1
0
mirror of https://git.openwrt.org/feed/packages.git synced 2024-06-16 20:33:58 +02:00
Commit Graph

18 Commits

Author SHA1 Message Date
krant
d1f58074b4 apache: update to 2.4.59
- Remove obsolete OpenSSL patch - upstream handles it by itself now
- Refresh another patch
- Remaining patches are unaffected

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-06-02 19:18:06 -07:00
Michael Heimpold
7009c6be73 apache: add compile fix for libxml-2.12.x
libxml2 restructured includes, thus another include is now required
otherwise build fails.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2023-12-17 19:49:22 +02:00
Christian Marangi
86f9af41c1 apache: bump to release 2.4.57
Bump apache to release 2.4.57 and refresh patch automatically.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2023-09-27 11:10:45 -07:00
Josef Schlehofer
6c6c99ffb5 apache2: security update to version 2.4.52
Fixes CVEs:
- CVE-2021-44790
- CVE-2021-44224

Refreshed patches

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-02-02 07:24:59 -08:00
Sebastian Kemper
da4b1ca8d6 apache: security bump to 2.4.51
Fixes (see [1] for details):

  CVE-2021-33193
  CVE-2021-41524
  CVE-2021-41773
  CVE-2021-42013

[1] https://httpd.apache.org/security/vulnerabilities_24.html

Patch 020-openssl-deprecated.patch refreshed.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2021-10-26 09:39:53 -07:00
Rosen Penev
6dfd07097d apache: update to 2.4.48
Refreshed patch.

Fixes:

CVE-2019-17567
CVE-2020-13938
CVE-2020-13950
CVE-2020-35452
CVE-2021-26690
CVE-2021-26691
CVE-2021-30641
CVE-2021-31618

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-07-11 11:17:36 +02:00
Ilya Lipnitskiy
5d8d4fbbcb
treewide: Run refresh on all packages
The crude loop I wrote to come up with this changeset:

  find -L package/feeds/packages/ -name patches | \
  sed 's/patches$/refresh/' | sort | xargs make

Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>
2021-02-20 16:02:15 -08:00
Rosen Penev
57b10de2c0
apache: fix compilation without deprecated OpenSSL APIs
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-08-31 00:31:12 -07:00
Sebastian Kemper
fbe213f61f apache: security bump to 2.4.43
This minor version bump fixes:

CVE-2020-1934
CVE-2020-1927

Upstream added cross-compile compatibility to apxs, so we can drop a sed
script. Upstream also added the OpenWrt layout, so we can drop our local
copy.

The OpenSSL patch to remove deprecated symbols doesn't apply anymore and
gets removed.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-04-05 20:42:29 +02:00
Rosen Penev
12efabac44
apache: fix compilation without deprecated OpenSSL APIs
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-02-03 17:52:06 -08:00
Sebastian Kemper
c8aba5113b apache: add extra packages + apache user
This adds extra packages for certain modules (basically the ones that
incur further dependencies), support files etc. This is pretty much
follows Alpine's example.

This updates the httpd.conf patch to _not_ uncomment MIMEMagicFile
(because the module isn't loaded by default) and removes that changes
that aren't needed anymore (because of the added module support). The
patch now only changes the default user.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-01-01 23:53:54 +01:00
Sebastian Kemper
4e6bdd8a49 apache: break-out CONFIGURE_ARGS, add layout
This gets rid of flags. For instance $(FPIC) shouldn't be forced onto
applications (see [1]).

And CONFIGURE_ARGS + CONFIGURE_VARS are broken out of Build/Configure.
This way more arguments can be added easily in the future.

The target is changed from apache to apache2 (which is used by upstream
by default). the CONFIGURE_ARGS are changed where need to enable
modules.

This also renames one patch that fixes scoreboard location (the name
004-pidfile_fix.patch didn't describe what it's doing).

Now with the OpenWrt layout in place 003-logdir_fix.patch can be
removed.

[1] https://wiki.gentoo.org/wiki/Project:Hardened/Position_Independent_Code_internals

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-01-01 23:45:00 +01:00
Sebastian Kemper
14f4f0bef0 apache: bump to 2.4.41
- version bump
- update license description
- add PKG_BUILD_PARALLEL:=1
- remove two cross-compile patches and replace them with the
  cross-compile patch from buildroot (adds autoreconf to get this going)

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-01-01 23:20:24 +01:00
Rosen Penev
0ff43a37a3 apache: Update to 2.4.37
Fixes at least:

CVE-2017-15710
CVE-2017-15715
CVE-2018-1283
CVE-2018-1312

Added CPE ID for proper CVE tracking.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-11-06 09:36:54 -08:00
Alexander Couzens
f06b980bef apache: fix reproducible builds
Remove build timestamp [0] and correct sorting [1].
Thanks to debian for the patch.

[0] https://reproducible-builds.org/docs/timestamps/
[1] https://reproducible-builds.org/docs/stable-inputs/

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
2017-11-17 12:17:03 +01:00
heil
f8b42ce2c9 package apache: upgrade to 2.4.25
- refresh patches

Signed-off-by: heil <heil@terminal-consulting.de>
2016-12-26 23:42:01 +01:00
Hauke Mehrtens
51bbfb6013 apache: fix build without sslv3
SSLv3 support is deactivated in LEDE now, which causes a build problem
in apache.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2016-07-31 13:20:56 +02:00
Thomas Heil
08379648ee apache: import from oldpackages, add myself as maintainer, add license
information, update source-url update to v2.2.27

Signed-off-by: Thomas Heil <heil@terminal-consulting.de>
2014-07-12 13:40:35 +02:00