Control: -1 found 2.28-1
Dear Stephen, Thank you for the quick reply. :) [Stephen Kitt] > Builds can supply the appropriate flags, but they need to do so > consciously, it doesn’t make sense to enable them by default. Why not? I would expect it made sense to enable as many security defences as possible in the default build, and if I remember correctly, this was the rationale behind enabling the flags by default in the first place. I got the impression from the upstream commits that the default now enable these flags by default, but might have been mistanken, as I do not really know much about mingw. :) > The settings are ultimately controlled by binutils-mingw-w64. The > security flags were set by default starting with version 7 (so > 2.28-5+7.4 in oldstable is the first affected version that’s currently > available), and disabled again in version 8.8, and fixed up in 8.9 (so > 2.34-5+8.9 in testing is the first fixed version that’s currently > available). OK, I've tried to adjust the starting point accordingly. -- Happy hacking Petter Reinholdtsen

