linux/meta-openembedded.git/meta-webserver/recipes-httpd, branch kraj/dunfell

nostromo: Blacklist and exclude from world builds

2021-05-14T17:03:51+00:00

Host site is dead. Signed-off-by: Armin Kuster

apache2: upgrade v2.4.43 -> v2.4.46

2021-01-12T19:59:58+00:00

Source: meta-openembedded.org MR: 105034, 105034, 105124 Type: Security Fix Disposition: Backport from https://git.openembedded.org/meta-openembedded/commit/meta-webserver/recipes-httpd/apache2?h=gatesgarth&id=fc995b3cfed86850ce5ab1b70da1e31560ac350f ChangeID: 37b9f376c5e4b9a9355f867bac56454e2630d86c Description: Minor upgrade inluding bug and CVE fixes, namely: - CVE-2020-9490 - CVE-2020-11984 - CVE-2020-11993 Signed-off-by: Sakib Sajal Signed-off-by: Khem Raj (cherry picked from commit fc995b3cfed86850ce5ab1b70da1e31560ac350f) Signed-off-by: Armin Kuster Signed-off-by: Armin Kuster

apache2: create log/run directory via pkg_postinst

2020-05-29T04:39:22+00:00

The commit e789c3837ca8d65abb4bac29dc2e5c595c8ce05b tries to create log/run directory in initscript/systemd unit file. This is not a correct method. We should create them in pkg_postinst. Signed-off-by: Yi Zhao Signed-off-by: Khem Raj (cherry picked from commit 6f4d0dbfbc7d5ab8c5781379884f41d30cb6db25) Signed-off-by: Armin Kuster

apache2: fix service start fail

2020-05-20T16:50:45+00:00

reproduce steps: 1. boot up target 2. scp apache2-2.4.41-r0.1.aarch64.rpm on target 3. rpm -i apache2-2.4.41-r0.1.aarch64.rpm 4. systemctl status apache2 Error: httpd[7767]: (2)No such file or directory: AH02291: Cannot access directory '/var/log/apache2/' for main error log with the old way, /var/log/apache2/ is created by service systemd-tmpfiles-setup during boot, so only works when apache2 already installed before boot, in above scenario, /var/log/apache2/ will not created. fix by creating it in the service file. similar fix for sysV system Signed-off-by: Changqing Li Signed-off-by: Khem Raj (cherry picked from commit e789c3837ca8d65abb4bac29dc2e5c595c8ce05b) Signed-off-by: Armin Kuster

nginx: remove /var/log/nginx when do_install

2020-05-17T21:30:29+00:00

Remove directory /var/log/nginx when do_install because it is created by volatiles file. Signed-off-by: Yi Zhao Signed-off-by: Khem Raj (cherry picked from commit 6e9f393605eed1e5f4e317536b1463b83b978bad) Signed-off-by: Armin Kuster

apache2: add patch ensuring destdir is empty string

2020-04-18T02:05:58+00:00

apache2 added cross-compilation support after 2.4.41, but this conflicts with our own cross-compilation setup and causes related recipes like apache-websocket to fail to find config files (due to incorrect file paths) during build: | cannot open /ala-lpggp31/tgamblin/yocto/poky.git/build/tmp/work/core2-64-poky-linux/apache-websocket/0.1.1+gitAUTOINC+6968083264-r0/recipe-sysroot/ala-lpggp31/tgamblin/yocto/poky.git/build/tmp/work/core2-64-poky-linux/apache-websocket/0.1.1+gitAUTOINC+6968083264-r0/recipe-sysroot//usr/share/apache2/build/config_vars.mk: No such file or directory at /ala-lpggp31/tgamblin/yocto/poky.git/build/tmp/work/core2-64-poky-linux/apache-websocket/0.1.1+gitAUTOINC+6968083264-r0/recipe-sysroot/usr/bin/crossscripts/apxs line 213. Add this patch to ensure that the $destdir variable used in apache2's cross-compilation scheme is always the empty string so that apache-websocket can find the right files. Signed-off-by: Trevor Gamblin Signed-off-by: Khem Raj

apache2: upgrade 2.4.41 -> 2.4.43

2020-04-18T02:05:58+00:00

LICENSE file was updated due to a typo fix. Note that this upgrade fixes two CVES affecting versions 2.4.41 and earlier: CVE: CVE-2020-1927 CVE: CVE-2020-1934 See: https://nvd.nist.gov/vuln/detail/CVE-2020-1927 https://nvd.nist.gov/vuln/detail/CVE-2020-1934 Signed-off-by: Trevor Gamblin Signed-off-by: Khem Raj

nostromo: upgrade 1.9.6 -> 1.9.7

2020-04-02T06:32:54+00:00

Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj

nginx: fix error during service startup

2020-02-26T15:17:58+00:00

fix below error: nginx.service: failed to parse pid from file /run/nginx/nginx.pid: invalid argument Signed-off-by: Changqing Li Signed-off-by: Khem Raj

nginx: update to the latest development version (1.17.8)

2020-02-10T06:31:31+00:00

See Changelog: https://nginx.org/en/CHANGES Signed-off-by: Derek Straka Signed-off-by: Khem Raj