Projetos/rpi-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

package/lighttpd: security bump to 1.4.81

Browse Source 
News:
- https://www.lighttpd.net/2025/8/13/1.4.80/
  - detect and issue error trace for HTTP/2 MadeYouReset VU#767506 CVE-2025-8671
- https://www.lighttpd.net/2025/8/17/1.4.81/
  - security: fix to reject disallowed trailers

See Changes from 1.4.79:

[build] remove references to libev; no longer used

So drop here as well.

Signed-off-by: Thomas Devoogdt <thomas@devoogdt.com>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
This commit is contained in:
Thomas Devoogdt
2025-08-28 09:14:02 +02:00
committed by Arnout Vandecappelle
parent 2dba44f168
commit 0d643a8636
4 changed files with 13 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
Config.in.legacy
View File

@@ -144,6 +144,14 @@ endif
###############################################################################
comment "Legacy options removed in 2025.11"
config BR2_PACKAGE_LIGHTTPD_LIBEV
bool "lighttpd removed libev support"
select BR2_LEGACY
help
Lighttpd 1.4.80 removed optional libev support.
comment "Legacy options removed in 2025.08"
config BR2_PACKAGE_LIBSVGTINY

6
package/lighttpd/Config.in
View File

@@ -67,12 +67,6 @@ config BR2_PACKAGE_LIGHTTPD_LDAP
comment "ldap support needs a toolchain w/ wchar"
depends on !BR2_USE_WCHAR
config BR2_PACKAGE_LIGHTTPD_LIBEV
bool "libev support"
select BR2_PACKAGE_LIBEV
help
Enable libev support for lighttpd fdevent handlers.
config BR2_PACKAGE_LIGHTTPD_LUA
bool "lua support"
depends on BR2_PACKAGE_LUA

8
package/lighttpd/lighttpd.hash
View File

@@ -1,6 +1,6 @@
# From https://download.lighttpd.net/lighttpd/releases-1.4.x/lighttpd-1.4.79.sha512sum
sha512 e0f1bb2cfca5e81001ea30d13f088425dfc7acbec924ecddf438eb6326ab3158a61c6c4aaee0b68a90666d1cb987ce94b1f6a48afd92485cc995db5b58265f83 lighttpd-1.4.79.tar.xz
# From https://download.lighttpd.net/lighttpd/releases-1.4.x/lighttpd-1.4.79.sha256sum
sha256 3b29a625b3ad88702d1fea4f5f42bb7d87488f2e4efc977d7f185329ca6084bd lighttpd-1.4.79.tar.xz
# From https://download.lighttpd.net/lighttpd/releases-1.4.x/lighttpd-1.4.81.sha512sum
sha512 10c24b1c1ce1aa1d826a426868223393eb81d7c0fbcc0b4f032b082a14593e0364228a5275e1440ed8782a2e78f0ded7cf72bc6642e5528bc82defcefab9301b lighttpd-1.4.81.tar.xz
# From https://download.lighttpd.net/lighttpd/releases-1.4.x/lighttpd-1.4.81.sha256sum
sha256 d7d42c3fd2fd94b63c915aa7d18f4da3cac5937ddba33e909f81cf50842a5840 lighttpd-1.4.81.tar.xz
# Locally calculated
sha256 5c98cad2fbaf5c5e2562bcbab401a7c557c1bb1bac9914ecc63730925052fb13 COPYING

9
package/lighttpd/lighttpd.mk
View File

@@ -5,7 +5,7 @@
################################################################################
LIGHTTPD_VERSION_MAJOR = 1.4
LIGHTTPD_VERSION = $(LIGHTTPD_VERSION_MAJOR).79
LIGHTTPD_VERSION = $(LIGHTTPD_VERSION_MAJOR).81
LIGHTTPD_SOURCE = lighttpd-$(LIGHTTPD_VERSION).tar.xz
LIGHTTPD_SITE = http://download.lighttpd.net/lighttpd/releases-$(LIGHTTPD_VERSION_MAJOR).x
LIGHTTPD_LICENSE = BSD-3-Clause
@@ -76,13 +76,6 @@ else
LIGHTTPD_CONF_OPTS += -Dwith_ldap=disabled
endif
ifeq ($(BR2_PACKAGE_LIGHTTPD_LIBEV),y)
LIGHTTPD_DEPENDENCIES += libev
LIGHTTPD_CONF_OPTS += -Dwith_libev=enabled
else
LIGHTTPD_CONF_OPTS += -Dwith_libev=disabled
endif
ifeq ($(BR2_PACKAGE_LIGHTTPD_LUA),y)
LIGHTTPD_DEPENDENCIES += lua
LIGHTTPD_CONF_OPTS += -Dwith_lua=true