From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail.windriver.com (mail.windriver.com [147.11.1.11]) by mx.groups.io with SMTP id smtpd.web10.306.1586893775241114180 for ; Tue, 14 Apr 2020 12:49:35 -0700 Authentication-Results: mx.groups.io; dkim=missing; spf=pass (domain: windriver.com, ip: 147.11.1.11, mailfrom: tgamblin@windriver.com) Received: from ALA-HCA.corp.ad.wrs.com (ala-hca.corp.ad.wrs.com [147.11.189.40]) by mail.windriver.com (8.15.2/8.15.2) with ESMTPS id 03EJnXCj005634 (version=TLSv1 cipher=AES256-SHA bits=256 verify=FAIL) for ; Tue, 14 Apr 2020 12:49:34 -0700 (PDT) Received: from ala-lpggp3.wrs.com (147.11.105.124) by ALA-HCA.corp.ad.wrs.com (147.11.189.50) with Microsoft SMTP Server id 14.3.487.0; Tue, 14 Apr 2020 12:49:33 -0700 Received: by ala-lpggp3.wrs.com (Postfix, from userid 20958) id 73915900D14; Tue, 14 Apr 2020 12:49:33 -0700 (PDT) From: "Trevor Gamblin" To: Subject: [meta-webserver][PATCH] apache2: upgrade 2.4.41 -> 2.4.43 Date: Tue, 14 Apr 2020 12:49:33 -0700 Message-ID: <20200414194933.31798-1-trevor.gamblin@windriver.com> X-Mailer: git-send-email 2.17.1 MIME-Version: 1.0 Content-Type: text/plain LICENSE file was updated due to a typo fix. Note that this upgrade fixes two CVES affecting versions 2.4.41 and earlier: CVE: CVE-2020-1927 CVE: CVE-2020-1934 See: https://nvd.nist.gov/vuln/detail/CVE-2020-1927 https://nvd.nist.gov/vuln/detail/CVE-2020-1934 Signed-off-by: Trevor Gamblin --- .../apache2/{apache2_2.4.41.bb => apache2_2.4.43.bb} | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) rename meta-webserver/recipes-httpd/apache2/{apache2_2.4.41.bb => apache2_2.4.43.bb} (97%) diff --git a/meta-webserver/recipes-httpd/apache2/apache2_2.4.41.bb b/meta-webserver/recipes-httpd/apache2/apache2_2.4.43.bb similarity index 97% rename from meta-webserver/recipes-httpd/apache2/apache2_2.4.41.bb rename to meta-webserver/recipes-httpd/apache2/apache2_2.4.43.bb index a34734c20..2fff153fc 100644 --- a/meta-webserver/recipes-httpd/apache2/apache2_2.4.41.bb +++ b/meta-webserver/recipes-httpd/apache2/apache2_2.4.43.bb @@ -24,9 +24,9 @@ SRC_URI_append_class-target = " \ file://volatiles.04_apache2 \ " -LIC_FILES_CHKSUM = "file://LICENSE;md5=d52d0fd0bc788f068e647116c01ddfcd" -SRC_URI[md5sum] = "dfc674f8f454e3bc2d4ccd73ad3b5f1e" -SRC_URI[sha256sum] = "133d48298fe5315ae9366a0ec66282fa4040efa5d566174481077ade7d18ea40" +LIC_FILES_CHKSUM = "file://LICENSE;md5=bddeddfac80b2c9a882241d008bb41c3" +SRC_URI[md5sum] = "791c986b1e70fe61eb44060aacc89a64" +SRC_URI[sha256sum] = "a497652ab3fc81318cdc2a203090a999150d86461acff97c1065dc910fe10f43" S = "${WORKDIR}/httpd-${PV}" -- 2.17.1