aboutsummaryrefslogtreecommitdiff
path: root/net/apache/patches
Commit message (Collapse)AuthorAge
* apache: add compile fix for libxml-2.12.xMichael Heimpold2023-12-17
| | | | | | | libxml2 restructured includes, thus another include is now required otherwise build fails. Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* apache: bump to release 2.4.57Christian Marangi2023-09-27
| | | | | | Bump apache to release 2.4.57 and refresh patch automatically. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* apache2: security update to version 2.4.52Josef Schlehofer2022-02-02
| | | | | | | | | | Fixes CVEs: - CVE-2021-44790 - CVE-2021-44224 Refreshed patches Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* apache: security bump to 2.4.51Sebastian Kemper2021-10-26
| | | | | | | | | | | | | | | Fixes (see [1] for details): CVE-2021-33193 CVE-2021-41524 CVE-2021-41773 CVE-2021-42013 [1] https://httpd.apache.org/security/vulnerabilities_24.html Patch 020-openssl-deprecated.patch refreshed. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* apache: update to 2.4.48Rosen Penev2021-07-11
| | | | | | | | | | | | | | | | | Refreshed patch. Fixes: CVE-2019-17567 CVE-2020-13938 CVE-2020-13950 CVE-2020-35452 CVE-2021-26690 CVE-2021-26691 CVE-2021-30641 CVE-2021-31618 Signed-off-by: Rosen Penev <rosenp@gmail.com>
* treewide: Run refresh on all packagesIlya Lipnitskiy2021-02-20
| | | | | | | | | The crude loop I wrote to come up with this changeset: find -L package/feeds/packages/ -name patches | \ sed 's/patches$/refresh/' | sort | xargs make Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>
* apache: fix compilation without deprecated OpenSSL APIsRosen Penev2020-08-31
| | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* apache: security bump to 2.4.43Sebastian Kemper2020-04-05
| | | | | | | | | | | | | | | | This minor version bump fixes: CVE-2020-1934 CVE-2020-1927 Upstream added cross-compile compatibility to apxs, so we can drop a sed script. Upstream also added the OpenWrt layout, so we can drop our local copy. The OpenSSL patch to remove deprecated symbols doesn't apply anymore and gets removed. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* apache: fix compilation without deprecated OpenSSL APIsRosen Penev2020-02-03
| | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* apache: add extra packages + apache userSebastian Kemper2020-01-01
| | | | | | | | | | | | | This adds extra packages for certain modules (basically the ones that incur further dependencies), support files etc. This is pretty much follows Alpine's example. This updates the httpd.conf patch to _not_ uncomment MIMEMagicFile (because the module isn't loaded by default) and removes that changes that aren't needed anymore (because of the added module support). The patch now only changes the default user. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* apache: break-out CONFIGURE_ARGS, add layoutSebastian Kemper2020-01-01
| | | | | | | | | | | | | | | | | | | | | | This gets rid of flags. For instance $(FPIC) shouldn't be forced onto applications (see [1]). And CONFIGURE_ARGS + CONFIGURE_VARS are broken out of Build/Configure. This way more arguments can be added easily in the future. The target is changed from apache to apache2 (which is used by upstream by default). the CONFIGURE_ARGS are changed where need to enable modules. This also renames one patch that fixes scoreboard location (the name 004-pidfile_fix.patch didn't describe what it's doing). Now with the OpenWrt layout in place 003-logdir_fix.patch can be removed. [1] https://wiki.gentoo.org/wiki/Project:Hardened/Position_Independent_Code_internals Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* apache: bump to 2.4.41Sebastian Kemper2020-01-01
| | | | | | | | | | - version bump - update license description - add PKG_BUILD_PARALLEL:=1 - remove two cross-compile patches and replace them with the cross-compile patch from buildroot (adds autoreconf to get this going) Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* apache: Update to 2.4.37Rosen Penev2018-11-06
| | | | | | | | | | | | | Fixes at least: CVE-2017-15710 CVE-2017-15715 CVE-2018-1283 CVE-2018-1312 Added CPE ID for proper CVE tracking. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* apache: fix reproducible buildsAlexander Couzens2017-11-17
| | | | | | | | | | Remove build timestamp [0] and correct sorting [1]. Thanks to debian for the patch. [0] https://reproducible-builds.org/docs/timestamps/ [1] https://reproducible-builds.org/docs/stable-inputs/ Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
* package apache: upgrade to 2.4.25heil2016-12-26
| | | | | | - refresh patches Signed-off-by: heil <heil@terminal-consulting.de>
* apache: fix build without sslv3Hauke Mehrtens2016-07-31
| | | | | | | SSLv3 support is deactivated in LEDE now, which causes a build problem in apache. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* apache: import from oldpackages, add myself as maintainer, add licenseThomas Heil2014-07-12
information, update source-url update to v2.2.27 Signed-off-by: Thomas Heil <heil@terminal-consulting.de>