From 523a2c49ab629beee9038fd49fc263bb228dea3e Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Fri, 25 Jul 2025 19:42:51 +0200 Subject: [PATCH] package/apache: security bump version to 2.4.65 Changelog: https://downloads.apache.org/httpd/CHANGES_2.4.65 Fixes: https://www.cve.org/CVERecord?id=CVE-2025-54090 Signed-off-by: Bernd Kuhls Signed-off-by: Julien Olivain (cherry picked from commit ebb66480460fa152faa9ec27f639d53c27935e09) Signed-off-by: Thomas Perale --- package/apache/apache.hash | 6 +++--- package/apache/apache.mk | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package/apache/apache.hash b/package/apache/apache.hash index 748be01de7..ca9d1580ad 100644 --- a/package/apache/apache.hash +++ b/package/apache/apache.hash @@ -1,5 +1,5 @@ -# From https://downloads.apache.org/httpd/httpd-2.4.64.tar.bz2.{sha256,sha512} -sha256 120b35a2ebf264f277e20f9a94f870f2063342fbff0861404660d7dd0ab1ac29 httpd-2.4.64.tar.bz2 -sha512 299cb0d87a7e0e0a99d22bba7349b6b07c69222897410f9670af29896288d1f4e1da81d22ac9e1d8d6ea096e88044ab1dd34555b40a4b1b1cb3fd4b1d1897a7a httpd-2.4.64.tar.bz2 +# From https://downloads.apache.org/httpd/httpd-2.4.65.tar.bz2.{sha256,sha512} +sha256 58b8be97d9940ec17f7656c0c6b9f41b618aac468b894b534148e3296c53b8b3 httpd-2.4.65.tar.bz2 +sha512 202f8bfe2aafcfbcd7315191d466e9c10b9a8c0abafb7864510b6e1abe4cb660aaacc2456aa77d43e48ef7a49e591d0b54170d3daf67abc3e06c3da1c63fdffc httpd-2.4.65.tar.bz2 # Locally computed sha256 47b8c2b6c3309282a99d4a3001575c790fead690cc14734628c4667d2bbffc43 LICENSE diff --git a/package/apache/apache.mk b/package/apache/apache.mk index 7e9fb522b5..cb029274c5 100644 --- a/package/apache/apache.mk +++ b/package/apache/apache.mk @@ -4,7 +4,7 @@ # ################################################################################ -APACHE_VERSION = 2.4.64 +APACHE_VERSION = 2.4.65 APACHE_SOURCE = httpd-$(APACHE_VERSION).tar.bz2 APACHE_SITE = https://dlcdn.apache.org/httpd APACHE_LICENSE = Apache-2.0