJQE7GpAAoJECx8MUbBoAEhGe8P/0Gb6y+/MMndI/q9JI/reje4
edKVD59LKn9T3KDQQVtdgg39+h4zJlBsjs6UW4oGbhzmfR4npe6dV6FhJuIOjVq6
PKPtlbNBDvfMgQnRKO7yFJXO/a7KXX+HxzYvEvUVle4/THAqYuulIQ7yFj6NuZWU
GWvK9QpLmDbHBy4yuR29nbgne47RF/zKeqYNOQIpct7yKWBzhlq9hYw7EjmGFTps
MML21mSAEHQ4TKqUAHeVFHzuefS5XdeNP5sYytMocIOR4Zaj6eeD0Dx5nIP7e5PP
qezTITV7rf2OYQxXN0nDL9h1+bTaeUQrm8L5uxQKpzDDBtdtw5TIppC8J6m9znxW
FIskCWPri55FtyVIUScO8xP18b2MFvDnX3PvajXaxMpI9SUCuSZTMf4OVXsJ0COu
1nMy5nrl1FdrWz0FqDYAvZ5jE50eMl8XFXkMfDvYR3lHMV3572aVPpo7s5P5Hlvp
iCxHAZpd8jqcAA5b+2DOi81mm36eh3c21jxlqXZMbVIrwiqXko4bdSOiKXsGZ3xR
nYrdTBUZ3CEwfDsQeeco39lvv+QbDuhq1SowN5l9oasoN0vXN/4F7SPkddXTyq9T
+QWdeOSL/lWjwDeVMiCy2oxSIK2pXlUQJQFy7hT8c7ylrmTz8VUkMhEIXaVUi2RE
tJgpTDj5oaVySOWNp4Jx
=0p+S
-----END PGP SIGNATURE-----

--- End Message ---
_______________________________________________
Pkg-javascript-devel mailing list
Pkg-javascript-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-javascript-devel

Reply via email to