%define _hardened_build 1 %global vendor %{?_vendor:%{_vendor}}%{!?_vendor:openEuler} Name: trafficserver Version: 9.2.5 Release: 5 Summary: Apache Traffic Server, a reverse, forward and transparent HTTP proxy cache License: Apache-2.0 URL: https://trafficserver.apache.org/ Source0: http://www.apache.org/dist/%{name}/%{name}-%{version}.tar.bz2 Patch0000: Add-openeuler-support.patch Patch0001: Fix-status-failure-after-stopping-service.patch Patch0002: Fix-log-in-debug-mode.patch Patch0003: config-layout-openEuler.patch Patch0004: Modify-storage.config-for-traffic_cache_tool.patch Patch0005: add-riscv-support.patch Patch0006: add-loong64-support.patch Patch0007: CVE-2024-38479.patch Patch0008: CVE-2024-50305.patch Patch0009: CVE-2024-50306.patch Patch0010: Invoke-initgroups-iff-we-got-enough-privileges.patch Patch0011: CVE-2024-38311-pre-Do-not-allow-extra-CRs-in-chunks-11936-11942.patch Patch0012: CVE-2024-38311.patch Patch0013: CVE-2024-56195.patch Patch0014: CVE-2024-56202.patch Patch0015: CVE-2024-53868.patch BuildRequires: expat-devel hwloc-devel openssl-devel pcre-devel zlib-devel xz-devel BuildRequires: libcurl-devel ncurses-devel gcc gcc-c++ perl-ExtUtils-MakeMaker BuildRequires: libcap-devel cmake libunwind-devel automake chrpath Requires: expat hwloc openssl pcre zlib xz libcurl Requires: systemd ncurses pkgconfig libcap initscripts Requires(postun): systemd %description Apache Traffic Server is an OpenSource HTTP / HTTPS / HTTP/2 / QUIC reverse, forward and transparent proxy and cache. %package devel Summary: Apache Traffic Server devel package Requires: trafficserver = %{version}-%{release} %description devel Include files and various tools for ATS developers. %package perl Summary: ATS management Perl bindings Requires: trafficserver = %{version}-%{release} %description perl This package contains some Perl APIs for talking to the ATS management port. %prep %autosetup -n %{name}-%{version} -p1 %build autoreconf ./configure \ --enable-layout=%{vendor} \ --libdir=%{_libdir}/trafficserver \ --libexecdir=%{_libdir}/trafficserver/plugins \ --enable-experimental-plugins \ --with-user=ats --with-group=ats \ --disable-silent-rules make %{?_smp_mflags} V=1 %install rm -rf %{buildroot} make DESTDIR=%{buildroot} install mkdir -p %{buildroot}/lib/systemd/system cp rc/trafficserver.service %{buildroot}/lib/systemd/system find %{buildroot} -type f -name "*.la" -delete find %{buildroot} -type f -name "*.a" -delete find %{buildroot} -type f -name "*.pod" -delete find %{buildroot} -type f -name "*.in" -delete find %{buildroot} -type f -name ".packlist" -delete find %{buildroot} -type f -name "plugin_*.so" -delete mkdir -p %{buildroot}%{_datadir}/perl5 mv %{buildroot}/usr/lib/perl5/* %{buildroot}%{_datadir}/perl5 mkdir -p %{buildroot}/run/trafficserver mkdir -p %{buildroot}%{_datadir}/pkgconfig mv %{buildroot}%{_libdir}/trafficserver/pkgconfig/trafficserver.pc %{buildroot}%{_datadir}/pkgconfig rm -f %{buildroot}%{_bindir}/trafficserver chrpath -d %{buildroot}%{_bindir}/traffic_crashlog chrpath -d %{buildroot}%{_bindir}/traffic_ctl chrpath -d %{buildroot}%{_bindir}/traffic_layout chrpath -d %{buildroot}%{_bindir}/traffic_logcat chrpath -d %{buildroot}%{_bindir}/traffic_logstats chrpath -d %{buildroot}%{_bindir}/traffic_manager chrpath -d %{buildroot}%{_bindir}/traffic_server chrpath -d %{buildroot}%{_bindir}/traffic_top chrpath -d %{buildroot}%{_bindir}/traffic_via chrpath -d %{buildroot}%{_libdir}/trafficserver/libtscore.so.