From: Michael Opdenacker Date: Fri, 22 Aug 2025 14:25:40 +0000 (+0000) Subject: lighttpd: upgrade 1.4.79 -> 1.4.81 X-Git-Tag: uninative-5.0~473 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=6054ad0b7a3cf8a6853bdedfdbf973742af58fea;p=thirdparty%2Fopenembedded%2Fopenembedded-core.git lighttpd: upgrade 1.4.79 -> 1.4.81 Remove "libev" configuration option, no longer in use since 1.4.80 Upstream changes 1.4.81: - security: fix to reject disallowed trailers 1.4.80: - detect and issue error trace for HTTP/2 MadeYouReset VU#767506 CVE-2025-8671 - stricter HTTP request/response header, trailer, and chunked validation/parsing - support HTTP response trailers - support HTTP request trailers merge to headers (if not streaming request body) - bug fixes Signed-off-by: Michael Opdenacker Signed-off-by: Mathieu Dubois-Briand --- diff --git a/meta/recipes-extended/lighttpd/lighttpd_1.4.79.bb b/meta/recipes-extended/lighttpd/lighttpd_1.4.81.bb similarity index 95% rename from meta/recipes-extended/lighttpd/lighttpd_1.4.79.bb rename to meta/recipes-extended/lighttpd/lighttpd_1.4.81.bb index cd6790dff93..40abef784b0 100644 --- a/meta/recipes-extended/lighttpd/lighttpd_1.4.79.bb +++ b/meta/recipes-extended/lighttpd/lighttpd_1.4.81.bb @@ -16,7 +16,7 @@ SRC_URI = "http://download.lighttpd.net/lighttpd/releases-1.4.x/lighttpd-${PV}.t file://lighttpd \ " -SRC_URI[sha256sum] = "3b29a625b3ad88702d1fea4f5f42bb7d87488f2e4efc977d7f185329ca6084bd" +SRC_URI[sha256sum] = "d7d42c3fd2fd94b63c915aa7d18f4da3cac5937ddba33e909f81cf50842a5840" DEPENDS = "virtual/crypt" @@ -24,7 +24,6 @@ PACKAGECONFIG ??= "openssl pcre zlib \ ${@bb.utils.contains('DISTRO_FEATURES', 'xattr', 'attr', '', d)} \ " -PACKAGECONFIG[libev] = "-Dwith_libev=enabled,-Dwith_libev=disabled,libev" PACKAGECONFIG[mysql] = "-Dwith_mysql=enabled,-Dwith_mysql=disabled,mariadb" PACKAGECONFIG[ldap] = "-Dwith_ldap=enabled,-Dwith_ldap=disabled,openldap" PACKAGECONFIG[attr] = "-Dwith_xattr=true,-Dwith_xattr=false,attr"