Bug#758471: perl: regression in passing LDFLAGS to subdirectory builds

[Niko Tyni]

severity 758471 normal
thanks

On Sun, Aug 17, 2014 at 11:21:19PM +0300, Niko Tyni wrote:
> Package: perl
> Version: 5.20.0-4
> Severity: important
> Tags: security
> 
> There seems to be a regression from the 5.18 packages in passing linker
> build flags into subdirectory builds. At least libwx-perl is now built
> with the default linker and flags in all its subdirectories, resulting in
> "less hardenedness" (softening?).

It looks like libwx-perl is a special case because it's explicitly
setting LD in Wx::build::MakeMaker::Any_wx_config::get_flags():
  $config{LD} = $ENV{CXX} || Alien::wxWidgets->linker;

Our 5.18 patch to ExtUtils::MakeMaker allowed overriding this
via the command line, but the fix adopted upstream doesn't.

As the count of affected packages is probably very limited (possibly
just libwx-perl), I'm lowering the severity for now.
-- 
Niko Tyni   ntyni at debian.org