Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package ghostscript for openSUSE:Factory checked in at 2021-04-18 21:44:42 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/ghostscript (Old) and /work/SRC/openSUSE:Factory/.ghostscript.new.12324 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "ghostscript" Sun Apr 18 21:44:42 2021 rev:50 rq:885580 version:9.53.3 Changes: -------- --- /work/SRC/openSUSE:Factory/ghostscript/ghostscript-mini.changes 2021-04-14 10:10:27.341440665 +0200 +++ /work/SRC/openSUSE:Factory/.ghostscript.new.12324/ghostscript-mini.changes 2021-04-18 21:44:55.236702580 +0200 @@ -1,0 +2,5 @@ +Wed Apr 14 11:57:25 UTC 2021 - Wolfgang Frisch <wolfgang.fri...@suse.com> + +- Hardening: compile with PIC, link as PIE + +------------------------------------------------------------------- --- /work/SRC/openSUSE:Factory/ghostscript/ghostscript.changes 2020-10-23 12:19:25.796561718 +0200 +++ /work/SRC/openSUSE:Factory/.ghostscript.new.12324/ghostscript.changes 2021-04-18 21:44:55.284702661 +0200 @@ -1,0 +2,5 @@ +Wed Apr 14 11:56:22 UTC 2021 - Wolfgang Frisch <wolfgang.fri...@suse.com> + +- Hardening: compile with PIC, link as PIE + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ ghostscript-mini.spec ++++++ --- /var/tmp/diff_new_pack.QWWNPV/_old 2021-04-18 21:44:56.000703871 +0200 +++ /var/tmp/diff_new_pack.QWWNPV/_new 2021-04-18 21:44:56.000703871 +0200 @@ -215,8 +215,9 @@ # Derive build timestamp from latest changelog entry export SOURCE_DATE_EPOCH=$(date -d "$(head -n 2 %{_sourcedir}/%{name}.changes | tail -n 1 | cut -d- -f1 )" +%s) # Set our preferred architecture-specific flags for the compiler and linker: -export CFLAGS="%{optflags} -fno-strict-aliasing" -export CXXFLAGS="%{optflags} -fno-strict-aliasing" +export CFLAGS="%{optflags} -fno-strict-aliasing -fPIC" +export CXXFLAGS="%{optflags} -fno-strict-aliasing -fPIC" +export LDFLAGS="-pie" autoreconf -fi # --docdir=%%{_defaultdocdir}/%%{name} does not work therefore it is not used. # --disable-cups and --without-pdftoraster ++++++ ghostscript.spec ++++++ --- /var/tmp/diff_new_pack.QWWNPV/_old 2021-04-18 21:44:56.016703898 +0200 +++ /var/tmp/diff_new_pack.QWWNPV/_new 2021-04-18 21:44:56.020703905 +0200 @@ -356,8 +356,9 @@ # Derive build timestamp from latest changelog entry export SOURCE_DATE_EPOCH=$(date -d "$(head -n 2 %{_sourcedir}/%{name}.changes | tail -n 1 | cut -d- -f1 )" +%s) # Set our preferred architecture-specific flags for the compiler and linker: -export CFLAGS="%{optflags} -fno-strict-aliasing" -export CXXFLAGS="%{optflags} -fno-strict-aliasing" +export CFLAGS="%{optflags} -fno-strict-aliasing -fPIC" +export CXXFLAGS="%{optflags} -fno-strict-aliasing -fPIC" +export LDFLAGS="-pie" autoreconf -fi # --docdir=%%{_defaultdocdir}/%%{name} does not work therefore it is not used. # --enable-cups but no longer --with-pdftoraster --enable-dbus --with-install-cups because