From 4e4539b2ae4621573a515821ed5657c652e0a32a Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Thu, 9 Mar 2023 20:25:13 +0100 Subject: [PATCH] package/apache: security bump version to 2.4.56 Release notes: https://lists.apache.org/thread/89vkczkfkdyz65d5q59pcyzrn5ts60s6 Changelog: https://dlcdn.apache.org/httpd/CHANGES_2.4.56 Fixes CVE-2023-25690 & CVE-2023-27522: https://httpd.apache.org/security/vulnerabilities_24.html Signed-off-by: Bernd Kuhls Signed-off-by: Arnout Vandecappelle (cherry picked from commit 5256ec9ca872518beacf827443fec72146ab7a0c) Signed-off-by: Peter Korsgaard --- package/apache/apache.hash | 6 +++--- package/apache/apache.mk | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package/apache/apache.hash b/package/apache/apache.hash index a1185c5618..36144917fb 100644 --- a/package/apache/apache.hash +++ b/package/apache/apache.hash @@ -1,5 +1,5 @@ -# From https://downloads.apache.org/httpd/httpd-2.4.54.tar.bz2.{sha256,sha512} -sha256 11d6ba19e36c0b93ca62e47e6ffc2d2f2884942694bce0f23f39c71bdc5f69ac httpd-2.4.55.tar.bz2 -sha512 94982f7a1fedac8961fc17b5a22cf763ac28cb27ee6facab2e6a15b249b927773667493fd3f7354fb13fcb34a6f1afc1bdd5cf4b7be030cba1dfb523e40d43fb httpd-2.4.55.tar.bz2 +# From https://downloads.apache.org/httpd/httpd-2.4.56.tar.bz2.{sha256,sha512} +sha256 d8d45f1398ba84edd05bb33ca7593ac2989b17cb9c7a0cafe5442d41afdb2d7c httpd-2.4.56.tar.bz2 +sha512 5f12cd9878d822384b1bb163fea4d8edee5e7a0dd8b2389264387971268145cccc6a5a27ddf0436c5f1f631acc5fdc4874da2a47911483e421ca40bf783e0e12 httpd-2.4.56.tar.bz2 # Locally computed sha256 47b8c2b6c3309282a99d4a3001575c790fead690cc14734628c4667d2bbffc43 LICENSE diff --git a/package/apache/apache.mk b/package/apache/apache.mk index 13018a9b1f..80205a6362 100644 --- a/package/apache/apache.mk +++ b/package/apache/apache.mk @@ -4,7 +4,7 @@ # ################################################################################ -APACHE_VERSION = 2.4.55 +APACHE_VERSION = 2.4.56 APACHE_SOURCE = httpd-$(APACHE_VERSION).tar.bz2 APACHE_SITE = https://downloads.apache.org/httpd APACHE_LICENSE = Apache-2.0