Browse code

httpd: Version upgrade to v2.4.59

This commit also fixes CVE-2024-27316

Change-Id: I2f407e9b8129ba7ae17226b8e7643cf5e223ddfc
Reviewed-on: http://photon-jenkins.eng.vmware.com:8082/c/photon/+/23684
Tested-by: gerrit-photon <photon-checkins@vmware.com>
Reviewed-by: Shreenidhi Shedi <shreenidhi.shedi@broadcom.com>

Nitesh authored on 2024/04/05 16:52:19
Showing 7 changed files
... ...
@@ -1,6 +1,6 @@
1 1
 Name:           apparmor
2 2
 Version:        3.1.2
3
-Release:        11%{?dist}
3
+Release:        12%{?dist}
4 4
 Summary:        AppArmor is an effective and easy-to-use Linux application security system.
5 5
 License:        GNU LGPL v2.1
6 6
 URL:            https://launchpad.net/apparmor
... ...
@@ -335,6 +335,8 @@ rm -rf %{buildroot}
335 335
 %exclude %{perl_archlib}/perllocal.pod
336 336
 
337 337
 %changelog
338
+* Fri Apr 05 2024 Nitesh Kumar <nitesh-nk.kumar@broadcom.com> 3.1.2-12
339
+- Version Bump up to consume httpd v2.4.59
338 340
 * Wed Mar 13 2024 Shreenidhi Shedi <shreenidhi.shedi@broadcom.com> 3.1.2-11
339 341
 - sbin.syslog-ng profile fix
340 342
 * Wed Mar 06 2024 Ashwin Dayanand Kamat <ashwin.kamat@broadcom.com> 3.1.2-10
... ...
@@ -1,7 +1,7 @@
1 1
 Summary:        Apache Tomcat Connector
2 2
 Name:           httpd-mod_jk
3 3
 Version:        1.2.48
4
-Release:        10%{?dist}
4
+Release:        11%{?dist}
5 5
 License:        Apache
6 6
 URL:            http://tomcat.apache.org/connectors-doc
7 7
 Group:          Applications/System
... ...
@@ -47,6 +47,8 @@ make -k check %{?_smp_mflags} |& tee %{_specdir}/%{name}-check-log || %{nocheck}
47 47
 %config(noreplace) %{_sysconfdir}/httpd/conf/workers.properties
48 48
 
