Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package mariadb for openSUSE:Factory checked 
in at 2026-10-08 11:54:59
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/mariadb (Old)
 and      /work/SRC/openSUSE:Factory/.mariadb.new.3698736 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "mariadb"

Thu Oct  8 11:54:59 2026 rev:167 rq:1382604 version:12.3.2

Changes:
--------
--- /work/SRC/openSUSE:Factory/mariadb/mariadb.changes  2026-09-16 
17:40:49.628250451 +0200
+++ /work/SRC/openSUSE:Factory/.mariadb.new.3698736/mariadb.changes     
2026-10-08 11:55:00.982002344 +0200
@@ -1,0 +2,8 @@
+Tue Sep 29 09:12:27 UTC 2026 - Tomáš Chvátal <[email protected]>
+
+- Disable upstream SECURITY_HARDENED (would append -fstack-protector
+  basic, downgrading -fstack-protector-strong from distro optflags;
+  optflags already provide -fPIE/-pie, -z relro/now and
+  -D_FORTIFY_SOURCE=3).
+
+-------------------------------------------------------------------

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ mariadb.spec ++++++
--- /var/tmp/diff_new_pack.2aXfWV/_old  2026-10-08 11:55:03.681115460 +0200
+++ /var/tmp/diff_new_pack.2aXfWV/_new  2026-10-08 11:55:03.685115627 +0200
@@ -407,7 +407,12 @@
 
 %build
 %global _lto_cflags %{_lto_cflags} -ffat-lto-objects
-%cmake -DWITH_SSL=system                                            \
+# -DSECURITY_HARDENED=OFF: upstream would add -fstack-protector (basic)
+# via SECURITY_HARDENED, downgrading -fstack-protector-strong from %{optflags}.
+# Distro optflags already provide -fPIE/-pie, -Wl,-z,relro,-z,now and
+# -D_FORTIFY_SOURCE=3 (stronger than upstream's level 2).
+%cmake -DSECURITY_HARDENED=OFF \
+       -DWITH_SSL=system                                            \
        -DWITH_LIBWRAP=ON                                            \
        -DENABLED_PROFILING=ON                                       \
        -DENABLE_DEBUG_SYNC=OFF                                      \

Reply via email to