packages/trafficserver
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
trafficserver/trafficserver.spec
starlet-dx 1d5d229608 Fix CVE-2024-53868 
(cherry picked from commit 42bffd4c8f379fb5b0275b33a4075632a4bdf194)
2025-04-07 16:41:30 +08:00

212 lines
7.6 KiB
RPMSpec
Raw Permalink Blame History

%define _hardened_build 1
%global vendor %{?_vendor:%{_vendor}}%{!?_vendor:openEuler}
Name: trafficserver
Version: 9.2.5
Release: 5
Summary: Apache Traffic Server, a reverse, forward and transparent HTTP proxy cache
License: Apache-2.0
URL: https://trafficserver.apache.org/
Source0: http://www.apache.org/dist/%{name}/%{name}-%{version}.tar.bz2
Patch0000: Add-openeuler-support.patch
Patch0001: Fix-status-failure-after-stopping-service.patch
Patch0002: Fix-log-in-debug-mode.patch
Patch0003: config-layout-openEuler.patch
Patch0004: Modify-storage.config-for-traffic_cache_tool.patch
Patch0005: add-riscv-support.patch
Patch0006: add-loong64-support.patch
Patch0007: CVE-2024-38479.patch
Patch0008: CVE-2024-50305.patch
Patch0009: CVE-2024-50306.patch
Patch0010: Invoke-initgroups-iff-we-got-enough-privileges.patch
Patch0011: CVE-2024-38311-pre-Do-not-allow-extra-CRs-in-chunks-11936-11942.patch
Patch0012: CVE-2024-38311.patch
Patch0013: CVE-2024-56195.patch
Patch0014: CVE-2024-56202.patch
Patch0015: CVE-2024-53868.patch
BuildRequires: expat-devel hwloc-devel openssl-devel pcre-devel zlib-devel xz-devel
BuildRequires: libcurl-devel ncurses-devel gcc gcc-c++ perl-ExtUtils-MakeMaker
BuildRequires: libcap-devel cmake libunwind-devel automake chrpath
Requires: expat hwloc openssl pcre zlib xz libcurl
Requires: systemd ncurses pkgconfig libcap initscripts
Requires(postun): systemd
%description
Apache Traffic Server is an OpenSource HTTP / HTTPS / HTTP/2 / QUIC reverse,
forward and transparent proxy and cache.
%package devel
Summary: Apache Traffic Server devel package
Requires: trafficserver = %{version}-%{release}
%description devel
Include files and various tools for ATS developers.
%package perl
Summary: ATS management Perl bindings
Requires: trafficserver = %{version}-%{release}
%description perl
This package contains some Perl APIs for talking to the ATS management port.
%prep
%autosetup -n %{name}-%{version} -p1
%build
autoreconf
./configure \
--enable-layout=%{vendor} \
--libdir=%{_libdir}/trafficserver \
--libexecdir=%{_libdir}/trafficserver/plugins \
--enable-experimental-plugins \
--with-user=ats --with-group=ats \
--disable-silent-rules
make %{?_smp_mflags} V=1
%install
rm -rf %{buildroot}
make DESTDIR=%{buildroot} install
mkdir -p %{buildroot}/lib/systemd/system
cp rc/trafficserver.service %{buildroot}/lib/systemd/system
find %{buildroot} -type f -name "*.la" -delete
find %{buildroot} -type f -name "*.a" -delete
find %{buildroot} -type f -name "*.pod" -delete
find %{buildroot} -type f -name "*.in" -delete
find %{buildroot} -type f -name ".packlist" -delete
find %{buildroot} -type f -name "plugin_*.so" -delete
mkdir -p %{buildroot}%{_datadir}/perl5
mv %{buildroot}/usr/lib/perl5/* %{buildroot}%{_datadir}/perl5
mkdir -p %{buildroot}/run/trafficserver
mkdir -p %{buildroot}%{_datadir}/pkgconfig
mv %{buildroot}%{_libdir}/trafficserver/pkgconfig/trafficserver.pc %{buildroot}%{_datadir}/pkgconfig
rm -f %{buildroot}%{_bindir}/trafficserver
chrpath -d %{buildroot}%{_bindir}/traffic_crashlog
chrpath -d %{buildroot}%{_bindir}/traffic_ctl
chrpath -d %{buildroot}%{_bindir}/traffic_layout
chrpath -d %{buildroot}%{_bindir}/traffic_logcat
chrpath -d %{buildroot}%{_bindir}/traffic_logstats
chrpath -d %{buildroot}%{_bindir}/traffic_manager
chrpath -d %{buildroot}%{_bindir}/traffic_server
chrpath -d %{buildroot}%{_bindir}/traffic_top
chrpath -d %{buildroot}%{_bindir}/traffic_via
chrpath -d %{buildroot}%{_libdir}/trafficserver/libtscore.so.%{version}
chrpath -d %{buildroot}%{_libdir}/trafficserver/libtsmgmt.so.%{version}
