Enable full RELRO
This commit is contained in:
parent
fe16ff347b
commit
d835557850
@ -4,7 +4,7 @@
|
||||
|
||||
Name: squid
|
||||
Version: 3.2.9
|
||||
Release: 1%{?dist}
|
||||
Release: 2%{?dist}
|
||||
Summary: The Squid proxy caching server
|
||||
Epoch: 7
|
||||
# See CREDITS for breakdown of non GPLv2+ code
|
||||
@ -115,7 +115,7 @@ The squid-sysvinit contains SysV initscritps support.
|
||||
CXXFLAGS="$RPM_OPT_FLAGS -fpie" \
|
||||
CFLAGS="$RPM_OPT_FLAGS -fpie" \
|
||||
%endif
|
||||
LDFLAGS="$RPM_LD_FLAGS -pie"
|
||||
LDFLAGS="$RPM_LD_FLAGS -pie -Wl,-z,relro -Wl,-z,now"
|
||||
|
||||
%configure \
|
||||
--disable-strict-error-checking \
|
||||
@ -309,6 +309,9 @@ fi
|
||||
/sbin/chkconfig --add squid >/dev/null 2>&1 || :
|
||||
|
||||
%changelog
|
||||
* Fri Apr 19 2013 Michal Luscon <mluscon@redhat.com> - 7:3.2.9-2
|
||||
- Enable full RELRO (-Wl,-z,relro -Wl,-z,now)
|
||||
|
||||
* Tue Mar 19 2013 Michal Luscon <mluscon@redhat.com> - 7:3.2.9-1
|
||||
- Update to latest upstream version 3.2.9
|
||||
- Fixed: CVE-2013-1839
|
||||
|
Loading…
Reference in New Issue
Block a user