update to 2.4.66

fixes CVE-2025-66200, CVE-2025-65082, CVE-2025-58098 and CVE-2025-55753
This commit is contained in:
giovanni
2025-12-12 15:26:58 +00:00
parent a5bbd53485
commit 14175b89f4
5 changed files with 4 additions and 32 deletions
+1 -2
View File
@@ -1,9 +1,8 @@
COMMENT= apache HTTP server
V= 2.4.65
V= 2.4.66
DISTNAME= httpd-${V}
PKGNAME= apache-httpd-${V}
REVISION= 3
CATEGORIES= www net
+2 -2
View File
@@ -1,2 +1,2 @@
SHA256 (httpd-2.4.65.tar.gz) = T5KGGlAyXG0QRuutXYFL/w1Baa2ozCZWVfMrfxukvhs=
SIZE (httpd-2.4.65.tar.gz) = 9814591
SHA256 (httpd-2.4.66.tar.gz) = RCGEdjtgk2RxuIqRJ1950kB3M7eqwn40XycOi8McPUk=
SIZE (httpd-2.4.66.tar.gz) = 9828043
@@ -1,14 +0,0 @@
https://github.com/apache/httpd/pull/578
Index: modules/md/md_crypt.c
--- modules/md/md_crypt.c.orig
+++ modules/md/md_crypt.c
@@ -1222,7 +1222,7 @@ const char *md_cert_get_serial_number(const md_cert_t
serial = BN_bn2hex(bn);
s = apr_pstrdup(p, serial);
OPENSSL_free((void*)serial);
- OPENSSL_free((void*)bn);
+ BN_free(bn);
}
return s;
}
@@ -1,14 +0,0 @@
https://github.com/apache/httpd/pull/578
Index: modules/md/md_ocsp.c
--- modules/md/md_ocsp.c.orig
+++ modules/md/md_ocsp.c
@@ -531,7 +531,7 @@ static const char *certid_summary(const OCSP_CERTID *c
bn = ASN1_INTEGER_to_BN(aserial, NULL);
s = BN_bn2hex(bn);
serial = apr_pstrdup(p, s);
- OPENSSL_free((void*)bn);
+ BN_free(bn);
OPENSSL_free((void*)s);
}
return apr_psprintf(p, "certid[der=%s, issuer=%s, key=%s, serial=%s]",
+1
View File
@@ -418,6 +418,7 @@ share/doc/apache2/images/caching_fig1.tr.png
share/doc/apache2/images/custom_errordocs.png
share/doc/apache2/images/down.gif
share/doc/apache2/images/favicon.ico
share/doc/apache2/images/favicon.png
share/doc/apache2/images/feather.gif
share/doc/apache2/images/feather.png
share/doc/apache2/images/filter_arch.png