linux/meta-openembedded.git/meta-webserver/recipes-httpd, branch rocko-nextMirror of git.openembedded.org/meta-openembeddedhttps://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=rocko-next2018-09-04T14:36:40+00:00apache2: CVE-2018-13332018-09-04T14:36:40+00:00Jagadeesh Krishnanjanappajkrishnanjanappa@mvista.com2018-08-23T11:21:22+00:00urn:sha1:086be3c7ec949aa9d5059c0e00a34e42711d66af
* fixes a race condition where aborting streams triggers an
unnecessary timeout.
Affects apache2 2.4.18 to 2.4.30 and apache2 2.4.33
Fixed in apache2 2.4.34
Signed-off-by: Jagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
nginx: update development version to 1.13.52017-09-22T22:50:41+00:00Derek Strakaderek@asterius.io2017-09-15T18:45:30+00:00urn:sha1:7ddeabbeb104c132f58a9990261235fae4b731fd
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
apache2: change files layout to debian style2017-09-18T08:18:12+00:00dengke.du@windriver.comdengke.du@windriver.com2017-09-15T03:18:21+00:00urn:sha1:4bd83dd9df75d31c8a302a8e89bf99f1042fc5bc
The default layout installs log files and pid files into /var/apache2/logs.
This is odd and also will cause security issues because selinux does not know
how to label the security contexts for the files.
Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
Signed-off-by: Dengke Du <dengke.du@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
apache2: use volatiles for sysvinit2017-09-18T08:18:12+00:00dengke.du@windriver.comdengke.du@windriver.com2017-09-15T03:18:20+00:00urn:sha1:2630b26862a64f32f81fd455df31270125ea5487
Signed-off-by: Dengke Du <dengke.du@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Nginx: use PACKAGECONFIG variables in configure2017-09-18T08:18:12+00:00Szombathelyi Györgygyurco@freemail.hu2017-09-14T15:59:32+00:00urn:sha1:9205bd846c262fccddc62619fe84cd50d8a44372
Signed-off-by: Gyorgy Szombathelyi <gyurco@freemail.hu>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
sthttpd: update to 2.27.12017-08-28T09:06:03+00:00Yi Zhaoyi.zhao@windriver.com2017-08-22T03:10:43+00:00urn:sha1:e11367b255f988ba0cdead7568739180549f751d
* Fix CVE-2017-10671: Heap-based buffer overflow in the de_dotdot
function in libhttpd.c
* Update SRC_URI because the original site can not access.
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
apache2: update to version 2.4.272017-08-13T11:20:58+00:00Derek Strakaderek@asterius.io2017-08-08T17:40:45+00:00urn:sha1:16d01c4a0c6e69501dd8953645d009c5e73b2390
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
nginx: update development version to 1.13.32017-08-13T11:20:58+00:00Derek Strakaderek@asterius.io2017-08-08T17:17:29+00:00urn:sha1:684789ee48990ac8c9c3af5a3572a9d4eda4fd45
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
nginx: update stable version to 1.12.12017-08-13T11:20:58+00:00Derek Strakaderek@asterius.io2017-08-08T17:16:46+00:00urn:sha1:ee1efae12d022ca6be512ed6535eab795992688f
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
cherokee: Upgrade to 1.2.104+git2017-08-13T11:19:03+00:00Khem Rajraj.khem@gmail.com2017-07-26T18:58:10+00:00urn:sha1:c155bd03fd4d4fd7f73202ef70833e17d3adf43b
Use git fetcher to use tip of tree, the tree does not
get frequent fixes. Its not disruptive to use git fetcher
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>