Browse Source

updated 2 packages

openssl-1.1.1i-1

samba-4.13.2-1

git-svn-id: http://trac.vinelinux.org/repos/projects/specs@12509 ec354946-7b23-47d6-9f5a-488ba84defc7
tomop 3 years ago
parent
commit
c56e62b7b1
2 changed files with 63 additions and 16 deletions
  1. 57 15
      o/openssl/openssl-vl.spec
  2. 6 1
      s/samba/samba-vl.spec

+ 57 - 15
o/openssl/openssl-vl.spec

@@ -9,9 +9,9 @@
 
 
 Summary: Secure Sockets Layer Toolkit
 Summary: Secure Sockets Layer Toolkit
 Name: openssl
 Name: openssl
-Version: 1.1.1g
+Version: 1.1.1i
 Release: 1%{_dist_release}
 Release: 1%{_dist_release}
-Group: System Environment/Libraries
+Group: system,security
 Vendor: Project Vine
 Vendor: Project Vine
 Distribution: Vine Linux
 Distribution: Vine Linux
 Packager: daisuke, iwamoto
 Packager: daisuke, iwamoto
@@ -49,17 +49,26 @@ Patch38: openssl-1.1.1-no-weak-verify.patch
 Patch40: openssl-1.1.1-disable-ssl3.patch
 Patch40: openssl-1.1.1-disable-ssl3.patch
 Patch41: openssl-1.1.1-system-cipherlist.patch
 Patch41: openssl-1.1.1-system-cipherlist.patch
 Patch42: openssl-1.1.1-fips.patch
 Patch42: openssl-1.1.1-fips.patch
-Patch43: openssl-1.1.1-ignore-bound.patch
 Patch44: openssl-1.1.1-version-override.patch
 Patch44: openssl-1.1.1-version-override.patch
 Patch45: openssl-1.1.1-weak-ciphers.patch
 Patch45: openssl-1.1.1-weak-ciphers.patch
 Patch46: openssl-1.1.1-seclevel.patch
 Patch46: openssl-1.1.1-seclevel.patch
 Patch48: openssl-1.1.1-fips-post-rand.patch
 Patch48: openssl-1.1.1-fips-post-rand.patch
 Patch49: openssl-1.1.1-evp-kdf.patch
 Patch49: openssl-1.1.1-evp-kdf.patch
 Patch50: openssl-1.1.1-ssh-kdf.patch
 Patch50: openssl-1.1.1-ssh-kdf.patch
+Patch51: openssl-1.1.1-intel-cet.patch
+Patch60: openssl-1.1.1-krb5-kdf.patch
+Patch61: openssl-1.1.1-edk2-build.patch
+Patch62: openssl-1.1.1-fips-curves.patch
+Patch65: openssl-1.1.1-fips-drbg-selftest.patch
+Patch66: openssl-1.1.1-fips-dh.patch
+Patch67: openssl-1.1.1-kdf-selftest.patch
+Patch69: openssl-1.1.1-alpn-cb.patch
+Patch70: openssl-1.1.1-rewire-fips-drbg.patch
 # Backported fixes including security fixes
 # Backported fixes including security fixes
-Patch51: openssl-1.1.1-upstream-sync.patch
 Patch52: openssl-1.1.1-s390x-update.patch
 Patch52: openssl-1.1.1-s390x-update.patch
 Patch53: openssl-1.1.1-fips-crng-test.patch
 Patch53: openssl-1.1.1-fips-crng-test.patch
+Patch55: openssl-1.1.1-arm-update.patch
+Patch56: openssl-1.1.1-s390x-ecc.patch
 
 
 # security fix
 # security fix
 # none
 # none
@@ -78,9 +87,10 @@ Requires: ca-certificates
 The OpenSSL certificate management tool and the shared libraries that
 The OpenSSL certificate management tool and the shared libraries that
 provide various cryptographic algorithms and protocols.
 provide various cryptographic algorithms and protocols.
 
 
+
 %package devel
 %package devel
 Summary: OpenSSL libraries and development headers.
 Summary: OpenSSL libraries and development headers.
-Group: Development/Libraries
+Group: programming
 Requires: %{name} = %{version}-%{release}
 Requires: %{name} = %{version}-%{release}
 Requires: krb5-devel
 Requires: krb5-devel
 
 
@@ -92,9 +102,10 @@ supported by OpenSSL.
 Patches for many networking apps can be found at:
 Patches for many networking apps can be found at:
 ftp://ftp.psy.uq.oz.au/pub/Crypto/SSLapps/
 ftp://ftp.psy.uq.oz.au/pub/Crypto/SSLapps/
 
 
+
 %package static
 %package static
 Summary:  Libraries for static linking of applications which will use OpenSSL
 Summary:  Libraries for static linking of applications which will use OpenSSL
-Group: Development/Libraries
+Group: programming
 Requires: %{name}-devel = %{version}-%{release}
 Requires: %{name}-devel = %{version}-%{release}
 
 
 %description static
 %description static
@@ -103,9 +114,10 @@ package contains static libraries needed for static linking of
 applications which support various cryptographic algorithms and
 applications which support various cryptographic algorithms and
 protocols.
 protocols.
 
