Rebuilt for Python 3.15.0b4 ABI change

Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
Rebuilt for openssl 4.0
2026-07-22 10:20:34 +02:00 · 2026-07-17 07:07:38 +00:00 · 2026-06-17 09:26:53 -04:00 · 2026-06-15 11:27:24 +00:00 · 2026-06-15 11:05:17 +02:00 · 2026-06-15 11:05:17 +02:00
2 changed files with 46 additions and 5 deletions
--- a/0002-Fix-OpenSSL-4.0-compatibility.patch
+++ b/0002-Fix-OpenSSL-4.0-compatibility.patch
@ -0,0 +1,45 @@
+From ec5ede886a5f8ca36474fd2990adc2d3e2c1a056 Mon Sep 17 00:00:00 2001
+From: =?UTF-8?q?Pavol=20=C5=BD=C3=A1=C4=8Dik?= <pzacik@redhat.com>
+Date: Mon, 11 May 2026 15:17:33 +0200
+Subject: [PATCH] Fix OpenSSL 4.0 compatibility
+
+Use ASN1_STRING accessor functions and adjust constness.
+---
+ lib/iolog/hostcheck.c | 8 ++++----
+ 1 file changed, 4 insertions(+), 4 deletions(-)
+
+diff --git a/lib/iolog/hostcheck.c b/lib/iolog/hostcheck.c
+index efb016c..cba3a0f 100644
+--- a/lib/iolog/hostcheck.c
+++ b/lib/iolog/hostcheck.c
+@@ -188,8 +188,8 @@ validate_name(const char *hostname, ASN1_STRING *certname_asn1)
+ static HostnameValidationResult
+ matches_common_name(const char *hostname, const char *ipaddr, const X509 *cert, int resolve)
+ {
+-	X509_NAME_ENTRY *common_name_entry = NULL;
+-	ASN1_STRING *common_name_asn1 = NULL;
+	const X509_NAME_ENTRY *common_name_entry = NULL;
+	const ASN1_STRING *common_name_asn1 = NULL;
+  	int common_name_loc;
+ 	debug_decl(matches_common_name, SUDO_DEBUG_UTIL);
+ 
+@@ -323,14 +323,14 @@ matches_subject_alternative_name(const char *hostname, const char *ipaddr, const
+ #endif
+ 
+             /* IPV4 address */
+-            if(current_name->d.iPAddress->length == 4) {
+            if(ASN1_STRING_length(current_name->d.iPAddress) == 4) {
+                 if (inet_ntop(AF_INET, san_ip, san_ip_str, INET_ADDRSTRLEN) == NULL) {
+                     result = MalformedCertificate;
+                     break;
+                 }
+ #if defined(HAVE_STRUCT_IN6_ADDR)
+             /* IPV6 address */
+-            } else if (current_name->d.iPAddress->length == 16) {
+            } else if (ASN1_STRING_length(current_name->d.iPAddress) == 16) {
+                 if (inet_ntop(AF_INET6, san_ip, san_ip_str, INET6_ADDRSTRLEN) == NULL) {
+                     result = MalformedCertificate;
+                     break;
+-- 
+2.53.0
+
--- a/sudo.spec
+++ b/sudo.spec
@ -15,22 +15,18 @@ Source0: %{url}/dist/%{name}-%{version}%{?extraver}.tar.gz
 Source1: sudoers
 Requires: pam
 Recommends: system-default-editor
-Recommends: %{name}-python-plugin%{?_isa} = %{version}-%{release}

 BuildRequires: make
 BuildRequires: pam-devel
-BuildRequires: groff
 BuildRequires: openldap-devel
-BuildRequires: flex
-BuildRequires: bison
 BuildRequires: libtool
 BuildRequires: audit-libs-devel libcap-devel
 BuildRequires: libselinux-devel
 BuildRequires: systemd-rpm-macros
-BuildRequires: gettext
 BuildRequires: zlib-devel

 Patch1: 0001-cve-2026-35535.patch
+Patch2: 0002-Fix-OpenSSL-4.0-compatibility.patch

 %description
 Sudo (superuser do) allows a system administrator to give certain
Author	SHA1	Message	Date
Python Maint	73b278971b	Rebuilt for Python 3.15.0b4 ABI change	2026-07-22 10:20:34 +02:00
Fedora Release Engineering	94bd1bdd14	Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild	2026-07-17 07:07:38 +00:00
Yaakov Selkowitz	181500c8c5	Rebuilt for openssl 4.0	2026-06-17 09:26:53 -04:00
Alejandro López	57e7e6c702	Merge #39 `Four fixes for rawhide`	2026-06-15 11:27:24 +00:00
Alejandro López	0d1368ebc7	Removed some unneeded build-time dependencies	2026-06-15 11:05:17 +02:00
Alejandro López	eee5e53316	- Resolves: rhbz#2379016 - don't recommend sudo-python-plugins	2026-06-15 11:05:17 +02:00
Yaakov Selkowitz	a0305f8c5e	Rebuilt for openssl 4.0	2026-06-12 19:51:23 -04:00
Python Maint	e2cab26d87	Rebuilt for Python 3.15	2026-06-03 17:49:58 +02:00
Pavol Žáčik	9cd9faa3f9	Add OpenSSL 4.0 compatibility patch	2026-05-11 15:26:15 +02:00
Alejandro López	90256816a8	Fix CVE-2026-35535 - Resolves: rhbz#2458153	2026-04-14 10:30:12 +02:00