Fix two CVEs.

libmicrohttpd.changes

@@ -1,3 +1,14 @@
+-------------------------------------------------------------------
+Fri Nov 21 20:45:31 UTC 2025 - Martin Jungblut Schreiner <martin.schreiner@suse.com>
+
+- Fix for the following bugs:
+  * bsc#1253177 CVE-2025-59777
+  * bsc#1253178 CVE-2025-62689
+- Add patch:
+  * CVE-2025-59777.patch
+  * this same patch fixes both CVEs
+  * git commit ff13abc1c1d7d2b30d69d5c0bd4a237e1801c50b
+
 -------------------------------------------------------------------
 Fri Apr 11 18:04:05 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
 

libmicrohttpd.spec

@@ -33,6 +33,8 @@ Source0:        https://ftp.gnu.org/gnu/libmicrohttpd/%{name}-%{version}.tar.gz
 Source1:        https://ftp.gnu.org/gnu/libmicrohttpd/%{name}-%{version}.tar.gz.sig
 Source2:        https://savannah.gnu.org/people/viewgpg.php?user_id=90068#/%{name}.keyring
 Patch0:         libmicrohttpd-1.0.1-curl-8.13.0.patch
+Patch1:         CVE-2025-59777.patch
+BuildRequires:  autoconf
 BuildRequires:  libtool
 BuildRequires:  makeinfo
 BuildRequires:  pkgconfig >= 0.9.0
@@ -90,6 +92,7 @@ Headers, pkg-config files, so link and other development files for %{name}
 %autosetup -p1
 
 %build
+autoreconf
 %configure \
   --enable-bauth \
   --enable-dauth \