buildroot/package/apache, branch 2019.02-op-build

package/apache: security bump to version 2.4.38

2019-01-22T21:14:22+00:00

Fixes the following security vulnerabilities: *) SECURITY: CVE-2018-17199 (cve.mitre.org) mod_session: mod_session_cookie does not respect expiry time allowing sessions to be reused. [Hank Ibell] *) SECURITY: CVE-2018-17189 (cve.mitre.org) mod_http2: fixes a DoS attack vector. By sending slow request bodies to resources not consuming them, httpd cleanup code occupies a server thread unnecessarily. This was changed to an immediate stream reset which discards all stream state and incoming data. [Stefan Eissing] *) SECURITY: CVE-2019-0190 (cve.mitre.org) mod_ssl: Fix infinite loop triggered by a client-initiated renegotiation in TLSv1.2 (or earlier) with OpenSSL 1.1.1 and later. PR 63052. [Joe Orton] For more details, see the CHANGES file: https://www.apache.org/dist/httpd/CHANGES_2.4.38 Signed-off-by: Peter Korsgaard

package/apache: enable optional support for nghttp2

2018-12-30T15:38:11+00:00

Signed-off-by: Ryan Coe Signed-off-by: Thomas Petazzoni

package/apache: bump version to 2.4.37

2018-10-23T23:18:48+00:00

Changelog: http://www.apache.org/dist/httpd/CHANGES_2.4.37 Signed-off-by: Bernd Kuhls Signed-off-by: Peter Korsgaard

package/apache: security bump to version 2.4.35

2018-09-30T08:37:08+00:00

Fixes: CVE-2018-11763: mod_http2, DoS via continuous SETTINGS frames https://lists.apache.org/thread.html/d435b0267a76501b9e06c552b20c887171064cde38e46d678da4d3dd@%3Cannounce.httpd.apache.org%3E Release notes: https://lists.apache.org/thread.html/5d604774652fc073b1b161584d0d1efbdba7898c40ae2e2334725e5f@%3Cannounce.httpd.apache.org%3E Signed-off-by: Bernd Kuhls Signed-off-by: Peter Korsgaard

package/apache: bump version to 2.4.34

2018-07-16T22:34:33+00:00

Changelog: http://www.apache.org/dist/httpd/CHANGES_2.4.34 Signed-off-by: Bernd Kuhls Signed-off-by: Peter Korsgaard

apache: add systemd init script

2018-06-23T07:51:59+00:00

Signed-off-by: Fabrice Fontaine Signed-off-by: Peter Korsgaard

apache: add reload target to sysv init script

2018-06-22T17:10:10+00:00

Signed-off-by: Fabrice Fontaine Signed-off-by: Peter Korsgaard

apache: add init sysv script

2018-06-21T19:40:58+00:00

sysv init script is just a wrapper to apachectl Signed-off-by: Fabrice Fontaine Tested-by: Carlos Santos Signed-off-by: Peter Korsgaard

package/apache: fix lua detection

2018-04-01T14:22:25+00:00

Patch suggested by Thomas: Adding a path to --with-lua disables pkgconf-based detection of lua, which in some cases needs libdl. This patch removes --with-lua which fixes http://autobuild.buildroot.net/results/cc1/cc13f4cef9cf6f18615d58f1d83b233812f19fa0/ Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni

package/apache: add optional support for lua

2018-03-31T18:17:09+00:00

Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni