From b4bd1edcd018159a61ad84bede0c896e956eacbd Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Thu, 10 Jul 2025 22:05:21 +0200 Subject: [PATCH] package/apache: security bump version to 2.4.64 Fixes CVE-2025-53020, CVE-2025-49812, CVE-2025-49630, CVE-2025-23048, CVE-2024-47252, CVE-2024-43394, CVE-2024-43204 & CVE-2024-42516. Changelog: https://downloads.apache.org/httpd/CHANGES_2.4.64 Signed-off-by: Bernd Kuhls Signed-off-by: Julien Olivain --- package/apache/apache.hash | 6 +++--- package/apache/apache.mk | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package/apache/apache.hash b/package/apache/apache.hash index da0b1f1f17..748be01de7 100644 --- a/package/apache/apache.hash +++ b/package/apache/apache.hash @@ -1,5 +1,5 @@ -# From https://downloads.apache.org/httpd/httpd-2.4.63.tar.bz2.{sha256,sha512} -sha256 88fc236ab99b2864b248de7d49a008ec2afd7551e64dce8b95f58f32f94c46ab httpd-2.4.63.tar.bz2 -sha512 a804ca564dfee5907fe4ce4f36884815bace0621bc7b8c9aa7c99472a954aa19cb13733f90678ff3d58ab3c76cc0e33a27e1035dc1d8cb597a9622154c59ef48 httpd-2.4.63.tar.bz2 +# From https://downloads.apache.org/httpd/httpd-2.4.64.tar.bz2.{sha256,sha512} +sha256 120b35a2ebf264f277e20f9a94f870f2063342fbff0861404660d7dd0ab1ac29 httpd-2.4.64.tar.bz2 +sha512 299cb0d87a7e0e0a99d22bba7349b6b07c69222897410f9670af29896288d1f4e1da81d22ac9e1d8d6ea096e88044ab1dd34555b40a4b1b1cb3fd4b1d1897a7a httpd-2.4.64.tar.bz2 # Locally computed sha256 47b8c2b6c3309282a99d4a3001575c790fead690cc14734628c4667d2bbffc43 LICENSE diff --git a/package/apache/apache.mk b/package/apache/apache.mk index 14676a5aee..7e9fb522b5 100644 --- a/package/apache/apache.mk +++ b/package/apache/apache.mk @@ -4,7 +4,7 @@ # ################################################################################ -APACHE_VERSION = 2.4.63 +APACHE_VERSION = 2.4.64 APACHE_SOURCE = httpd-$(APACHE_VERSION).tar.bz2 APACHE_SITE = https://dlcdn.apache.org/httpd APACHE_LICENSE = Apache-2.0