Fix two CVEs.

OBS-URL: https://build.opensuse.org/request/show/1294248
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libmicrohttpd?expand=0&rev=48

libmicrohttpd.changes

@@ -1,3 +1,14 @@
+-------------------------------------------------------------------
+Fri Nov 21 20:45:31 UTC 2025 - Martin Jungblut Schreiner <martin.schreiner@suse.com>
+
+- Fix for the following bugs:
+  * bsc#1253177 CVE-2025-59777
+  * bsc#1253178 CVE-2025-62689
+- Add patch:
+  * CVE-2025-59777.patch
+  * this same patch fixes both CVEs
+  * git commit ff13abc1c1d7d2b30d69d5c0bd4a237e1801c50b
+
 -------------------------------------------------------------------
 Fri Apr 11 18:04:05 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
 
@@ -36,7 +47,7 @@ Wed May 31 04:59:03 UTC 2023 - Andreas Stieger <Andreas.Stieger@gmx.de>
   * fix processing of folded headers in requests
   * fix functionality with blocking sockets
 - update upstream signing key
- 
+
 -------------------------------------------------------------------
 Tue Feb 28 21:20:34 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de>
 
@@ -104,7 +115,7 @@ Sat Jul  4 17:40:48 UTC 2020 - Andreas Stieger <andreas.stieger@gmx.de>
 - libmicrohttpd 0.9.71:
   * Fix buffer overflow issue in URL parser [boo#1173718]
   * Fixed PostProcessor bug
-  * Documentation and example fixes  
+  * Documentation and example fixes
 
 -------------------------------------------------------------------
 Sun Feb  9 10:15:21 UTC 2020 - Martin Hauke <mardnh@gmx.de>
@@ -496,7 +507,7 @@ Sun May  3 10:26:32 UTC 2015 - astieger@suse.com
 
 - update to 0.9.41:
  * fix bugs relating to various threading modes
- * fix some HTTP 1.0 tests 
+ * fix some HTTP 1.0 tests
 
 -------------------------------------------------------------------
 Mon Apr 13 11:39:23 UTC 2015 - meissner@suse.com

libmicrohttpd.spec

@@ -33,6 +33,8 @@ Source0:        https://ftp.gnu.org/gnu/libmicrohttpd/%{name}-%{version}.tar.gz
 Source1:        https://ftp.gnu.org/gnu/libmicrohttpd/%{name}-%{version}.tar.gz.sig
 Source2:        https://savannah.gnu.org/people/viewgpg.php?user_id=90068#/%{name}.keyring
 Patch0:         libmicrohttpd-1.0.1-curl-8.13.0.patch
+Patch1:         CVE-2025-59777.patch
+BuildRequires:  autoconf
 BuildRequires:  libtool
 BuildRequires:  makeinfo
 BuildRequires:  pkgconfig >= 0.9.0
@@ -90,6 +92,7 @@ Headers, pkg-config files, so link and other development files for %{name}
 %autosetup -p1
 
 %build
+autoreconf
 %configure \
   --enable-bauth \
   --enable-dauth \