aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJ0WI <J0WI@users.noreply.github.com>2019-01-22 19:33:40 +0100
committerKaarle Ritvanen <kaarle.ritvanen@datakunkku.fi>2019-01-25 21:42:17 +0200
commit1d9e0b6cf8ba241e0cc1da807a574470b5aab156 (patch)
tree08815a4d68ca03ff74bd0db6e2d9c5870eb42b7d
parentbac739997662850414a0424662a0241c9d49adbf (diff)
main/apache2: security upgrade to 2.4.38
fixes #9907
-rw-r--r--main/apache2/APKBUILD14
1 files changed, 9 insertions, 5 deletions
diff --git a/main/apache2/APKBUILD b/main/apache2/APKBUILD
index edd4855901a..8db89d8a6e9 100644
--- a/main/apache2/APKBUILD
+++ b/main/apache2/APKBUILD
@@ -2,10 +2,10 @@
# Contributor: Valery Kartel <valery.kartel@gmail.com>
pkgname=apache2
_pkgreal=httpd
-pkgver=2.4.35
+pkgver=2.4.38
pkgrel=0
pkgdesc="A high performance Unix-based HTTP server"
-url="http://httpd.apache.org/"
+url="https://httpd.apache.org/"
arch="all"
license="Apache-2.0"
depends=""
@@ -27,7 +27,7 @@ subpackages="$pkgname-ctl
$pkgname-ssl
$pkgname-utils
$pkgname-webdav"
-source="http://archive.apache.org/dist/$_pkgreal/$_pkgreal-$pkgver.tar.bz2
+source="https://archive.apache.org/dist/$_pkgreal/$_pkgreal-$pkgver.tar.bz2
apache2.confd
apache2.logrotate
apache2.initd
@@ -52,6 +52,10 @@ options="suid"
builddir="$srcdir"/$_pkgreal-$pkgver
# secfixes:
+# 2.4.38-r0:
+# - CVE-2018-17189
+# - CVE-2018-17199
+# - CVE-2019-0190
# 2.4.35-r0:
# - CVE-2018-11763
# 2.4.34-r0:
@@ -275,7 +279,7 @@ ssl() {
ldap() {
pkgdesc="LDAP authentication/authorization module for the Apache HTTP Server"
- url="http://httpd.apache.org/docs/2.4/mod/mod_authnz_ldap.html"
+ url="https://httpd.apache.org/docs/2.4/mod/mod_authnz_ldap.html"
depends="apache2 apr-util-ldap"
install -d "$subpkgdir"/usr/lib/apache2 || return 1
@@ -325,7 +329,7 @@ _lua() {
"$subpkgdir"/usr/lib/apache2/ || return 1
_load_mods
}
-sha512sums="f5d6a849850ebdf4e38b586c84cc1063d68ac4c6737895c9ac1c8796c22655681c55b4de77ed9f1f807338fdb9f7824faf911361aa31cc46f3c3a2cbabe20543 httpd-2.4.35.tar.bz2
+sha512sums="8bdc36fa2bd13fd83feee17fdce4a5316ed8f96c1ac32b636ba106572ba257815438c72068d2d0e900783a3fa25c90a5da34c3f83fc2c04a1dbdbf234f7ad448 httpd-2.4.38.tar.bz2
8e62b101f90c67babe864bcb74f711656180b011df3fd4b541dc766b980b72aa409e86debf3559a55be359471c1cad81b8779ef3a55add8d368229fc7e9544fc apache2.confd
18e8859c7d99c4483792a5fd20127873aad8fa396cafbdb6f2c4253451ffe7a1093a3859ce719375e0769739c93704c88897bd087c63e1ef585e26dcc1f5dd9b apache2.logrotate
81a2d2a297d8049ba1b021b879ec863767149e056d9bdb2ac8acf63572b254935ec96c2e1580eba86639ea56433eec5c41341e4f1501f9072745dccdb3602701 apache2.initd