 
+
 %package perl
 %package perl
 Summary: OpenSSL scripts which require Perl.
 Summary: OpenSSL scripts which require Perl.
-Group: Applications/Internet
+Group: security
 Requires: %{name} = %{version}-%{release}
 Requires: %{name} = %{version}-%{release}
 Requires: perl
 Requires: perl
 
 
@@ -113,18 +125,20 @@ Requires: perl
 Perl scripts provided with OpenSSL for converting certificates and keys
 Perl scripts provided with OpenSSL for converting certificates and keys
 from other formats to those used by OpenSSL.
 from other formats to those used by OpenSSL.
 
 
+
 ## to build compat32 for x86_64 architecture support
 ## to build compat32 for x86_64 architecture support
 %package -n compat32-%{name}
 %package -n compat32-%{name}
 Summary: Secure Sockets Layer Toolkit
 Summary: Secure Sockets Layer Toolkit
-Group: System Environment/Libraries
+Group: system
 Requires: %{name} = %{version}-%{release}
 Requires: %{name} = %{version}-%{release}
 %description -n compat32-%{name}
 %description -n compat32-%{name}
 The OpenSSL certificate management tool and the shared libraries that
 The OpenSSL certificate management tool and the shared libraries that
 provide various cryptographic algorithms and protocols.
 provide various cryptographic algorithms and protocols.
 
 
+
 %package -n compat32-%{name}-devel
 %package -n compat32-%{name}-devel
 Summary: OpenSSL libraries and development headers.
 Summary: OpenSSL libraries and development headers.
-Group: Development/Libraries
+Group: programming
 Requires: compat32-%{name} = %{version}-%{release}
 Requires: compat32-%{name} = %{version}-%{release}
 Requires: compat32-krb5-devel
 Requires: compat32-krb5-devel
 %description -n compat32-%{name}-devel
 %description -n compat32-%{name}-devel
@@ -132,6 +146,10 @@ The static libraries and include files needed to compile apps
 with support for various the cryptographic algorithms and protocols
 with support for various the cryptographic algorithms and protocols
 supported by OpenSSL.
 supported by OpenSSL.
 
 
+
+%debug_package
+
+
 %prep
 %prep
 %setup -q -n %{name}-%{version}
 %setup -q -n %{name}-%{version}
 
 
@@ -160,7 +178,6 @@ cp %{SOURCE13} test/
 %if %{with fips}
 %if %{with fips}
 %patch42 -p1 -b .fips
 %patch42 -p1 -b .fips
 %endif
 %endif
-%patch43 -p1 -b .ignore-bound
 %if %{with fips}
 %if %{with fips}
 %patch44 -p1 -b .version-override
 %patch44 -p1 -b .version-override
 %endif
 %endif
@@ -170,15 +187,30 @@ cp %{SOURCE13} test/
 %patch49 -p1 -b .evp-kdf
 %patch49 -p1 -b .evp-kdf
 %patch50 -p1 -b .ssh-kdf
 %patch50 -p1 -b .ssh-kdf
 %patch51 -p1 -b .upstream-sync
 %patch51 -p1 -b .upstream-sync
-%endif
 #patch52 -p1 -b .s390x-update
 #patch52 -p1 -b .s390x-update
+%endif
 %if %{with fips}
 %if %{with fips}
 %patch53 -p1 -b .crng-test
 %patch53 -p1 -b .crng-test
 %endif
 %endif
+#patch55 -p1 -b .arm-update
+#patch56 -p1 -b .s390x-ecc
+%if %{with fips}
+%patch60 -p1 -b .krb5-kdf
+%patch61 -p1 -b .edk2-build
+%patch62 -p1 -b .fips-curves
+%patch65 -p1 -b .drbg-selftest
+%patch66 -p1 -b .fips-dh
+%patch67 -p1 -b .kdf-selftest
+%endif
+%patch69 -p1 -b .alpn-cb
+%if %{with fips}
+%patch70 -p1 -b .rewire-fips-drbg
+%endif
 
 
 # security fix
 # security fix
 # none
 # none
 
 
+
 %build 
 %build 
 # Figure out which flags we want to use.
 # Figure out which flags we want to use.
 # default
 # default
@@ -232,6 +264,7 @@ for i in libcrypto.pc libssl.pc openssl.pc ; do
   sed -i '/^Libs.private:/{s/-L[^ ]* //;s/-Wl[^ ]* //}' $i
   sed -i '/^Libs.private:/{s/-L[^ ]* //;s/-Wl[^ ]* //}' $i
 done
 done
 
 
+
 %check
 %check
 # Verify that what was compiled actually works.
 # Verify that what was compiled actually works.
 
