Enable full RELRO

This commit is contained in:
Michal Luscon 2013-04-19 10:26:53 +02:00
parent fe16ff347b
commit d835557850

View File

@ -4,7 +4,7 @@
Name: squid Name: squid
Version: 3.2.9 Version: 3.2.9
Release: 1%{?dist} Release: 2%{?dist}
Summary: The Squid proxy caching server Summary: The Squid proxy caching server
Epoch: 7 Epoch: 7
# See CREDITS for breakdown of non GPLv2+ code # See CREDITS for breakdown of non GPLv2+ code
@ -115,7 +115,7 @@ The squid-sysvinit contains SysV initscritps support.
CXXFLAGS="$RPM_OPT_FLAGS -fpie" \ CXXFLAGS="$RPM_OPT_FLAGS -fpie" \
CFLAGS="$RPM_OPT_FLAGS -fpie" \ CFLAGS="$RPM_OPT_FLAGS -fpie" \
%endif %endif
LDFLAGS="$RPM_LD_FLAGS -pie" LDFLAGS="$RPM_LD_FLAGS -pie -Wl,-z,relro -Wl,-z,now"
%configure \ %configure \
--disable-strict-error-checking \ --disable-strict-error-checking \
@ -309,6 +309,9 @@ fi
/sbin/chkconfig --add squid >/dev/null 2>&1 || : /sbin/chkconfig --add squid >/dev/null 2>&1 || :
%changelog %changelog
* Fri Apr 19 2013 Michal Luscon <mluscon@redhat.com> - 7:3.2.9-2
- Enable full RELRO (-Wl,-z,relro -Wl,-z,now)
* Tue Mar 19 2013 Michal Luscon <mluscon@redhat.com> - 7:3.2.9-1 * Tue Mar 19 2013 Michal Luscon <mluscon@redhat.com> - 7:3.2.9-1
- Update to latest upstream version 3.2.9 - Update to latest upstream version 3.2.9
- Fixed: CVE-2013-1839 - Fixed: CVE-2013-1839