me
/
guix
Archived
1
0
Fork 0
Code

gnu: Apache httpd: Update to 2.4.50 [Fixes CVE-2021-{41524,41773}]. 

This update includes an important fix for an actively exploited path traversal
vulnerability (CVE-2021-41773), which allows attackers to access files outside
the "document root":

https://httpd.apache.org/security/vulnerabilities_24.html

* gnu/packages/web.scm (httpd): Update to 2.4.50.
master
Leo Famulari 2021-10-05 20:50:19 -04:00
parent b9af3a6e04
commit f868ed2a75
No known key found for this signature in database
GPG Key ID: 2646FA30BACA7F08
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
gnu/packages/web.scm
View File

@ -252,14 +252,14 @@
(define-public httpd
(package
(name "httpd")
(version "2.4.49")
(version "2.4.50")
(source (origin
(method url-fetch)
(uri (string-append "mirror://apache/httpd/httpd-"
version ".tar.bz2"))
(sha256
(base32
"0fqkfjcpdd40ji2279wfxh5hddb5jdxlnpjr0sbhva8fi7b6bfb5"))))
"03w9nc7v0rqljxazikbrlgbw7lq72i8n7n9ynlp6h1n6f301fa3a"))))
(build-system gnu-build-system)
(native-inputs `(("pcre" ,pcre "bin"))) ;for 'pcre-config'
(inputs `(("apr" ,apr)