buildd log scanner tag I-invalid-cmake-used
The build log could not be checked for missing build flags.
By default CMake ignores CPPFLAGS thus missing those hardening flags. Debian patched CMake in versions 2.8.7-1 and 2.8.7-2 to respect CPPFLAGS, but this patch was rejected by upstream and later reverted in Debian. Thus those two versions show correct usage of CPPFLAGS even if the package doesn't correctly handle them (for example by passing them to CFLAGS). To prevent false negatives, blhc just blacklist those two versions.
This warning was generated by blhc, see the link for more information and limitations. Run it manually on the build log to get more detailed information. Please report false positives/negatives and other bugs in blhc.
See the following links for more information about hardening: