linux/meta-openembedded.git/meta-webserver/recipes-httpd/apache2, branch thud

apache2: upgrade 2.4.39 -> 2.4.41

2019-09-03T02:53:53+00:00

Security fixes: CVE-2019-10081 CVE-2019-9517 CVE-2019-10098 CVE-2019-10092 CVE-2019-10097 CVE-2019-10082 See: http://www.apache.org/dist/httpd/CHANGES_2.4.41 Signed-off-by: Yi Zhao Signed-off-by: Khem Raj Signed-off-by: Armin Kuster Signed-off-by: Armin Kuster

apache2: Correct appending to SYSROOT_PREPROCESS_FUNCS

2019-09-03T02:53:53+00:00

A missing space lead to problems if something else was already added to SYSROOT_PREPROCESS_FUNCS. Signed-off-by: Peter Kjellerstedt Signed-off-by: Khem Raj Signed-off-by: Armin Kuster Signed-off-by: Armin Kuster

apache2: upgrade 2.4.34 -> 2.4.39

2019-09-03T02:53:53+00:00

* Drop apache2-native recipe. Add native to BBCLASSEXTEND in apache2 recipe. * Refresh patches. Drop CVE-2018-11763.patch and apache-configure_perlbin.patch * Cleanup recipe file. Remove obsolete code. Signed-off-by: Yi Zhao Signed-off-by: Khem Raj [Bug fix only update: Includes CVES: CVE-2018-17189 CVE-2018-17199 CVE-2019-0190 CVE-2019-0220 CVE-2019-0196 CVE-2019-0197 CVE-2019-0215 CVE-2019-0217 CVE-2019-0211 ] Signed-off-by: Armin Kuster Signed-off-by: Armin Kuster

apache2: set CVE_PRODUCT

2019-09-03T02:53:53+00:00

Signed-off-by: Chen Qi Signed-off-by: Khem Raj Signed-off-by: Armin Kuster Signed-off-by: Armin Kuster

apache2: Fix CVE-2018-11763

2018-11-15T21:18:50+00:00

mod_http2: connection IO event handling reworked. Instead of reacting on incoming bytes, the state machine now acts on incoming frames that are affecting it. This reduces state transitions. Reference: https://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-11763.html Signed-off-by: Mingli Yu Signed-off-by: Khem Raj Signed-off-by: Armin Kuster

apache2: set files layout to debian style

2018-08-24T15:58:13+00:00

The default layout installs log files to /var/apache2/logs. But we assume the log directory is /var/log/apache2 in volatile.conf. Specify the layout to debian style to set the correct the log directory. Signed-off-by: Yi Zhao Signed-off-by: Khem Raj

apache2: upgrade 2.4.33 -> 2.4.34

2018-07-27T20:49:48+00:00

Security fixes: CVE-2018-8011 mod_md: DoS via Coredumps on specially crafted requests CVE-2018-1333 mod_http2: DoS for HTTP/2 connections by specially crafted requests Signed-off-by: Yi Zhao Signed-off-by: Khem Raj

apache2: upgrade 2.4.29 -> 2.4.33

2018-07-06T00:51:15+00:00

* License-Update: Correctly identify origin of util_pcre.c/ap_regex.h as pcreposix[.ch] and correct LICENSE/NOTICE to match. * Refresh patches with devtool * Drop useless patch apache-ssl-ltmain-rpath.patch * Move all patches to one directory Signed-off-by: Yi Zhao Signed-off-by: Khem Raj

apache2: Add PACKAGECONFIG zlib option for mod_deflate

2018-06-29T14:00:52+00:00

The configure options '--enable-deflate' or '--with-z' make the package depends on zlib. PACKAGECONFIG should be defined to clear the dependency. Signed-off-by: Haiqing Bai Signed-off-by: Khem Raj

apache2/sthttpd: add alternatives for doc

2018-05-17T15:31:12+00:00

There is a failure to install both of sthttpd-doc and apache2-doc to rootfs. ... |Error: Transaction check error: | file /usr/share/man/man1/htpasswd.1 conflicts between attempted installs of sthttpd-doc-2.27.1 -r0.0.armv7ahf_neon and apache2-doc-2.4.27 -r0.0.armv7ahf_neon ... Signed-off-by: Hongxu Jia Signed-off-by: Armin Kuster