From d72868f1583cb745a875f1eae263c24e085ce592 Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Thu, 7 Jul 2016 07:08:00 +0200 Subject: [PATCH] package/apache: security bump to version 2.4.23 Fixes CVE-2016-4979: TLS/SSL X.509 client certificate auth bypass with HTTP/2 http://httpd.apache.org/security/vulnerabilities_24.html Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni --- package/apache/apache.hash | 4 ++-- package/apache/apache.mk | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package/apache/apache.hash b/package/apache/apache.hash index 062a54990d..e4710b0415 100644 --- a/package/apache/apache.hash +++ b/package/apache/apache.hash @@ -1,2 +1,2 @@ -# From http://www.apache.org/dist/httpd/httpd-2.4.20.tar.bz2.sha1 -sha1 cefe8ea4a3f81c7a08e36c80ebbd792c67ab361b httpd-2.4.20.tar.bz2 +# From http://www.apache.org/dist/httpd/httpd-2.4.23.tar.bz2.sha1 +sha1 5101be34ac4a509b245adb70a56690a84fcc4e7f httpd-2.4.23.tar.bz2 diff --git a/package/apache/apache.mk b/package/apache/apache.mk index 6d9a324b9f..e78545a076 100644 --- a/package/apache/apache.mk +++ b/package/apache/apache.mk @@ -4,7 +4,7 @@ # ################################################################################ -APACHE_VERSION = 2.4.20 +APACHE_VERSION = 2.4.23 APACHE_SOURCE = httpd-$(APACHE_VERSION).tar.bz2 APACHE_SITE = http://archive.apache.org/dist/httpd APACHE_LICENSE = Apache-2.0