From 077861ec24a63a4d71444c439e72cb6cac936134 Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Sat, 6 Jul 2024 08:59:13 +0200 Subject: [PATCH] package/apache: security bump version to 2.4.61 Fixes CVE-2024-39884. Changelog: https://downloads.apache.org/httpd/CHANGES_2.4.61 Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni (cherry picked from commit 158c2a000404cfcb3a216054c686d11454a5ef7f) Signed-off-by: Peter Korsgaard --- package/apache/apache.hash | 6 +++--- package/apache/apache.mk | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package/apache/apache.hash b/package/apache/apache.hash index bd503d84f9..2ed9c17f9a 100644 --- a/package/apache/apache.hash +++ b/package/apache/apache.hash @@ -1,5 +1,5 @@ -# From https://downloads.apache.org/httpd/httpd-2.4.59.tar.bz2.{sha256,sha512} -sha256 7b1ec7ec5635da7cb01550513215a90f8b2f52bb7c90cf3e97ede936d3e55b0f httpd-2.4.60.tar.bz2 -sha512 c1591389f76699beaa5d32b019729e25f1ed5b828311c82b52f1a4edd5d28b73e697958df384d7628b314521a831dbb0af418bc37cdf031cfe133e53c195d8ad httpd-2.4.60.tar.bz2 +# From https://downloads.apache.org/httpd/httpd-2.4.61.tar.bz2.{sha256,sha512} +sha256 ea8ba86fd95bd594d15e46d25ac5bbda82ae0c9122ad93998cc539c133eaceb6 httpd-2.4.61.tar.bz2 +sha512 00656220ecc2b80788f539536553f0a3a57602fb981be22e63af87d0f98ffe5da3056e722ce52ae8cf9c2111ad1922b3aaea1fd7d69d0ed76795199203d593ff httpd-2.4.61.tar.bz2 # Locally computed sha256 47b8c2b6c3309282a99d4a3001575c790fead690cc14734628c4667d2bbffc43 LICENSE diff --git a/package/apache/apache.mk b/package/apache/apache.mk index 39ccc3cf96..0319a96815 100644 --- a/package/apache/apache.mk +++ b/package/apache/apache.mk @@ -4,7 +4,7 @@ # ################################################################################ -APACHE_VERSION = 2.4.60 +APACHE_VERSION = 2.4.61 APACHE_SOURCE = httpd-$(APACHE_VERSION).tar.bz2 APACHE_SITE = https://dlcdn.apache.org/httpd APACHE_LICENSE = Apache-2.0