/usr/bin/node in nodejs-8.9.4-2.fc28.x86_64 and /usr/bin/node_g in nodejs-devel-8.9.4-2.fc28.x86_64 have not been linked with the standard Fedora linker flags (LDFLAGS) from redhat-rpm-config. More information about RPM macros to set CFLAGS and LDFLAGS is available here: https://src.fedoraproject.org/rpms/redhat-rpm-config/blob/master/f/buildflags.md
This bug appears to have been reported against 'rawhide' during the Fedora 28 development cycle. Changing version to '28'.
nodejs-10-20180501175322.c7b355af has been submitted as an update to Fedora 28 Modular. https://bodhi.fedoraproject.org/updates/FEDORA-MODULAR-2018-2b0846cb86
nodejs-10-20180501175322.c7b355af has been pushed to the Fedora 28 Modular testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-MODULAR-2018-2b0846cb86
/usr/bin/node, /usr/bin/node_g in nodejs-1:8.11.0-1.fc28.x86_64 and nodejs-devel-1:8.11.0-1.fc28.x86_64 are still do not use full ASLR (PIE) and RELRO (BIND_NOW).
(In reply to Florian Weimer from comment #4) > /usr/bin/node, /usr/bin/node_g in nodejs-1:8.11.0-1.fc28.x86_64 and > nodejs-devel-1:8.11.0-1.fc28.x86_64 are still do not use full ASLR (PIE) and > RELRO (BIND_NOW). This will be fixed on the next build of Node.js 8.x. In the meantime, can you confirm that it *is* fixed in the 10.x module stream?
(In reply to Stephen Gallagher from comment #5) > (In reply to Florian Weimer from comment #4) > > /usr/bin/node, /usr/bin/node_g in nodejs-1:8.11.0-1.fc28.x86_64 and > > nodejs-devel-1:8.11.0-1.fc28.x86_64 are still do not use full ASLR (PIE) and > > RELRO (BIND_NOW). > > This will be fixed on the next build of Node.js 8.x. In the meantime, can > you confirm that it *is* fixed in the 10.x module stream? Sorry, I can't tell from https://koji.fedoraproject.org/koji/buildinfo?buildID=1078203 what actually went into the modular build.
https://koji.fedoraproject.org/koji/buildinfo?buildID=1078177 is the actual package build that was included in the module.
(In reply to Stephen Gallagher from comment #7) > https://koji.fedoraproject.org/koji/buildinfo?buildID=1078177 is the actual > package build that was included in the module. I can't find node_g anymore, but /usr/bin/node in nodejs-10.0.0-1.module_1716+9b6ad2c1.x86_64 looks okay. Thanks.
(In reply to Florian Weimer from comment #8) > (In reply to Stephen Gallagher from comment #7) > > https://koji.fedoraproject.org/koji/buildinfo?buildID=1078177 is the actual > > package build that was included in the module. > > I can't find node_g anymore, but /usr/bin/node in > nodejs-10.0.0-1.module_1716+9b6ad2c1.x86_64 looks okay. Thanks. node_g is temporarily disabled because it fails to build due to https://gcc.gnu.org/bugzilla/show_bug.cgi?id=85587 As soon as that hits the buildroot, I'll get it back in.
nodejs-10-20180501175322.c7b355af has been pushed to the Fedora 28 Modular stable repository. If problems still persist, please make note of it in this bug report.
nodejs-8.11.2-1.fc28 has been submitted as an update to Fedora 28. https://bodhi.fedoraproject.org/updates/FEDORA-2018-62bf1ccab6
nodejs-8.11.2-1.fc27 has been submitted as an update to Fedora 27. https://bodhi.fedoraproject.org/updates/FEDORA-2018-d7cd949ce2
nodejs-8.11.2-1.fc27 has been pushed to the Fedora 27 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2018-d7cd949ce2
nodejs-8.11.2-1.fc28 has been pushed to the Fedora 28 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2018-62bf1ccab6
nodejs-8.11.2-1.fc28 has been pushed to the Fedora 28 stable repository. If problems still persist, please make note of it in this bug report.
nodejs-8.11.2-1.fc27 has been pushed to the Fedora 27 stable repository. If problems still persist, please make note of it in this bug report.