 
@@ -248,7 +281,6 @@ patch -p1 -R < %{PATCH31}
 # drop a recipe includes tests for brainpool curves (not supported by openssl-hobbled).
 # drop a recipe includes tests for brainpool curves (not supported by openssl-hobbled).
 rm -f test/recipes/80-test_ssl_new.t
 rm -f test/recipes/80-test_ssl_new.t
 
 
-
 LD_LIBRARY_PATH=`pwd`${LD_LIBRARY_PATH:+:${LD_LIBRARY_PATH}}
 LD_LIBRARY_PATH=`pwd`${LD_LIBRARY_PATH:+:${LD_LIBRARY_PATH}}
 export LD_LIBRARY_PATH
 export LD_LIBRARY_PATH
 OPENSSL_ENABLE_MD5_VERIFY=
 OPENSSL_ENABLE_MD5_VERIFY=
@@ -257,7 +289,6 @@ OPENSSL_SYSTEM_CIPHERS_OVERRIDE=xyz_nonexistent_file
 export OPENSSL_SYSTEM_CIPHERS_OVERRIDE
 export OPENSSL_SYSTEM_CIPHERS_OVERRIDE
 make test
 make test
 
 
-
 # Add generation of HMAC checksum of the final stripped library
 # Add generation of HMAC checksum of the final stripped library
 %define __spec_install_post \
 %define __spec_install_post \
     %{?__debug_package:%{__debug_install_post}} \
     %{?__debug_package:%{__debug_install_post}} \
@@ -267,6 +298,7 @@ make test
 
 
 %define __provides_exclude_from %{_libdir}/openssl
 %define __provides_exclude_from %{_libdir}/openssl
 
 
+
 %install
 %install
 [ "$RPM_BUILD_ROOT" != "/" ] && rm -rf $RPM_BUILD_ROOT
 [ "$RPM_BUILD_ROOT" != "/" ] && rm -rf $RPM_BUILD_ROOT
 # Install OpenSSL.
 # Install OpenSSL.
@@ -358,6 +390,7 @@ export LD_LIBRARY_PATH
 %clean
 %clean
 [ "$RPM_BUILD_ROOT" != "/" ] && rm -rf $RPM_BUILD_ROOT
 [ "$RPM_BUILD_ROOT" != "/" ] && rm -rf $RPM_BUILD_ROOT
 
 
+
 %files 
 %files 
 %defattr(-,root,root)
 %defattr(-,root,root)
 %{!?_licensedir:%global license %%doc}
 %{!?_licensedir:%global license %%doc}
@@ -427,15 +460,24 @@ export LD_LIBRARY_PATH
 %attr(0644,root,root) %{_libdir}/pkgconfig/*.pc
 %attr(0644,root,root) %{_libdir}/pkgconfig/*.pc
 %endif
 %endif
 
 
-%post -p /sbin/ldconfig
 
 
+%post -p /sbin/ldconfig
 %postun -p /sbin/ldconfig
 %postun -p /sbin/ldconfig
 
 
 %post -n compat32-%{name} -p /sbin/ldconfig
 %post -n compat32-%{name} -p /sbin/ldconfig
-
 %postun -n compat32-%{name} -p /sbin/ldconfig
 %postun -n compat32-%{name} -p /sbin/ldconfig
 
 
+
 %changelog
 %changelog
+* Wed Dec 09 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 1.1.1i-1
+- new upstream release.
+
+* Sat Nov 21 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 1.1.1h-1
+- new upstream release.
+- dropped Patch43: fixed in upstream.
+- imported Patch55-70 from rawhide.
+- updated Source13.
+
 * Sat Apr 25 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 1.1.1g-1
 * Sat Apr 25 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 1.1.1g-1
 - new upstream release.
 - new upstream release.
 
 

+ 6 - 1
s/samba/samba-vl.spec

@@ -1,7 +1,7 @@
 %bcond_with systemd
 %bcond_with systemd
 %bcond_without pidl
 %bcond_without pidl
 
 
-%define samba_version 4.13.1
+%define samba_version 4.13.2
 #define rc_number rc4
 #define rc_number rc4
 %define samba_release 1
 %define samba_release 1
 
 
@@ -944,6 +944,7 @@ fi
 
 
 %endif
 %endif
 
 
+
 %files
 %files
 %defattr(-,root,root,-)
 %defattr(-,root,root,-)
 %license COPYING
 %license COPYING
@@ -1827,7 +1828,11 @@ fi
 
 
 %endif
 %endif
 
 
+
 %changelog
 %changelog
+* Fri Dec 11 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 4.13.2-1
+- new upstream release.
+
 * Mon Nov 02 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 4.13.1-1
 * Mon Nov 02 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 4.13.1-1
 - new upstream release.
 - new upstream release.