%{version} chrpath -d %{buildroot}%{_libdir}/trafficserver/libtsmgmt.so.%{version} chrpath -d %{buildroot}%{_libdir}/trafficserver/plugins/server_push_preload.so chrpath -d %{buildroot}%{_libdir}/trafficserver/plugins/redo_cache_lookup.so mkdir -p %{buildroot}/etc/ld.so.conf.d echo "%{_libdir}/%{name}" > %{buildroot}/etc/ld.so.conf.d/%{name}-%{_arch}.conf %post /sbin/ldconfig %systemd_post trafficserver.service %pre getent group ats >/dev/null || groupadd -r ats -g 176 &>/dev/null getent passwd ats >/dev/null || useradd -r -u 176 -g ats -d / -s /sbin/nologin -c "Apache Traffic Server" ats &>/dev/null %preun %systemd_preun trafficserver.service %postun /sbin/ldconfig %systemd_postun_with_restart trafficserver.service %files %defattr(-, root, root, -) %{!?_licensedir:%global license %%doc} %license LICENSE %doc README.md CHANGELOG* NOTICE STATUS %config(noreplace) /usr/etc/trafficserver/* %{_bindir}/traffic_* %{_bindir}/tspush %dir %{_libdir}/trafficserver %dir %{_libdir}/trafficserver/plugins %{_libdir}/trafficserver/libts*.so* %{_libdir}/trafficserver/plugins/*.so /lib/systemd/system/trafficserver.service %attr(0755, ats, ats) %dir /usr/etc/trafficserver %attr(0755, ats, ats) %dir /usr/var/trafficserver/log %attr(0755, ats, ats) %dir /usr/var/trafficserver/run %attr(0755, ats, ats) %dir /usr/var/trafficserver/cache %attr(0644, ats, ats) /usr/etc/trafficserver/*.config %attr(0644, ats, ats) /usr/etc/trafficserver/*.yaml /etc/ld.so.conf.d/%{name}-%{_arch}.conf %files perl %defattr(-,root,root,-) %{_mandir}/man3/* %{_datadir}/perl5/Apache/* %files devel %defattr(-,root,root,-) %{_bindir}/tsxs %{_includedir}/ts %{_includedir}/tscpp %{_datadir}/pkgconfig/trafficserver.pc %changelog * Mon Apr 07 2025 yaoxin <1024769339@qq.com> - 9.2.5-5 - Fix CVE-2024-53868 * Fri Mar 07 2025 yaoxin <1024769339@qq.com> - 9.2.5-4 - Fix CVE-2024-38311,CVE-2024-56195 and CVE-2024-56202 * Tue Dec 03 2024 yaoxin - 9.2.5-3 - Fix trafficserver service error * Fri Nov 15 2024 wangkai <13474090681@163.com> - 9.2.5-2 - Fix CVE-2024-38479, CVE-2024-50306, CVE-2024-50305 - Replace openEuler with vendor * Mon Jul 29 2024 wangkai <13474090681@163.com> - 9.2.5-1 - Update to 9.2.5 for fix CVE-2023-38522, CVE-2024-35161, CVE-2024-35296 * Fri Jul 12 2024 Wenlong Zhang - 9.2.3-4 - add loong64 support for trafficserver * Thu May 30 2024 laokz - 9.2.3-3 - Update riscv64 patch * Sun Apr 07 2024 wangkai <13474090681@163.com> - 9.2.3-2 - Fix CVE-2024-31309 * Thu Oct 26 2023 wulei - 9.2.3-1 - Update to 9.2.3 * Fri Jun 30 2023 zhangxiang - 9.1.4-3 - add riscv support * Fri Mar 03 2023 Ge Wang - 9.1.4-2 - Remove rpath * Tue Dec 27 2022 jiangpeng - 9.1.4-1 - Update to 9.1.4 to fix CVE-2022-37392 and CVE-2022-32749 and CVE-2022-40743 * Mon Sep 26 2022 wangkai - 9.1.3-4 - Modify storage.config for traffic_cache_tool * Wed Sep 07 2022 wangkai - 9.1.3-3 - Add log,run,cache dir * Tue Aug 30 2022 wangkai - 9.1.3-2 - Fix traffic_layout remove core dumped * Mon Aug 22 2022 panyanshuang - 9.1.3-1 - Update to 9.1.3 to fix CVE-2022-31779 * Thu May 19 2022 wangkai - 9.1.2-1 - Update to 9.1.2 for fix CVE-2021-44040 * Mon May 09 2022 wulei - 9.1.0-5 - Fix traffic_top build when using -Werror=format-security * Sat Nov 13 2021 caodongxia - 9.1.0-4 - fix log in debug mode * Fri Nov 12 2021 lingsheng - 9.1.0-3 - fix stop service fail and remove SysVinit script * Mon Nov 08 2021 wangkai - 9.1.0-2 - fix CVE-2021-37147 CVE-2021-37149 CVE-2021-41585 CVE-2021-43082 * Tue Aug 31 2021 liyanan - 9.1.0-1 - package init