Red Hat Bugzilla – Bug 1607792
add 'Provides: bundled(openssl) = 1.1.0h' to the spec file
Last modified: 2018-10-30 05:38:02 EDT
* Description of problem: The "ovmf" package bundles OpenSSL (for valid reasons, e.g. because firmware built from edk2 uses a different ABI than the ELF userspace on Linux). For such cases, <https://fedoraproject.org/wiki/Bundled_Libraries> postulates that the spec file provide a virtual "bundled" feature, such as: Provides: bundled(NAME) = VERSION Note that RELEASE is not included; VERSION should reflect the upstream basis. The guideline says, The version notes which version of the library was bundled. If there's been a lot of incomplete backporting of changes from newer versions of the library, it can be hard to establish what version to use here. A very general rule of thumb is to use the oldest version that seems reasonable as the reason we're doing this is to tell when a library contains issues that have been fixed in newer upstream versions. * Version-Release number of selected component (if applicable): ovmf-20180508-2.gitee3198e672e2.el7 * How reproducible: 100% * Steps to Reproduce: rpm -q --provides -p OVMF-20180508-2.gitee3198e672e2.el7.noarch.rpm \ | grep openssl * Actual results: [nothing] * Expected results: bundled(openssl) = 1.1.0h * Additional info: The noted OVMF version/release bundles the prepped/hobbled OpenSSL tarball from Fedora dist-git @ 264133c642cd. According to the "openssl.spec" file at that commit, the upstream base is "1.1.0h".
Fix included in ovmf-20180508-3.gitee3198e672e2.el7
Reproduced with OVMF-20180508-2.gitee3198e672e2.el7.noarch.rpm #rpm -q --provides -p OVMF-20180508-2.gitee3198e672e2.el7.noarch.rpm | grep openssl nothing #rpm -q --provides -p OVMF-20180508-3.gitee3198e672e2.el7.noarch.rpm| grep openssl bundled(openssl) = 1.1.0h According to comment0. will move this bug to verified
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2018:3090