From 67e3cac029cfe99e7c81f40337c7c4b8ef36ca34 Mon Sep 17 00:00:00 2001 From: wang--ge Date: Thu, 25 Aug 2022 19:13:39 +0800 Subject: [PATCH] add security compile option pie, relro and -fstack-protector-strong --- eclipse.spec | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/eclipse.spec b/eclipse.spec index 2e3b70b..e9f24e4 100644 --- a/eclipse.spec +++ b/eclipse.spec @@ -11,7 +11,7 @@ Name: eclipse Epoch: 1 Version: 4.11 -Release: 7 +Release: 8 Summary: An open, extensible IDE License: EPL-2.0 URL: http://www.eclipse.org/ @@ -405,6 +405,7 @@ ln -s $(build-classpath osgi-annotation) rt.equinox.bundles/bundles/org.eclipse. %mvn_package "org.eclipse.ui:org.eclipse.ui.{views.log,trace}" pde %mvn_package "org.eclipse.sdk{,.feature}:" sdk %mvn_package ":" __noinstall +sed -i 's/-O -g -Wall -fPIC/-O -g -Wall -fPIC -pie -Wl,-z,relro -Wl,-z,now -fstack-protector-strong/g' eclipse.platform.swt/bundles/org.eclipse.swt/Eclipse\ SWT\ PI/gtk/library/build.sh %build export CFLAGS="%{optflags}" @@ -764,6 +765,9 @@ echo "%{version}-%{release}" > %{buildroot}%{_eclipsedir}/.pkgs/Distro%{?dist} %{_eclipsedir}/plugins/org.eclipse.osgi.util_* %changelog +* Thu Aug 25 2022 Ge Wang - 1:4.11-8 +- add security compile options pie, relro and -fstack-protector-strong + * Thu Jul 14 2022 wangkai - 1:4.11-7 - Fix CVE-2020-27225 -- Gitee