From 9c68ca6d5b247c74a0a7c4e42223bb6c20bdad82 Mon Sep 17 00:00:00 2001 From: AlmaLinux RelEng Bot Date: Mon, 24 Aug 2026 09:36:12 -0400 Subject: [PATCH] import CS qatengine-2.1.0-1.el9 --- .gitignore | 2 +- .qatengine.metadata | 2 +- SOURCES/fortify-source-3.patch | 11 ----------- SPECS/qatengine.spec | 15 ++++++++++++--- 4 files changed, 14 insertions(+), 16 deletions(-) delete mode 100644 SOURCES/fortify-source-3.patch diff --git a/.gitignore b/.gitignore index 5d1322e..1d26ce9 100644 --- a/.gitignore +++ b/.gitignore @@ -1 +1 @@ -SOURCES/qatengine-2.0.0.tar.gz +SOURCES/qatengine-2.1.0.tar.gz diff --git a/.qatengine.metadata b/.qatengine.metadata index 6e18cc4..9e67ea7 100644 --- a/.qatengine.metadata +++ b/.qatengine.metadata @@ -1 +1 @@ -b17cfb1a857c16ea67035d580623e0f45f79624d SOURCES/qatengine-2.0.0.tar.gz +9e5a54d5073f3695c60b089478878e98bc06cc89 SOURCES/qatengine-2.1.0.tar.gz diff --git a/SOURCES/fortify-source-3.patch b/SOURCES/fortify-source-3.patch deleted file mode 100644 index 0ce1b8d..0000000 --- a/SOURCES/fortify-source-3.patch +++ /dev/null @@ -1,11 +0,0 @@ ---- configure.ac.orig 2026-01-24 22:55:47.111990648 +0100 -+++ configure.ac 2026-01-24 22:56:12.351441492 +0100 -@@ -537,7 +537,7 @@ then - fi - - # Compiler security flags --AC_SUBST([cflags_common], ["-Wall -Wformat -Wformat-security -D_FORTIFY_SOURCE=2 -fno-delete-null-pointer-checks -fwrapv -fstack-protector-strong"]) -+AC_SUBST([cflags_common], ["-Wall -Wformat -Wformat-security -D_FORTIFY_SOURCE=3 -fno-delete-null-pointer-checks -fwrapv -fstack-protector-strong"]) - - # Disable insecure algorithms by default - if test "x$enable_qat_insecure_algorithms" = "xyes" diff --git a/SPECS/qatengine.spec b/SPECS/qatengine.spec index f2a0a8a..dfaf467 100644 --- a/SPECS/qatengine.spec +++ b/SPECS/qatengine.spec @@ -13,7 +13,7 @@ %endif Name: qatengine -Version: 2.0.0 +Version: 2.1.0 Release: 1%{?dist} Summary: Intel QuickAssist Technology (QAT) OpenSSL Engine @@ -38,8 +38,6 @@ BuildRequires: intel-ipsec-mb-devel >= 2.0 %endif BuildRequires: openssl -Patch1: fortify-source-3.patch - %description This package provides the Intel QuickAssist Technology OpenSSL Engine (an OpenSSL Plug-In Engine) which provides cryptographic acceleration @@ -49,6 +47,13 @@ enabled Intel platforms. %prep %autosetup -n QAT_Engine-%{version} +# RedHat's annocheck security hardening verification returns a warning: +# Hardened: ./usr/lib64/ossl-modules/qatprovider.so: FAIL: optimization +# test because level too low (based upon annobin data) (lto:value_barrier) +# This is a false positive, value_barrier() function in qat_constant_time.h +# is intentionally built with "#pragma GCC optimize ("O0")" to enable +# constant-time side-channel protection. Waive this annocheck warning. + %build autoreconf -ivf %configure %{?with_sw:--enable-qat_sw} %{?with_provider:--enable-qat_provider} @@ -80,6 +85,10 @@ openssl engine -v %{name} %endif %changelog +* Tue Jun 30 2026 Vladislav Dronov - 2.1.0-1 +- Update to qatengine v2.1.0 @ c7b07156 (RHEL-188511) +- Add annocheck warning explanation + * Fri Jan 23 2026 Vladislav Dronov - 2.0.0-1 - Update to qatengine v2.0.0 @ 4498412a (RHEL-143913)