From dface55b1f6b86b3c53ea08b6257b3da8bb4fbf8 Mon Sep 17 00:00:00 2001 From: Florence Blanc-Renaud Date: Fri, 7 Oct 2022 15:59:51 +0200 Subject: [PATCH] Spec file: bump bind version on f37+ On fedora37+, require at least bind 9.18.7-1 to avoid dnssec regression (see BZ#2117342) related to bind and OpenSSL 3.0 engine support. Fixes: https://pagure.io/freeipa/issue/9216 Signed-off-by: Florence Blanc-Renaud Reviewed-By: Alexander Bokovoy --- freeipa.spec.in | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/freeipa.spec.in b/freeipa.spec.in index 2c16d6a13..9d65c7513 100755 --- a/freeipa.spec.in +++ b/freeipa.spec.in @@ -125,7 +125,12 @@ # Fix for TLS 1.3 PHA, RHBZ#1775146 %global httpd_version 2.4.41-9 +# Fix for RHBZ#2117342 +%if 0%{?fedora} < 37 %global bind_version 9.11.24-1 +%else +%global bind_version 32:9.18.7-1 +%endif # Don't use Fedora's Python dependency generator on Fedora 30/rawhide yet. # Some packages don't provide new dist aliases. # https://docs.fedoraproject.org/en-US/packaging-guidelines/Python/