Files
buildroot/package
Peter Korsgaard e8a15fd693 apache: security bump to version 2.4.26
Fixes the following security issues:

CVE-2017-3167: In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26,
use of the ap_get_basic_auth_pw() by third-party modules outside of the
authentication phase may lead to authentication requirements being bypassed.

CVE-2017-3169: In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26,
mod_ssl may dereference a NULL pointer when third-party modules call
ap_hook_process_connection() during an HTTP request to an HTTPS port.

CVE-2017-7659: A maliciously constructed HTTP/2 request could cause
mod_http2 to dereference a NULL pointer and crash the server process.

CVE-2017-7668: The HTTP strict parsing changes added in Apache httpd 2.2.32
and 2.4.24 introduced a bug in token list parsing, which allows
ap_find_token() to search past the end of its input string.  By maliciously
crafting a sequence of request headers, an attacker may be able to cause a
segmentation fault, or to force ap_find_token() to return an incorrect
value.

CVE-2017-7679: In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26,
mod_mime can read one byte past the end of a buffer when sending a malicious
Content-Type response header.

While we're at it, use the upstream sha256 checksum instead of sha1.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2017-06-20 23:24:33 +02:00
..
…
…
2017-06-02 13:33:39 +02:00
2017-06-11 14:29:28 +02:00
2017-06-20 22:13:15 +02:00
2017-06-11 14:29:29 +02:00
…
…
…
…
…
…
2017-06-19 21:48:58 +02:00
…
2017-06-08 21:46:26 +02:00
…
…
…
2017-06-01 22:28:14 +02:00
…
…
2017-06-01 22:28:14 +02:00
…
…
2017-06-17 15:38:25 +02:00
2017-06-01 22:28:14 +02:00
2017-06-06 22:48:42 +02:00
…
2017-06-05 15:51:04 +02:00
…
…
…
…
…
…
…
…
…
…
…
…
2017-06-11 14:29:28 +02:00
2017-06-01 22:28:14 +02:00
2017-06-06 22:34:11 +02:00
2017-06-01 22:28:14 +02:00
…
2017-06-05 14:52:18 +02:00
2017-06-11 14:29:28 +02:00
…
…
2017-05-31 23:04:53 +02:00
…
…
…
…
…
…
2017-06-11 14:29:28 +02:00
…
…
…
…
…
…
…
…
2017-06-08 21:29:02 +02:00
…
…
…
2017-06-19 21:47:05 +02:00
…
2017-06-04 09:49:25 +02:00
2017-06-15 22:37:40 +02:00
2017-06-04 09:47:16 +02:00
…
…
…
…
…
…
2017-06-05 11:13:20 +02:00
2017-05-31 23:05:06 +02:00
2017-06-05 11:14:56 +02:00
…
…
2017-06-05 11:15:21 +02:00
…
2017-06-11 14:29:28 +02:00
…
2017-06-06 22:15:36 +02:00
2017-06-05 15:55:33 +02:00
…
2017-06-10 22:59:55 +02:00
…
…
…
…
…
…
…
…
…
…
2017-06-20 23:13:25 +02:00
2017-06-11 14:29:29 +02:00
…
…
…
…
…
2017-06-11 14:29:28 +02:00
2017-06-04 09:53:47 +02:00
2017-06-11 14:29:28 +02:00
2017-06-04 09:38:01 +02:00
2017-06-05 14:36:19 +02:00
2017-06-11 14:29:28 +02:00
2017-06-15 10:31:40 +02:00
2017-06-15 22:05:35 +02:00
2017-06-15 22:05:35 +02:00
2017-06-11 14:29:29 +02:00
2017-06-11 14:29:29 +02:00
2017-06-11 14:29:29 +02:00
2017-06-07 21:57:33 +02:00
2017-06-07 22:03:11 +02:00
2017-06-20 22:13:43 +02:00
2017-06-11 14:29:29 +02:00
2017-06-11 15:57:16 +02:00
…
…
…
…
…
2017-06-11 18:37:54 +02:00
2017-06-01 22:28:14 +02:00
2017-06-11 14:29:29 +02:00
…
2017-05-31 23:27:15 +02:00
…
…
…
…
…
…
…
…
…
…
…
…
2017-06-12 10:09:38 +02:00
…
2017-06-11 14:29:29 +02:00
2017-06-01 22:28:14 +02:00
2017-06-01 22:28:14 +02:00
…
…
…
…
…
…
…
…
2017-06-02 13:32:44 +02:00
…
…
…
…
…
…
…
2017-06-01 22:28:14 +02:00
…
…
…
…
…
…
…
…
…
2017-06-05 14:36:52 +02:00
2017-06-11 14:29:29 +02:00
…
…
…
…
…
…
2017-06-06 21:37:11 +02:00
2017-06-10 23:03:52 +02:00
2017-05-31 23:34:28 +02:00
2017-05-31 23:35:39 +02:00
2017-05-31 23:35:42 +02:00
…
…
…
2017-06-11 14:29:29 +02:00
…
…
2017-06-12 23:46:57 +02:00
…
…
…
2017-06-06 22:58:35 +02:00
2017-06-01 22:28:14 +02:00
2017-06-06 22:47:05 +02:00
…
…
…
…
…
…
…
…
2017-05-31 23:13:05 +02:00
2017-05-31 23:16:32 +02:00
…
…
…
2017-06-02 13:32:25 +02:00
…
2017-06-02 13:31:05 +02:00
2017-06-11 14:29:29 +02:00
…
2017-06-20 22:13:03 +02:00
…
…
…
…
…
…
2017-06-02 13:30:17 +02:00
2017-06-02 13:30:49 +02:00
2017-06-10 23:02:53 +02:00
…
…
…
…
2017-06-12 10:10:11 +02:00
…
2017-06-11 14:29:29 +02:00
…
…
…
2017-06-20 21:25:39 +02:00
…
…
2017-06-03 17:07:13 +02:00
…
…
…
…
…
…
…
…
…
2017-06-20 22:30:57 +02:00
…
…
2017-06-01 22:28:14 +02:00
…
…
…
…
…
…
…
…
…
…
…
…
…
2017-06-20 21:54:27 +02:00