Commit graph

18 commits

Author SHA1 Message Date
Sebastian Kemper
8a4d0b206d apache: security bump to 2.4.43
This minor version bump fixes:

CVE-2020-1934
CVE-2020-1927

Upstream added cross-compile compatibility to apxs, so we can drop a sed
script. Upstream also added the OpenWrt layout, so we can drop our local
copy.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-04-05 21:08:04 +02:00
Sebastian Kemper
9e551f1b3e apache: add postinstall script
This script notifies users about the changes that recently went into the
package, to prevent surprises.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-02-08 23:47:48 +01:00
Sebastian Kemper
623ae46141 apache: bump to 2.4.41 & sync with master
This is a squash of the following cherry-picked commits:

14f4f0bef0
4e6bdd8a49
c8aba5113b
2d188fd37f
31e0d618e5
39e68309e8
a1472254db
d6476f30bb
258967b0d2
e94a08298e
6bd63d24f0
66bb68a7b6
d44ad09fcd

Short summary:

- version is bumped to 2.4.41
- httpd is renamed to apache2 to avoid overwriting of other servers (for
  instance busybox's httpd)
- the name apache2 is now also used for directories, for instance
  /etc/apache2 instead of /etc/apache
- a simple init script it added (/etc/init.d/apache2)
- a user "apache" is added upon package installation and used by default
- adds the Apache modules (in the main package as well as in additional
  packages)
- Makefile and patches are updated and cleaned
- adds myself as maintainer
- improves the cross-compile setup (via configure variables, patches &
  sed scripts)
- apxs is fixed up so that external modules can be added easily

For more details please check the individual commits provided above.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-02-08 22:14:48 +01:00
Rosen Penev
029a6819f0
apache: Disable Managed Domain handling
This is a new feature that requires new dependencies. Disable it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-11-12 11:30:55 -08:00
Rosen Penev
0ff43a37a3 apache: Update to 2.4.37
Fixes at least:

CVE-2017-15710
CVE-2017-15715
CVE-2018-1283
CVE-2018-1312

Added CPE ID for proper CVE tracking.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-11-06 09:36:54 -08:00
Alexander Couzens
f06b980bef apache: fix reproducible builds
Remove build timestamp [0] and correct sorting [1].
Thanks to debian for the patch.

[0] https://reproducible-builds.org/docs/timestamps/
[1] https://reproducible-builds.org/docs/stable-inputs/

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
2017-11-17 12:17:03 +01:00
Thomas Heil
923b4558a6 apache: update to 2.4.28
- fix CVE-2017-9798
 - fix #4926
  make http2 support configurable, in case of enables libnghttp2
  package dont build http2. instead use CONFIG_APACHE_HTTP2 to
  enable http2 support

Signed-off-by: Thomas Heil <heil@terminal-consulting.de>
2017-10-15 16:59:50 +02:00
Etienne Champetier
4006865ae8 treewide: run "make check FIXUP=1"
fix Makefile chmod (644)
replace MD5SUM with HASH
add PKG_MIRROR_HASH when PKG_SOURCE_PROTO:=git

(PKG_SOURCE_PROTO:=svn tarballs are not reproducible for now)

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2017-08-29 21:41:14 -07:00
Thomas Heil
3d824568bd apache: update to 2.4.47
- fixes security issues
  CVE-2017-7679, CVE-2017-7668, CVE-2017-7659, CVE-2017-3169
  CVE-2017-3167, CVE-2017-9788, CVE-2017-9789

Signed-off-by: Thomas Heil <heil@terminal-consulting.de>
2017-08-17 01:09:28 +02:00
Arturo Rinaldi
d47dc4af30 apache : updating PKG_RELEASE entry 2017-07-15 21:53:32 +02:00
Arturo Rinaldi
e42a595ce5 apache : fixing zlib dependency 2017-02-18 23:11:04 +01:00
heil
f8b42ce2c9 package apache: upgrade to 2.4.25
- refresh patches

Signed-off-by: heil <heil@terminal-consulting.de>
2016-12-26 23:42:01 +01:00
heil
d558beb000 apache: increase PKG_RELEASE for rebuild
Signed-off-by: heil <heil@terminal-consulting.de>
2016-08-01 11:50:21 +02:00
Hauke Mehrtens
51bbfb6013 apache: fix build without sslv3
SSLv3 support is deactivated in LEDE now, which causes a build problem
in apache.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2016-07-31 13:20:56 +02:00
Heinrich Schuchardt
cbdec721ac net/apache: use @APACHE download facility
Instead of explicitly specyfing an Apache mirror use the
@APACHE download facility.

Signed-off-by: Heinrich Schuchardt <xypron.glpk@gmx.de>
2016-01-17 19:39:37 +01:00
heil
1df699db40 apache: bump to version 2.2.31
Signed-off-by: heil <heil@terminal-consulting.de>
2015-08-17 14:34:29 +02:00
Thomas Heil
9495538992 apache: upgrade version to 2.2.29 that fixes recent CVEs
- CVE-2014-0118
 - CVE-2014-0231
 - CVE-2014-0226
 - CVE-2013-5704

Signed-off-by: Thomas Heil <heil@terminal-consulting.de>
2014-09-14 23:14:01 +02:00
Thomas Heil
08379648ee apache: import from oldpackages, add myself as maintainer, add license
information, update source-url update to v2.2.27

Signed-off-by: Thomas Heil <heil@terminal-consulting.de>
2014-07-12 13:40:35 +02:00