linux/meta-openembedded.git/meta-webserver/recipes-httpd, branch nanbield

nginx: upgrade 1.25.2 -> 1.25.3

2024-01-17T00:21:40+00:00

Changelog: =========== https://nginx.org/en/CHANGES *) Change: improved detection of misbehaving clients when using HTTP/2. *) Feature: startup speedup when using a large number of locations. Thanks to Yusuke Nojima. *) Bugfix: a segmentation fault might occur in a worker process when using HTTP/2 without SSL; the bug had appeared in 1.25.1. *) Bugfix: the "Status" backend response header line with an empty reason phrase was handled incorrectly. *) Bugfix: memory leak during reconfiguration when using the PCRE2 library. Thanks to ZhenZhong Wu. *) Bugfixes and improvements in HTTP/3. Signed-off-by: Meenali Gupta Signed-off-by: Khem Raj (cherry picked from commit dc4bef4648ea5ff73230ff2d343f498c93bd333b) Signed-off-by: Armin Kuster

apache2: v2.4.57 to v2.4.58 to fix CVE-2023-43622

2024-01-05T12:52:17+00:00

Note that patch 0011-modules... is no longer needed as it's included in the upgrade as well. CVE: CVE-2023-43622 Signed-off-by: Dylan Turner Signed-off-by: Khem Raj (cherry picked from commit 9f0b5053410d5958e089351b93199efd3473d3de) Signed-off-by: Armin Kuster

apache2: add vendor to product name used for CVE checking

2024-01-05T12:52:17+00:00

This recipe sets the product name used for CVE checking to "http_server". However, the cve-check logic matches that name to all products in the CVE database regardless of vendor. Currently, it is matching to products from vendors other than apache. As a result, CVE checking incorrectly reports CVEs for those vendors' products for this package. Signed-off-by: Jeffrey Pautler Signed-off-by: Khem Raj (cherry picked from commit 51f70eaaa5973e385645f574093ee860f5648f88) Signed-off-by: Armin Kuster

nginx: add configure option

2023-10-12T13:58:05+00:00

Support --with-http_xslt_module configure option via a PACKAGECONFIG option. The option is not added to the defaults. Signed-off-by: Joe Slater Signed-off-by: Khem Raj (cherry picked from commit e0ac8eec48ddddc93751cfcdef2557998bfe91c8) Signed-off-by: Armin Kuster

gnome-tweaks, networkmanager-fortisslvpn, libesmtp, json-schema-validator, python3-pybluez, python3-pynetlinux, apache2: Fix Malformed Upstream-Status

2023-10-04T14:52:48+00:00

* Accepted was replaced with Backport in gatesgarth: https://docs.yoctoproject.org/migration-guides/migration-3.2.html#miscellaneous-changes * as detected with oe-core/scripts/contrib/patchreview.py: meta-openembedded $ grep -A 3 Malformed *qa-patches meta-gnome.qa-patches:Malformed Upstream-Status 'Malformed Upstream-Status in patch meta-gnome.qa-patches-/OE/layers/meta-openembedded/meta-gnome/recipes-gnome/gnome-tweaks/gnome-tweaks/0002-meson-fix-invalid-positional-argument.patch meta-gnome.qa-patches-Please correct according to https://docs.yoctoproject.org/contributor-guide/recipe-style-guide.html#patch-upstream-status : meta-gnome.qa-patches-Upstream-Status: Accepted [https://gitlab.gnome.org/GNOME/gnome-tweaks/-/commit/dc9701e18775c01d0b69fabaa350147f70096da8]' (/OE/layers/meta-openembedded/meta-gnome/recipes-gnome/gnome-tweaks/gnome-tweaks/0002-meson-fix-invalid-positional-argument.patch) Signed-off-by: Khem Raj (cherry picked from commit a1c3c7f4e81d24a4d43880222ee184de3c3156b2) Signed-off-by: Armin Kuster

nginx: upgrade 1.25.1 -> 1.25.2

2023-08-27T00:32:44+00:00

Changelog: =========== *) Feature: path MTU discovery when using HTTP/3. *) Feature: TLS_AES_128_CCM_SHA256 cipher suite support when using HTTP/3. *) Change: now nginx uses appname "nginx" when loading OpenSSL configuration. *) Change: now nginx does not try to load OpenSSL configuration if the --with-openssl option was used to built OpenSSL and the OPENSSL_CONF environment variable is not set. *) Bugfix: in the $body_bytes_sent variable when using HTTP/3. *) Bugfix: in HTTP/3. Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj

cherokee: add CVE_PRODUCT

2023-07-21T02:08:57+00:00

As per https://nvd.nist.gov/vuln/detail/CVE-2019-1010218, Cherokee uses to use cherokee-project:cherokee_web_server. Signed-off-by: Ross Burton Signed-off-by: Khem Raj

nginx: upgrade 1.24.0 -> 1.25.1

2023-07-21T02:08:57+00:00

Changelog: ========== *) Feature: the "http2" directive, which enables HTTP/2 on a per-server basis; the "http2" parameter of the "listen" directive is now deprecated. *) Change: HTTP/2 server push support has been removed. *) Change: the deprecated "ssl" directive is not supported anymore. *) Bugfix: in HTTP/3 when using OpenSSL. *) Feature: experimental HTTP/3 support. License-Update: Copyright year updated to 2023. Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj

nginx: upgrade to 1.24.0 release

2023-07-11T21:20:18+00:00

Brings nginx to the current stable version. Signed-off-by: Michael Haener Signed-off-by: Khem Raj

nginx: Add stream Signed-off-by: Luke Schaefer

2023-06-27T20:44:47+00:00

Add stream support to nginx PACKAGECONFIG Signed-off-by: Khem Raj