pool/openssl-3
SHA256
3
0
Fork 2
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Accepting request 1172941 from security:tls

Browse Source 
OBS-URL: https://build.opensuse.org/request/show/1172941
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/openssl-3?expand=0&rev=23
This commit is contained in:
Dominique Leuenberger 2024-05-11 16:18:55 +00:00 committed by Git OBS Bridge
commit 9076d418a2
2 changed files with 18 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
openssl-3.changes
View File

@ -1,3 +1,8 @@
-------------------------------------------------------------------
Tue May 7 13:35:31 UTC 2024 - Giuliano Belinassi <giuliano.belinassi@suse.com>
- Enable livepatching support (bsc#1223428)
------------------------------------------------------------------- -------------------------------------------------------------------
Tue May 7 11:51:38 UTC 2024 - Otto Hollmann <otto.hollmann@suse.com> Tue May 7 11:51:38 UTC 2024 - Otto Hollmann <otto.hollmann@suse.com>

13
openssl-3.spec
View File

@ -22,6 +22,10 @@
%define man_suffix 3ssl %define man_suffix 3ssl
%global sslengcnf %{ssletcdir}/engines%{sover}.d %global sslengcnf %{ssletcdir}/engines%{sover}.d
%global sslengdef %{ssletcdir}/engdef%{sover}.d %global sslengdef %{ssletcdir}/engdef%{sover}.d
# Enable userspace livepatching.
%define livepatchable 1
Name: openssl-3 Name: openssl-3
# Don't forget to update the version in the "openssl" meta-package! # Don't forget to update the version in the "openssl" meta-package!
Version: 3.1.4 Version: 3.1.4
@ -86,6 +90,13 @@ Patch27: openssl-CVE-2024-0727.patch
# PATCH-FIX-UPSTREAM: bsc#1222548 CVE-2024-2511: Unbounded memory growth with session handling in TLSv1.3 # PATCH-FIX-UPSTREAM: bsc#1222548 CVE-2024-2511: Unbounded memory growth with session handling in TLSv1.3
Patch28: openssl-CVE-2024-2511.patch Patch28: openssl-CVE-2024-2511.patch
BuildRequires: pkgconfig BuildRequires: pkgconfig
%if 0%{?sle_version} >= 150400 || 0%{?suse_version} >= 1550
BuildRequires: ulp-macros
%else
# Define ulp-macros macros as empty
%define cflags_livepatching ""
%define pack_ipa_dumps echo "Livepatching is disabled in this build"
%endif
BuildRequires: pkgconfig(zlib) BuildRequires: pkgconfig(zlib)
Requires: libopenssl3 = %{version}-%{release} Requires: libopenssl3 = %{version}-%{release}
Requires: openssl Requires: openssl
@ -188,6 +199,7 @@ export MACHINE=armv6l
--libdir=%{_lib} \ --libdir=%{_lib} \
--openssldir=%{ssletcdir} \ --openssldir=%{ssletcdir} \
%{optflags} \ %{optflags} \
%{cflags_livepatching} \
-Wa,--noexecstack \ -Wa,--noexecstack \
-Wl,-z,relro,-z,now \ -Wl,-z,relro,-z,now \
-fno-common \ -fno-common \
@ -252,6 +264,7 @@ gcc -o showciphers %{optflags} -I%{buildroot}%{_includedir} %{SOURCE5} -L%{build
LD_LIBRARY_PATH=%{buildroot}%{_libdir} ./showciphers LD_LIBRARY_PATH=%{buildroot}%{_libdir} ./showciphers
%install %install
%{pack_ipa_dumps}
%make_install %{?_smp_mflags} MANSUFFIX=%{man_suffix} %make_install %{?_smp_mflags} MANSUFFIX=%{man_suffix}
rename so.%{sover} so.%{version} %{buildroot}%{_libdir}/*.so.%{sover} rename so.%{sover} so.%{version} %{buildroot}%{_libdir}/*.so.%{sover}