diff --git a/openldap.spec b/openldap.spec index 90739f4..6459ead 100644 --- a/openldap.spec +++ b/openldap.spec @@ -7,7 +7,7 @@ Name: openldap Version: 2.4.59 -Release: 2%{?dist} +Release: 3%{?dist} Summary: LDAP support libraries License: OpenLDAP URL: http://www.openldap.org/ @@ -330,7 +330,7 @@ for lib in $(ls | grep libldap_r-); do then so_ver_short="${libsplit[3]}" unset IFS - gcc -shared -o "%{buildroot}%{_libdir}/libldap-${version}.so.${so_ver_short}" -Wl,--no-as-needed \ + gcc -shared -o "%{buildroot}%{_libdir}/libldap-${version}.so.${so_ver_short}" -Wl,--no-as-needed -Wl,-z,now \ -Wl,-soname -Wl,libldap-${version}.so.${so_ver_short} -L "%{buildroot}%{_libdir}" -lldap_r else so_ver_full="${libsplit[3]}.${libsplit[4]}.${libsplit[5]}" @@ -556,6 +556,9 @@ exit 0 %{_libdir}/libldap-2.4*.so.* %changelog +* Thu Sep 23 2021 Simon Pichugin - 2.4.59-3 +- Enable BIND_NOW for the linked library too. Related: rhbz#2002747 + * Wed Sep 22 2021 Simon Pichugin - 2.4.59-2 - Enable BIND_NOW to prevent GOT overwrite attacks. - Ignore badfuncs error in rpminspect because it's a false positive