rpms/curl
8
0
Fork 1
Code Issues Pull Requests Releases Activity

Disable OpenSSL Engine API support in RHEL 10

Browse Source 
Resolves: RHEL-30436
This commit is contained in:
Jacek Migacz 2024-03-27 15:12:16 +01:00
parent 62464f90e4
commit d008daad04
1 changed files with 13 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
curl.spec
View File

@ -1,7 +1,7 @@
Summary: A utility for getting files from remote servers (FTP, HTTP, and others) Summary: A utility for getting files from remote servers (FTP, HTTP, and others)
Name: curl Name: curl
Version: 8.6.0 Version: 8.6.0
Release: 7%{?dist} Release: 8%{?dist}
License: curl License: curl
Source0: https://curl.se/download/%{name}-%{version}.tar.xz Source0: https://curl.se/download/%{name}-%{version}.tar.xz
Source1: https://curl.se/download/%{name}-%{version}.tar.xz.asc Source1: https://curl.se/download/%{name}-%{version}.tar.xz.asc
@ -165,6 +165,8 @@ uploading, HTTP form based upload, proxies, cookies, user+password
authentication (Basic, Digest, NTLM, Negotiate, kerberos...), file transfer authentication (Basic, Digest, NTLM, Negotiate, kerberos...), file transfer
resume, proxy tunneling and a busload of other useful tricks. resume, proxy tunneling and a busload of other useful tricks.
%bcond openssl_engine %[!(0%{?rhel} >= 10)]
%package -n libcurl %package -n libcurl
Summary: A library for getting files from web servers Summary: A library for getting files from web servers
Requires: libnghttp2%{?_isa} >= %{libnghttp2_version} Requires: libnghttp2%{?_isa} >= %{libnghttp2_version}
@ -245,6 +247,11 @@ sed -e 's|^35$|35,52|' -i tests/data/test323
autoreconf -fiv autoreconf -fiv
%build %build
%if %{without openssl_engine}
export CPPFLAGS="$CPPFLAGS -DOPENSSL_NO_ENGINE"
%endif
mkdir build-{full,minimal} mkdir build-{full,minimal}
export common_configure_opts=" \ export common_configure_opts=" \
--cache-file=../config.cache \ --cache-file=../config.cache \
@ -418,6 +425,11 @@ rm -f ${RPM_BUILD_ROOT}%{_mandir}/man1/mk-ca-bundle.1*
%{_libdir}/libcurl.so.4.[0-9].[0-9].minimal %{_libdir}/libcurl.so.4.[0-9].[0-9].minimal
%changelog %changelog
* Tue Jul 9 2024 Jacek Migacz <jmigacz@redhat.com> - 8.6.0-8
- disable OpenSSL Engine API support (RHEL-30436)
- setopt: Fix disabling all protocols (CVE-2024-2004)
- http2: push headers better cleanup (CVE-2024-2398)
* Mon Jun 24 2024 Troy Dawson <tdawson@redhat.com> - 8.6.0-7 * Mon Jun 24 2024 Troy Dawson <tdawson@redhat.com> - 8.6.0-7
- Bump release for June 2024 mass rebuild - Bump release for June 2024 mass rebuild