diff --git a/pkgs/os-specific/linux/libsepol/default.nix b/pkgs/os-specific/linux/libsepol/default.nix
index ecbb2a0ec464..3021ce20b46b 100644
--- a/pkgs/os-specific/linux/libsepol/default.nix
+++ b/pkgs/os-specific/linux/libsepol/default.nix
@@ -13,7 +13,9 @@ stdenv.mkDerivation rec {
 
   nativeBuildInputs = [ flex ];
 
-  NIX_CFLAGS_COMPILE = "-fstack-protector-all";
+  # Temporary work-around for problems after flex security update:
+  # https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=835542
+  NIX_CFLAGS_COMPILE = "-Wno-error=sign-compare";
 
   preBuild = ''
     makeFlagsArray+=("PREFIX=$out")