linux/meta-openembedded.git/meta-webserver, branch styhead

apache2: ignore disputed CVE CVE-2007-0086

2025-01-16T14:17:32+00:00

This CVE is officially disputed by Redhat with official statement in https://nvd.nist.gov/vuln/detail/CVE-2007-0086 Red Hat does not consider this issue to be a security vulnerability. The pottential attacker has to send acknowledgement packets periodically to make server generate traffic. Exactly the same effect could be achieved by simply downloading the file. The statement that setting the TCP window size to arbitrarily high value would permit the attacker to disconnect and stop sending ACKs is false, because Red Hat Enterprise Linux limits the size of the TCP send buffer to 4MB by default. Signed-off-by: Peter Marko Signed-off-by: Khem Raj (cherry picked from commit da2b5e8b93c248363581b1bd4ff67ff1d8357c41) Signed-off-by: Armin Kuster

monkey: ignore CVE-2013-1771

2025-01-16T14:17:32+00:00

This is gentoo specific CVE. NVD tracks this as version-less CVE. Signed-off-by: Peter Marko Signed-off-by: Khem Raj (cherry picked from commit 36a7e409d8dcee804f911174291a0c72b8037934) Signed-off-by: Armin Kuster

apache2: remove old version references from CVEs

2025-01-16T14:17:32+00:00

These were not updated on recipe upgrade. To make maintenance easier, remove exact versions. Signed-off-by: Peter Marko Signed-off-by: Khem Raj (cherry picked from commit 0e7733f1b8f51949ec91d82267d5d864ac0be16a) Signed-off-by: Armin Kuster

apache2: ignore CVE-1999-0678 and CVE-1999-1412

2025-01-16T14:17:32+00:00

These CVEs are specific to Debian and MAC OS X respectively. Signed-off-by: Peter Marko Signed-off-by: Khem Raj (cherry picked from commit 1b86a60f6283b08acadc50914075d93dd362700b) Signed-off-by: Armin Kuster

nginx: Upgrade mainline release version 1.27.1 -> 1.27.3

2025-01-16T14:17:32+00:00

License-Update: License file negative and empty space changes Signed-off-by: Derek Straka Signed-off-by: Khem Raj (cherry picked from commit 1f4b413ebe623810007d430a73cc6f8a26c8f578) Signed-off-by: Armin Kuster

apache2: do not depend on zlib header and libs from host

2024-11-19T21:13:27+00:00

This commit modifies the PACKAGECONFIG entry for zlib to ensure that the mod_deflate module is enabled with the appropriate zlib configuration. By adding the --with-zlib=${STAGING_LIBDIR}/../ option, we direct the configure script to use the zlib library from the staging directory instead of relying on the host system's zlib installation. Without that configure will search the host for zlib headers and lib. This change resolves build failures related to zlib dependency when mod_deflate is enabled and ensures a consistent build environment across different host configurations. Signed-off-by: Valeria Petrov Signed-off-by: Khem Raj (cherry picked from commit ac5855c74d1cb2252efdb347969c450637f95c58) Signed-off-by: Armin Kuster

meta-openemnedded: Add myself as styhead maintainer

2024-09-29T20:58:53+00:00

Signed-off-by: Armin Kuster Signed-off-by: Khem Raj

nginx: Upgrade mainline 1.25.3 -> 1.27.1

2024-09-17T22:46:33+00:00

Solves: * CVE-2024-7347 * CVE-2024-24989 * CVE-2024-24990 * CVE-2024-31079 * CVE-2024-32760 * CVE-2024-34161 * CVE-2024-35200 License-Update: copyright year refreshed Signed-off-by: Peter Marko Signed-off-by: Khem Raj

nginx: Upgrade stable 1.26.0 -> 1.26.2

2024-09-17T22:46:33+00:00

Solves: * CVE-2024-7347 * CVE-2024-31079 * CVE-2024-32760 * CVE-2024-34161 * CVE-2024-35200 Signed-off-by: Peter Marko Signed-off-by: Khem Raj

netdata: Add checks for 64-bit atomic builtins

2024-09-17T14:50:23+00:00

This helps in passing correct flags to h2o module compilation Signed-off-by: Khem Raj