chrpath -d %{buildroot}%{_libdir}/trafficserver/plugins/server_push_preload.so
chrpath -d %{buildroot}%{_libdir}/trafficserver/plugins/redo_cache_lookup.so
mkdir -p %{buildroot}/etc/ld.so.conf.d
echo "%{_libdir}/%{name}" > %{buildroot}/etc/ld.so.conf.d/%{name}-%{_arch}.conf
%post
/sbin/ldconfig
%systemd_post trafficserver.service
%pre
getent group ats >/dev/null || groupadd -r ats -g 176 &>/dev/null
getent passwd ats >/dev/null || useradd -r -u 176 -g ats -d / -s /sbin/nologin -c "Apache Traffic Server" ats &>/dev/null
%preun
%systemd_preun trafficserver.service
%postun
/sbin/ldconfig
%systemd_postun_with_restart trafficserver.service
%files
%defattr(-, root, root, -)
%{!?_licensedir:%global license %%doc}
%license LICENSE
%doc README.md CHANGELOG* NOTICE STATUS
%config(noreplace) /usr/etc/trafficserver/*
%{_bindir}/traffic_*
%{_bindir}/tspush
%dir %{_libdir}/trafficserver
%dir %{_libdir}/trafficserver/plugins
%{_libdir}/trafficserver/libts*.so*
%{_libdir}/trafficserver/plugins/*.so
/lib/systemd/system/trafficserver.service
%attr(0755, ats, ats) %dir /usr/etc/trafficserver
%attr(0755, ats, ats) %dir /usr/var/trafficserver/log
%attr(0755, ats, ats) %dir /usr/var/trafficserver/run
%attr(0755, ats, ats) %dir /usr/var/trafficserver/cache
%attr(0644, ats, ats) /usr/etc/trafficserver/*.config
%attr(0644, ats, ats) /usr/etc/trafficserver/*.yaml
/etc/ld.so.conf.d/%{name}-%{_arch}.conf
%files perl
%defattr(-,root,root,-)
%{_mandir}/man3/*
%{_datadir}/perl5/Apache/*
%files devel
%defattr(-,root,root,-)
%{_bindir}/tsxs
%{_includedir}/ts
%{_includedir}/tscpp
%{_datadir}/pkgconfig/trafficserver.pc
%changelog
* Mon Apr 07 2025 yaoxin <1024769339@qq.com> - 9.2.5-5
- Fix CVE-2024-53868
* Fri Mar 07 2025 yaoxin <1024769339@qq.com> - 9.2.5-4
- Fix CVE-2024-38311,CVE-2024-56195 and CVE-2024-56202
* Tue Dec 03 2024 yaoxin <yao_xin001@hoperun.com> - 9.2.5-3
- Fix trafficserver service error
* Fri Nov 15 2024 wangkai <13474090681@163.com> - 9.2.5-2
- Fix CVE-2024-38479, CVE-2024-50306, CVE-2024-50305
- Replace openEuler with vendor
* Mon Jul 29 2024 wangkai <13474090681@163.com> - 9.2.5-1
- Update to 9.2.5 for fix CVE-2023-38522, CVE-2024-35161, CVE-2024-35296
* Fri Jul 12 2024 Wenlong Zhang <zhangwenlong@loongson.cn> - 9.2.3-4
- add loong64 support for trafficserver
* Thu May 30 2024 laokz <zhangkai@iscas.ac.cn> - 9.2.3-3
- Update riscv64 patch
* Sun Apr 07 2024 wangkai <13474090681@163.com> - 9.2.3-2
- Fix CVE-2024-31309
* Thu Oct 26 2023 wulei <wu_lei@hoperun.com> - 9.2.3-1
- Update to 9.2.3
* Fri Jun 30 2023 zhangxiang <zhangxiang@iscas.ac.cn> - 9.1.4-3
- add riscv support
* Fri Mar 03 2023 Ge Wang <wangge20@h-partners.com> - 9.1.4-2
- Remove rpath
* Tue Dec 27 2022 jiangpeng <jiangpeng01@ncti-gba.cn> - 9.1.4-1
- Update to 9.1.4 to fix CVE-2022-37392 and CVE-2022-32749 and CVE-2022-40743
* Mon Sep 26 2022 wangkai <wangkai385@h-partners.com> - 9.1.3-4
- Modify storage.config for traffic_cache_tool
* Wed Sep 07 2022 wangkai <wangkai385@h-partners.com> - 9.1.3-3
- Add log,run,cache dir
* Tue Aug 30 2022 wangkai <wangkai385@h-partners.com> - 9.1.3-2
- Fix traffic_layout remove core dumped
* Mon Aug 22 2022 panyanshuang <panyanshuang@ncti-gba.cn> - 9.1.3-1
- Update to 9.1.3 to fix CVE-2022-31779
* Thu May 19 2022 wangkai <wangkai385@h-partners.com> - 9.1.2-1
- Update to 9.1.2 for fix CVE-2021-44040
* Mon May 09 2022 wulei <wulei80@h-partners.com> - 9.1.0-5
- Fix traffic_top build when using -Werror=format-security
* Sat Nov 13 2021 caodongxia <caodongxia@huawei.com> - 9.1.0-4
- fix log in debug mode
* Fri Nov 12 2021 lingsheng <lingsheng@huawei.com> - 9.1.0-3
- fix stop service fail and remove SysVinit script
* Mon Nov 08 2021 wangkai <wangkai385@huawei.com> - 9.1.0-2
- fix CVE-2021-37147 CVE-2021-37149 CVE-2021-41585 CVE-2021-43082
* Tue Aug 31 2021 liyanan <liyanan32@huawei.com> - 9.1.0-1
- package init
Reference in New Issue View Git Blame Copy Permalink