me
/
guix
Archived
1
0
Fork 0
Code

gnu: httpd: Update to 2.4.57 [security fixes]. 

Fixes CVE-2023-27522, CVE-2023-25690, CVE-2022-37436, CVE-2022-36760,
CVE-2006-20001, CVE-2022-31813, CVE-2022-30556, CVE-2022-30522,
CVE-2022-29404, CVE-2022-28615, CVE-2022-28614, CVE-2022-28330,
CVE-2022-26377, CVE-2022-23943, CVE-2022-22721, CVE-2022-22720,
and CVE-2022-22719.

* gnu/packages/web.scm (httpd): Update to 2.4.57.
(httpd/pinned): New variable.
* gnu/packages/gnome.scm (libsoup-minimal): Replace httpd with httpd/pinned.
master
Leo Famulari 2023-04-23 12:42:02 -04:00
parent 85c137adde
commit d3e91a83b6
No known key found for this signature in database
GPG Key ID: 2646FA30BACA7F08
2 changed files with 18 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
gnu/packages/gnome.scm
View File

@ -5027,7 +5027,7 @@ as OpenStreetMap, OpenCycleMap, OpenAerialMap and Maps.")
vala vala
curl curl
gnutls ;for 'certtool' gnutls ;for 'certtool'
httpd)) httpd/pinned))
(propagated-inputs (propagated-inputs
;; libsoup-3.0.pc refers to all of these (except where otherwise noted) ;; libsoup-3.0.pc refers to all of these (except where otherwise noted)
(list brotli (list brotli

19
gnu/packages/web.scm
View File

@ -273,14 +273,14 @@
(define-public httpd (define-public httpd
(package (package
(name "httpd") (name "httpd")
(version "2.4.52") (version "2.4.57")
(source (origin (source (origin
(method url-fetch) (method url-fetch)
(uri (string-append "mirror://apache/httpd/httpd-" (uri (string-append "mirror://apache/httpd/httpd-"
version ".tar.bz2")) version ".tar.bz2"))
(sha256 (sha256
(base32 (base32
"1jgmfbazc2n9dnl7axhahwppyq25bvbvwx0lqplq76by97fgf9q1")))) "0ajdz5f2w9nbmqydip2mv9m4xlnc4swmw7mqzgnrbq4mxr5bik6v"))))
(build-system gnu-build-system) (build-system gnu-build-system)
(native-inputs (list `(,pcre "bin"))) ;for 'pcre-config' (native-inputs (list `(,pcre "bin"))) ;for 'pcre-config'
(inputs (list apr apr-util openssl perl)) ; needed to run bin/apxs (inputs (list apr apr-util openssl perl)) ; needed to run bin/apxs
@ -305,6 +305,21 @@ and its related documentation.")
(license license:asl2.0) (license license:asl2.0)
(home-page "https://httpd.apache.org/"))) (home-page "https://httpd.apache.org/")))
;; A package variant that may be out of date and vulnerable. Only for use in
;; test suites and should never be referred to by a built package.
(define-public httpd/pinned
(hidden-package
(package
(inherit httpd)
(version "2.4.52")
(source (origin
(method url-fetch)
(uri (string-append "mirror://apache/httpd/httpd-"
version ".tar.bz2"))
(sha256
(base32
"1jgmfbazc2n9dnl7axhahwppyq25bvbvwx0lqplq76by97fgf9q1")))))))
(define-public mod-wsgi (define-public mod-wsgi
(package (package
(name "mod-wsgi") (name "mod-wsgi")