From 877eff0ecc3b09fb3b0795cdf352dcfcf927849e Mon Sep 17 00:00:00 2001 From: Charalampos Stratakis Date: Tue, 18 Jul 2023 15:45:15 +0200 Subject: [PATCH] Strip the LTO bytecode from python.o Resolves: rhbz#2213526 --- python38.spec | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/python38.spec b/python38.spec index 4a885d2..bfd2eba 100644 --- a/python38.spec +++ b/python38.spec @@ -17,7 +17,7 @@ URL: https://www.python.org/ #global prerel ... %global upstream_version %{general_version}%{?prerel} Version: %{general_version}%{?prerel:~%{prerel}} -Release: 1%{?dist} +Release: 2%{?dist} License: Python # Exclude i686 arch. Due to a modularity issue it's being added to the @@ -1121,6 +1121,11 @@ touch %{buildroot}%{_bindir}/python3-config touch %{buildroot}%{_bindir}/python3-debug touch %{buildroot}%{_bindir}/python3-debug-config +# Strip the LTO bytecode from python.o +# Based on the fedora brp-strip-lto scriptlet +# https://src.fedoraproject.org/rpms/redhat-rpm-config/blob/9dd5528cf9805ebfe31cff04fe7828ad06a6023f/f/brp-strip-lto +find %{buildroot} -type f -name 'python.o' -print0 | xargs -0 \ +bash -c "strip -p -R .gnu.lto_* -R .gnu.debuglto_* -N __gnu_lto_v1 \"\$@\"" ARG0 # ====================================================== # Checks for packaging issues @@ -1827,6 +1832,10 @@ fi # ====================================================== %changelog +* Tue Jul 18 2023 Charalampos Stratakis - 3.8.16-2 +- Strip the LTO bytecode from python.o +Resolves: rhbz#2213526 + * Tue Dec 13 2022 Charalampos Stratakis - 3.8.16-1 - Update to 3.8.16 - Security fix for CVE-2022-45061