Adrian Schröter 2017-08-31 06:26:51 +00:00 committed by Git OBS Bridge
parent 55e304e63c
commit 6022329ad9
2 changed files with 11 additions and 1 deletions

View File

@ -1,3 +1,9 @@
-------------------------------------------------------------------
Thu Aug 31 06:26:03 UTC 2017 - adrian@suse.de
- limit maximum size to 8K Fulldome resolution to avoid
DoS attacks. CVE-2017-0641 boo#1056539
------------------------------------------------------------------- -------------------------------------------------------------------
Fri Mar 3 09:25:31 UTC 2017 - tchvatal@suse.com Fri Mar 3 09:25:31 UTC 2017 - tchvatal@suse.com

View File

@ -130,7 +130,11 @@ cd build
%endif %endif
--extra-cflags="-std=gnu89 -U_FORTIFY_SOURCE %{optflags}" \ --extra-cflags="-std=gnu89 -U_FORTIFY_SOURCE %{optflags}" \
--extra-cxxflags="-U_FORTIFY_SOURCE %{optflags}" \ --extra-cxxflags="-U_FORTIFY_SOURCE %{optflags}" \
--enable-pic --enable-pic \
--size-limit=8192×8192
# size-limit to avoid CVE-2017-0641 DoS attacks. The limit is the
# 8K Fulldome resolution and should be enough for all current use cases
# bso#1056539
make %{?_smp_mflags} verbose=yes GEN_EXAMPLES= make %{?_smp_mflags} verbose=yes GEN_EXAMPLES=
%install %install