Add BIND_NOW,PIE,SP secure compilation options

(cherry picked from commit 247921843245df589754ae9b654abdaec341086a)

qpdf.spec

@@ -1,6 +1,6 @@
 Name:           qpdf
 Version:        11.1.0
-Release:        1
+Release:        2
 Summary:        A command-line program to transform PDF files
 License:        (Artistic 2.0 or ASL 2.0) and MIT
 URL:            http://qpdf.sourceforge.net/
@@ -8,7 +8,7 @@ Source0:        http://downloads.sourceforge.net/sourceforge/qpdf/qpdf-%{version
 
 BuildRequires:  gcc gcc-c++ zlib-devel libjpeg-turbo-devel pcre-devel
 BuildRequires:  perl-interpreter perl-generators perl(Digest::MD5)
-BuildRequires:  cmake
+BuildRequires:  cmake gnutls-devel
 
 Provides:       %{name}-libs = %{version}-%{release}
 Obsoletes:      %{name}-libs < %{version}-%{release}
@@ -37,10 +37,25 @@ Obsoletes:      %{name}-doc < %{version}-%{release}
 This package contains some man help and other files for %{name}.
 
 %prep
-%setup
+%setup -q
 
 %build
-cmake -S . -B build -DCMAKE_BUILD_TYPE=RelWithDebInfo
+export CFLAGS="${RPM_OPT_FLAGS}"
+export CXXFLAGS="${RPM_OPT_FLAGS}"
+export LDFLAGS="${RPM_LD_FLAGS}"
+
+cmake -S . -B build \
+    -DCMAKE_C_FLAGS_RELEASE:STRING=-DNDEBUG \
+    -DCMAKE_CXX_FLAGS_RELEASE:STRING=-DNDEBUG \
+    -DCMAKE_Fortran_FLAGS_RELEASE:STRING=-DNDEBUG \
+    -DCMAKE_VERBOSE_MAKEFILE:BOOL=ON \
+    -DCMAKE_INSTALL_DO_STRIP:BOOL=OFF \
+    -DCMAKE_BUILD_TYPE=RelWithDebInfo \
+    -DBUILD_STATIC_LIBS=0 \
+    -DREQUIRE_CRYPTO_GNUTLS=1 \
+    -DUSE_IMPLICIT_CRYPTO=0 \
+    -DSHOW_FAILED_TEST_OUTPUT=1 \
+    -DINSTALL_CMAKE_PACKAGE=0
 cmake --build build
 
 %install
@@ -71,6 +86,9 @@ rm -rf %{buildroot}/usr/lib64/libqpdf.a
 %{_mandir}/man1/*
 
 %changelog
+* Mon Mar 06 2023 wangkai <wangkai385@h-partners.com> - 11.1.0-2
+- Add BIND_NOW,PIE,SP secure compilation options
+
 * Wed Oct 12 2022 humengfei <humengfei@tju.edu.cn> - 11.1.0-1
 - update