From 2cf182e0bbe55a2087497ed15e72cf5e107da020 Mon Sep 17 00:00:00 2001 From: Todd Zullinger Date: Mon, 11 Apr 2016 13:28:46 -0400 Subject: [PATCH] Set LDFLAGS for hardened builds (#1289728) Without LDFLAGS the git exectuables were not being linked with the desired settings for hardened builds. --- git.spec | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/git.spec b/git.spec index b5d792f..51b73db 100644 --- a/git.spec +++ b/git.spec @@ -44,7 +44,7 @@ Name: git Version: 2.7.4 -Release: 1%{?dist} +Release: 2%{?dist} Summary: Fast Version Control System License: GPLv2 Group: Development/Tools @@ -349,6 +349,7 @@ find prebuilt_docs/html -type d | xargs rmdir --ignore-fail-on-non-empty cat << \EOF > config.mak V = 1 CFLAGS = %{optflags} +LDFLAGS = %{__global_ldflags} BLK_SHA1 = 1 NEEDS_CRYPTO_WITH_SSL = 1 USE_LIBPCRE = 1 @@ -686,6 +687,9 @@ rm -rf %{buildroot} # No files for you! %changelog +* Fri Jul 01 2016 Petr Stodulka - 2.7.4-2 +- Set LDFLAGS for hardened builds (#1289728) (thanks Todd) + * Fri Mar 18 2016 David Woodhouse - 2.7.4-1 - Update to 2.7.4 (for CVE-2016-2315, CVE-2016-2324) Resolves: #1318220