mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-09-30 22:11:59 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/apache: security bump version to 2.4.53

Browse Source 
Changelog: https://downloads.apache.org/httpd/CHANGES_2.4.53

Fixes CVE-2022-22719, CVE-2022-22720, CVE-2022-22721 & CVE-2022-23943.

Switch from pcre to pcre2 following upstream commit:
c602ba1481

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit eaa8fcf546)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
This commit is contained in:
Bernd Kuhls
2022-03-14 22:20:00 +01:00
committed by Peter Korsgaard
parent 0c4cfe7131
commit 44edd4bd14
3 changed files with 8 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
package/apache/Config.in
View File

@@ -4,7 +4,7 @@ config BR2_PACKAGE_APACHE
depends on BR2_TOOLCHAIN_HAS_THREADS depends on BR2_TOOLCHAIN_HAS_THREADS
depends on BR2_USE_MMU # apr depends on BR2_USE_MMU # apr
select BR2_PACKAGE_APR_UTIL select BR2_PACKAGE_APR_UTIL
select BR2_PACKAGE_PCRE select BR2_PACKAGE_PCRE2
help help
The Apache HTTP Server Project is an effort to develop and The Apache HTTP Server Project is an effort to develop and
maintain an open-source HTTP server for modern operating maintain an open-source HTTP server for modern operating

6
package/apache/apache.hash
View File

@@ -1,5 +1,5 @@
# From https://downloads.apache.org/httpd/httpd-2.4.52.tar.bz2.{sha256,sha512} # From https://downloads.apache.org/httpd/httpd-2.4.53.tar.bz2.{sha256,sha512}
sha256 0127f7dc497e9983e9c51474bed75e45607f2f870a7675a86dc90af6d572f5c9 httpd-2.4.52.tar.bz2 sha256 d0bbd1121a57b5f2a6ff92d7b96f8050c5a45d3f14db118f64979d525858db63 httpd-2.4.53.tar.bz2
sha512 97c021c576022a9d32f4a390f62e07b5f550973aef2f299fd52defce1a9fa5d27bd4a676e7bf214373ba46063d34aecce42de62fdd93678a4e925cfcbb2afdf6 httpd-2.4.52.tar.bz2 sha512 07ef59594251a30a864cc9cc9a58ab788c2d006cef85b728f29533243927c63cb063e0867f2a306f37324c3adb9cf7dcb2402f3516b05c2c6f32469d475dd756 httpd-2.4.53.tar.bz2
# Locally computed # Locally computed
sha256 47b8c2b6c3309282a99d4a3001575c790fead690cc14734628c4667d2bbffc43 LICENSE sha256 47b8c2b6c3309282a99d4a3001575c790fead690cc14734628c4667d2bbffc43 LICENSE

8
package/apache/apache.mk
View File

@@ -4,7 +4,7 @@
# #
################################################################################ ################################################################################
APACHE_VERSION = 2.4.52 APACHE_VERSION = 2.4.53
APACHE_SOURCE = httpd-$(APACHE_VERSION).tar.bz2 APACHE_SOURCE = httpd-$(APACHE_VERSION).tar.bz2
APACHE_SITE = https://downloads.apache.org/httpd APACHE_SITE = https://downloads.apache.org/httpd
APACHE_LICENSE = Apache-2.0 APACHE_LICENSE = Apache-2.0
@@ -17,11 +17,11 @@ APACHE_INSTALL_STAGING = YES
# We have a patch touching configure.in and Makefile.in, # We have a patch touching configure.in and Makefile.in,
# so we need to autoreconf: # so we need to autoreconf:
APACHE_AUTORECONF = YES APACHE_AUTORECONF = YES
APACHE_DEPENDENCIES = apr apr-util pcre APACHE_DEPENDENCIES = apr apr-util pcre2
APACHE_CONF_ENV= \ APACHE_CONF_ENV= \
ap_cv_void_ptr_lt_long=no \ ap_cv_void_ptr_lt_long=no \
PCRE_CONFIG=$(STAGING_DIR)/usr/bin/pcre-config PCRE_CONFIG=$(STAGING_DIR)/usr/bin/pcre2-config
ifeq ($(BR2_PACKAGE_APACHE_MPM_EVENT),y) ifeq ($(BR2_PACKAGE_APACHE_MPM_EVENT),y)
APACHE_MPM = event APACHE_MPM = event
@@ -35,7 +35,7 @@ APACHE_CONF_OPTS = \
--sysconfdir=/etc/apache2 \ --sysconfdir=/etc/apache2 \
--with-apr=$(STAGING_DIR)/usr \ --with-apr=$(STAGING_DIR)/usr \
--with-apr-util=$(STAGING_DIR)/usr \ --with-apr-util=$(STAGING_DIR)/usr \
--with-pcre=$(STAGING_DIR)/usr/bin/pcre-config \ --with-pcre=$(STAGING_DIR)/usr/bin/pcre2-config \
--enable-http \ --enable-http \
--enable-dbd \ --enable-dbd \
--enable-proxy \ --enable-proxy \