From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4bp45L4d19z333G for ; Thu, 24 Jul 2025 21:34:14 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "R11" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4bp45H0jFQz2yVX for ; Thu, 24 Jul 2025 21:34:11 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4bp45G2B48z62; Thu, 24 Jul 2025 21:34:10 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1753392850; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=dzZyMPWyaLhHUhBZlutfxVas7Pz8vF122FTB/6TduSs=; b=OklxTEcmSuFUvzthMXMxpA751ECSPAYqQo5+7Qnd9ujnh05l3iWzfLYzYlnGljHVaALXLo ri7OSkCBf2mDH3DA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1753392850; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=dzZyMPWyaLhHUhBZlutfxVas7Pz8vF122FTB/6TduSs=; b=XW601Fxy4uNnrT3oejpA9DmD+ivLRKqxDknR/9eZZejh/Mzlx0PNXLqaawOt0vyyt3+1Ks +fa0Q5zg9nzwVa5n+/38nUlVOLMEIwmMh6Rw3as4un+ZOw/8Q+AevIuDT5KU9pj7Z03lAk SBfOMFTDXVP0ECJCMmfwJ9Gl3KWmyvlJTdlupUH2LvrI9gM6796V8RM4QnGRqv2c/Xq9QK fQDo8TNrhK71stuhbsJOJQhR/iroguRmyJD9/Wl9fo78e3K0gK9R83+VOhB5hgzOPfDxVC oVyk7wjEYnSO1uwHrhXi30q9x4AQpaT4rGTfOmyi21RNvIzyn1oezZCBthRg7w== From: Matthias Fischer To: development@lists.ipfire.org Cc: Matthias Fischer Subject: [PATCH] apache: Update to 2.4.65 Date: Thu, 24 Jul 2025 23:33:51 +0200 Message-ID: <20250724213401.1249-1-matthias.fischer@ipfire.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit For details see: https://dlcdn.apache.org/httpd/CHANGES_2.4.65 "Changes with Apache 2.4.65 *) SECURITY: CVE-2025-54090: Apache HTTP Server: 'RewriteCond expr' always evaluates to true in 2.4.64 (cve.mitre.org) A bug in Apache HTTP Server 2.4.64 results in all "RewriteCond expr ..." tests evaluating as "true". Users are recommended to upgrade to version 2.4.65, which fixes the issue." Signed-off-by: Matthias Fischer --- lfs/apache2 | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/apache2 b/lfs/apache2 index 4abf21793..7287c997b 100644 --- a/lfs/apache2 +++ b/lfs/apache2 @@ -25,7 +25,7 @@ include Config -VER = 2.4.63 +VER = 2.4.65 THISAPP = httpd-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -45,7 +45,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = adc4b3ad640919a2df1eaae9a4a7d004f60b2d59a6fa4a624c7e97758c0e244378cb06f11d69a54e789dd216f8f3fb8e967b2e01fd3bdab10ce1ae332d2a4d07 +$(DL_FILE)_BLAKE2 = 67da132d066e03690d3a3ead8a528ab020564699c82584adf5bc637e1bc6c1def6f08e7b8b7962115fcb5bab31be7c977442549096d171321f95f54796ece63a install : $(TARGET) -- 2.43.0