From 6054ad0b7a3cf8a6853bdedfdbf973742af58fea Mon Sep 17 00:00:00 2001 From: Michael Opdenacker Date: Fri, 22 Aug 2025 14:25:40 +0000 Subject: [PATCH] lighttpd: upgrade 1.4.79 -> 1.4.81 Remove "libev" configuration option, no longer in use since 1.4.80 Upstream changes 1.4.81: - security: fix to reject disallowed trailers 1.4.80: - detect and issue error trace for HTTP/2 MadeYouReset VU#767506 CVE-2025-8671 - stricter HTTP request/response header, trailer, and chunked validation/parsing - support HTTP response trailers - support HTTP request trailers merge to headers (if not streaming request body) - bug fixes Signed-off-by: Michael Opdenacker Signed-off-by: Mathieu Dubois-Briand --- .../lighttpd/{lighttpd_1.4.79.bb => lighttpd_1.4.81.bb} | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) rename meta/recipes-extended/lighttpd/{lighttpd_1.4.79.bb => lighttpd_1.4.81.bb} (95%) diff --git a/meta/recipes-extended/lighttpd/lighttpd_1.4.79.bb b/meta/recipes-extended/lighttpd/lighttpd_1.4.81.bb similarity index 95% rename from meta/recipes-extended/lighttpd/lighttpd_1.4.79.bb rename to meta/recipes-extended/lighttpd/lighttpd_1.4.81.bb index cd6790dff9..40abef784b 100644 --- a/meta/recipes-extended/lighttpd/lighttpd_1.4.79.bb +++ b/meta/recipes-extended/lighttpd/lighttpd_1.4.81.bb @@ -16,7 +16,7 @@ SRC_URI = "http://download.lighttpd.net/lighttpd/releases-1.4.x/lighttpd-${PV}.t file://lighttpd \ " -SRC_URI[sha256sum] = "3b29a625b3ad88702d1fea4f5f42bb7d87488f2e4efc977d7f185329ca6084bd" +SRC_URI[sha256sum] = "d7d42c3fd2fd94b63c915aa7d18f4da3cac5937ddba33e909f81cf50842a5840" DEPENDS = "virtual/crypt" @@ -24,7 +24,6 @@ PACKAGECONFIG ??= "openssl pcre zlib \ ${@bb.utils.contains('DISTRO_FEATURES', 'xattr', 'attr', '', d)} \ " -PACKAGECONFIG[libev] = "-Dwith_libev=enabled,-Dwith_libev=disabled,libev" PACKAGECONFIG[mysql] = "-Dwith_mysql=enabled,-Dwith_mysql=disabled,mariadb" PACKAGECONFIG[ldap] = "-Dwith_ldap=enabled,-Dwith_ldap=disabled,openldap" PACKAGECONFIG[attr] = "-Dwith_xattr=true,-Dwith_xattr=false,attr" -- 2.47.3