From 4b6e9ebd097bda7f77f27b98c50111be0939bac6 Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Fri, 5 Dec 2025 19:39:16 +0100 Subject: [PATCH] package/apache: security bump version to 2.4.66 Changelog: https://downloads.apache.org/httpd/CHANGES_2.4.66 Fixes CVE-2025-55753, CVE-2025-58098, CVE-2025-59775, CVE-2025-65082 & CVE-2025-66200. Signed-off-by: Bernd Kuhls Signed-off-by: Julien Olivain (cherry picked from commit 77e4a8858c05c6829aac154a07566926dd3e4e00) Signed-off-by: Thomas Perale --- package/apache/apache.hash | 6 +++--- package/apache/apache.mk | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package/apache/apache.hash b/package/apache/apache.hash index 5b0aab0af2..53fb05a5c8 100644 --- a/package/apache/apache.hash +++ b/package/apache/apache.hash @@ -1,5 +1,5 @@ -# From https://archive.apache.org/dist/httpd/httpd-2.4.65.tar.bz2.{sha256,sha512} -sha256 58b8be97d9940ec17f7656c0c6b9f41b618aac468b894b534148e3296c53b8b3 httpd-2.4.65.tar.bz2 -sha512 202f8bfe2aafcfbcd7315191d466e9c10b9a8c0abafb7864510b6e1abe4cb660aaacc2456aa77d43e48ef7a49e591d0b54170d3daf67abc3e06c3da1c63fdffc httpd-2.4.65.tar.bz2 +# From https://archive.apache.org/dist/httpd/httpd-2.4.66.tar.bz2.{sha256,sha512} +sha256 94d7ff2b42acbb828e870ba29e4cbad48e558a79c623ad3596e4116efcfea25a httpd-2.4.66.tar.bz2 +sha512 49031a3465d956ee3b755e65810b6c35561ddd5fac2c624a273b733c238e115b914cd7b246837e5a3090ccfded6e0b8b3059bfd1f8ce4419081c805a38d05a4b httpd-2.4.66.tar.bz2 # Locally computed sha256 47b8c2b6c3309282a99d4a3001575c790fead690cc14734628c4667d2bbffc43 LICENSE diff --git a/package/apache/apache.mk b/package/apache/apache.mk index 23332f3e85..b22d0b2fa2 100644 --- a/package/apache/apache.mk +++ b/package/apache/apache.mk @@ -4,7 +4,7 @@ # ################################################################################ -APACHE_VERSION = 2.4.65 +APACHE_VERSION = 2.4.66 APACHE_SOURCE = httpd-$(APACHE_VERSION).tar.bz2 APACHE_SITE = https://archive.apache.org/dist/httpd APACHE_LICENSE = Apache-2.0