-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

DO NOT REPLY TO THIS MESSAGE.  INSTEAD, POST ANY RESPONSES TO THE LINK BELOW.

[STR New]

Hi Michael,

Tim proposed to link CUPS with immediate relocations (aka -z,now), aka
"When generating an executable or shared library, mark it to tell the
dynamic linker to resolve all symbols when the program is started, or when
the shared library is linked to using dlopen, instead of deferring function
call resolution to the point when the function is first called."

This is considered by Debian a a generally good hardening flag.

Patch is attached.

Link: https://www.cups.org/str.php?L4349
Version: 1.7.1
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
Comment: GPGTools - https://gpgtools.org
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=zZKY
-----END PGP SIGNATURE-----