pyrox.dev
apacheHttpd: 2.4.58 -> 2.4.59
Fixes CVE-2024-27316, CVE-2024-27316 and CVE-2023-38709
Changes:
https://downloads.apache.org/httpd/CHANGES_2.4.59
+2
-17
pkgs/servers/http/apache-httpd/2.4.nix
+2
-17
pkgs/servers/http/apache-httpd/2.4.nix
···
1
1
{ lib, stdenv, fetchurl, perl, zlib, apr, aprutil, pcre2, libiconv, lynx, which, libxcrypt
2
-
, fetchpatch
3
2
, nixosTests
4
3
, proxySupport ? true
5
4
, sslSupport ? true, openssl
···
13
12
14
13
stdenv.mkDerivation rec {
15
14
pname = "apache-httpd";
16
-
version = "2.4.58";
15
+
version = "2.4.59";
17
16
18
17
src = fetchurl {
19
18
url = "mirror://apache/httpd/httpd-${version}.tar.bz2";
20
-
sha256 = "sha256-+hbXKgeCEKVMR91b7y+Lm4oB2UkJpRRTlWs+xkQupMU=";
19
+
hash = "sha256-7FFQHsSAKE/1L2NyWBNdMzIwp9Ipw6+m9sL5BA4yEyM=";
21
20
};
22
21
23
22
# FIXME: -dev depends on -doc
···
35
34
lib.optional libxml2Support libxml2 ++
36
35
lib.optional http2Support nghttp2 ++
37
36
lib.optional stdenv.isDarwin libiconv;
38
-
39
-
patches = lib.optionals modTlsSupport [
40
-
(fetchpatch {
41
-
name = "compat-with-rustls-ffi-0.10.0.patch";
42
-
url = "https://github.com/apache/httpd/commit/918620a183d843fb393ed939423a25d42c1044ec.patch";
43
-
hash = "sha256-YZi3t++hjM0skisax2xuh9DifZVZjCjVn6XQr6QKGEs=";
44
-
})
45
-
] ++ lib.optionals libxml2Support [
46
-
(fetchpatch {
47
-
name = "compat-with-libxml2-2.12.patch";
48
-
url = "https://github.com/apache/httpd/commit/27a68e54b7c6d2ae80dca396fd2727852897dab1.patch";
49
-
hash = "sha256-k2EqCaDkckrXLsHnjP4h+b1brTnde4pUyrbOiPFB6qk=";
50
-
})
51
-
];
52
37
53
38
postPatch = ''
54
39
sed -i config.layout -e "s|installbuilddir:.*|installbuilddir: $dev/share/build|"