rpms/qatengine
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Update to qatengine 2.1.0

Browse Source 
Update to qatengine 2.1.0 @ c7b07156
Add annocheck warning explanation

Resolves: RHEL-188511

Signed-off-by: Vladislav Dronov <vdronov@redhat.com>
This commit is contained in:
Vladislav Dronov 2026-06-29 23:46:43 +02:00
parent 3be5b3eefb
commit 81919f4c2d
3 changed files with 13 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
fortify-source-3.patch
View File

@ -1,11 +0,0 @@
--- configure.ac.orig 2026-01-24 22:55:47.111990648 +0100
+++ configure.ac 2026-01-24 22:56:12.351441492 +0100
@@ -537,7 +537,7 @@ then
fi
# Compiler security flags
-AC_SUBST([cflags_common], ["-Wall -Wformat -Wformat-security -D_FORTIFY_SOURCE=2 -fno-delete-null-pointer-checks -fwrapv -fstack-protector-strong"])
+AC_SUBST([cflags_common], ["-Wall -Wformat -Wformat-security -D_FORTIFY_SOURCE=3 -fno-delete-null-pointer-checks -fwrapv -fstack-protector-strong"])
# Disable insecure algorithms by default
if test "x$enable_qat_insecure_algorithms" = "xyes"

15
qatengine.spec
View File

@ -13,7 +13,7 @@
%endif
Name: qatengine
Version: 2.0.0
Version: 2.1.0
Release: 1%{?dist}
Summary: Intel QuickAssist Technology (QAT) OpenSSL Engine
@ -38,8 +38,6 @@ BuildRequires: intel-ipsec-mb-devel >= 2.0
%endif
BuildRequires: openssl
Patch1: fortify-source-3.patch
%description
This package provides the Intel QuickAssist Technology OpenSSL Engine
(an OpenSSL Plug-In Engine) which provides cryptographic acceleration
@ -49,6 +47,13 @@ enabled Intel platforms.
%prep
%autosetup -n QAT_Engine-%{version}
# RedHat's annocheck security hardening verification returns a warning:
# Hardened: ./usr/lib64/ossl-modules/qatprovider.so: FAIL: optimization
# test because level too low (based upon annobin data) (lto:value_barrier)
# This is a false positive, value_barrier() function in qat_constant_time.h
# is intentionally built with "#pragma GCC optimize ("O0")" to enable
# constant-time side-channel protection. Waive this annocheck warning.
%build
autoreconf -ivf
%configure %{?with_sw:--enable-qat_sw} %{?with_provider:--enable-qat_provider}
@ -80,6 +85,10 @@ openssl engine -v %{name}
%endif
%changelog
* Tue Jun 30 2026 Vladislav Dronov <vdronov@redhat.com> - 2.1.0-1
- Update to qatengine v2.1.0 @ c7b07156 (RHEL-188511)
- Add annocheck warning explanation
* Fri Jan 23 2026 Vladislav Dronov <vdronov@redhat.com> - 2.0.0-1
- Update to qatengine v2.0.0 @ 4498412a (RHEL-143913)

2
sources
View File

@ -1 +1 @@
SHA512 (qatengine-2.0.0.tar.gz) = c0c72e8b6f985b753a827faeb80bccc88f2962542ff7c256e463ff6fb8b99027329be67319c2e09555c0b050d2e99370a33562c66c591d82ccf319e5babfb890
SHA512 (qatengine-2.1.0.tar.gz) = c7634153fdc2e89f4bbeea8ef614d72bea0681cddb9dd1afafa902eeb0fad9eb6e50f56dcef56c963c980bacef93ac650f7134cea5a212c6bf0774512ec039fe