49 49
 %changelog
50
+* Fri Apr 05 2024 Nitesh Kumar <nitesh-nk.kumar@broadcom.com> 1.2.48-11
51
+- Version Bump up to consume httpd v2.4.59
50 52
 * Wed Mar 06 2024 Ashwin Dayanand Kamat <ashwin.kamat@broadcom.com> 1.2.48-10
51 53
 - Bump version as a part of apr upgrade
52 54
 * Mon Oct 30 2023 Nitesh Kumar <kunitesh@vmware.com> 1.2.48-9
53 55
deleted file mode 100644
... ...
@@ -1,278 +0,0 @@
1
-Submitted By:            Pierre Labastie <pierre dot labastie at neuf dot fr>
2
-Date:                    2022-03-19
3
-Initial Package Version: 2.4.53
4
-Comment:                 This patch has been done initially by
5
-                         Armin K. <krejzi at email dot com> on
6
-                         2013-04-17, for version 2.4.4, and rediffed
7
-                         several times since then by various persons:
8
-                         Fernando de Oliveira for 2.4.10, thomas for
9
-                         2.4.34, renodr for 2.4.52, bdubbs for 2.4.58.
10
-                         The present version removes the ownership changes
11
-                         at install time, and removes the -p flag from
12
-                         cp commands at install time, so that ownership
13
-                         is set to that of the installing user.
14
-Upstream Status:         Not applicable
15
-Origin:                  Self
16
-Description:             Patches the build system to install stuff into BLFS
17
-                         specific paths, and adjusts proper permissions
18
-                         on installed files and directories.
19
-
20
-diff -Naur a/config.layout b/config.layout
21
-+++ b/config.layout	2022-03-19 10:58:09.199098421 +0100
22
-@@ -9,6 +9,30 @@
23
- ##    (This may become a configurable parameter at some point.)
24
- ##
25
- 
26
-+<Layout BLFS>
27
-+    prefix:       
28
-+    exec_prefix:  ${prefix}/usr
29
-+    bindir:       ${exec_prefix}/bin
30
-+    sbindir:      ${exec_prefix}/sbin
31
-+    libdir:       ${exec_prefix}/lib
32
-+    libexecdir:   ${exec_prefix}/lib/httpd/modules
33
-+    mandir:       ${exec_prefix}/share/man
34
-+    sysconfdir:   ${prefix}/etc/httpd
35
-+    datadir:      ${exec_prefix}/share/httpd
36
-+    iconsdir:     ${datadir}/icons
37
-+    htdocsdir:    ${prefix}/srv/www
38
-+    manualdir:    ${datadir}/manual
39
-+    cgidir:       ${exec_prefix}/lib/httpd/cgi-bin
40
-+    includedir:   ${exec_prefix}/include/httpd
41
-+    localstatedir: ${prefix}/var/lock/httpd
42
-+    runtimedir:   ${prefix}/run/httpd
43
-+    logfiledir:   ${prefix}/var/log/httpd
44
-+    proxycachedir: ${prefix}/var/cache/httpd/proxy
45
-+    infodir:      ${exec_prefix}/share/info
46
-+    installbuilddir: ${datadir}/build
47
-+    errordir:     ${datadir}/error
48
-+</Layout>
49
-+
50
- #   Classical Apache path layout.
51
- <Layout Apache>
52
-     prefix:        /usr/local/apache2
53
- 
54
-diff -Naur a/configure.in b/configure.in
55
-+++ b/configure.in	2022-03-19 10:58:09.202098385 +0100
56
-@@ -901,11 +901,11 @@
57
- echo $MODLIST | $AWK -f $srcdir/build/build-modules-c.awk > modules.c
58
- 
59
- APR_EXPAND_VAR(ap_prefix, $prefix)
60
--AC_DEFINE_UNQUOTED(HTTPD_ROOT, "${ap_prefix}",
61
-+AC_DEFINE_UNQUOTED(HTTPD_ROOT, "/etc/httpd",
62
- 	[Root directory of the Apache install area])
63
--AC_DEFINE_UNQUOTED(SERVER_CONFIG_FILE, "${rel_sysconfdir}/${progname}.conf",
64
-+AC_DEFINE_UNQUOTED(SERVER_CONFIG_FILE, "${progname}.conf",
65
- 	[Location of the config file, relative to the Apache root directory])
66
--AC_DEFINE_UNQUOTED(AP_TYPES_CONFIG_FILE, "${rel_sysconfdir}/mime.types",
67
-+AC_DEFINE_UNQUOTED(AP_TYPES_CONFIG_FILE, "mime.types",
68
- 	[Location of the MIME types config file, relative to the Apache root directory])
69
- 
70
- perlbin=`$ac_aux_dir/PrintPath perl`
71
-
72
-diff -Naur a/docs/conf/httpd.conf.in b/docs/conf/httpd.conf.in
73
-+++ b/docs/conf/httpd.conf.in	2022-03-19 10:58:09.203098373 +0100
74
-@@ -28,7 +28,7 @@
75
- # same ServerRoot for multiple httpd daemons, you will need to change at
76
- # least PidFile.
77
- #
78
--ServerRoot "@@ServerRoot@@"
79
-+#ServerRoot "@@ServerRoot@@"
80
- 
81
- #
82
- # Mutex: Allows you to set the mutex mechanism and mutex file directory
83
-@@ -74,8 +74,8 @@
84
- # It is usually good practice to create a dedicated user and group for
85
- # running httpd, as with most system services.
86
- #
87
--User daemon
88
--Group daemon
89
-+User apache
90
-+Group apache
91
- 
92
- </IfModule>
93
- 
94
-@@ -96,7 +96,7 @@
95
- # e-mailed.  This address appears on some server-generated pages, such
96
- # as error documents.  e.g. admin@your-domain.com
97
- #
98
--ServerAdmin you@example.com
99
-+ServerAdmin admin@localhost
100
- 
101
- #
102
- # ServerName gives the name and port that the server uses to identify itself.
103
-@@ -105,7 +105,7 @@
104
- #
105
- # If your host doesn't have a registered DNS name, enter its IP address here.
106
- #
107
--#ServerName www.example.com:@@Port@@
108
-+#ServerName localhost:@@Port@@
109
- 
110
- #
111
- # Deny access to the entirety of your server's filesystem. You must
112
-@@ -181,7 +181,7 @@
113
- # logged here.  If you *do* define an error logfile for a <VirtualHost>
114
- # container, that host's errors will be logged there and not here.
115
- #
116
--ErrorLog "@rel_logfiledir@/error_log"
117
-+ErrorLog "@rel_logfiledir@/error.log"
118
- 
119
- #
120
- # LogLevel: Control the number of messages logged to the error_log.
121
-@@ -210,13 +210,13 @@
122
-     # define per-<VirtualHost> access logfiles, transactions will be
123
-     # logged therein and *not* in this file.
124
-     #
125
--    CustomLog "@rel_logfiledir@/access_log" common
126
-+    CustomLog "@rel_logfiledir@/access.log" common
127
- 
128
-     #
129
-     # If you prefer a logfile with access, agent, and referer information
130
-     # (Combined Logfile Format) you can use the following directive.
131
-     #
132
--    #CustomLog "@rel_logfiledir@/access_log" combined
133
-+    #CustomLog "@rel_logfiledir@/access.log" combined
134
- </IfModule>
135
- 
136
- <IfModule alias_module>
137
-diff -Naur a/include/ap_config_layout.h.in b/include/ap_config_layout.h.in
138
-+++ b/include/ap_config_layout.h.in	2022-03-19 10:58:09.203098373 +0100
139
-@@ -60,5 +60,6 @@
140
- #define DEFAULT_REL_LOGFILEDIR "@rel_logfiledir@"
141
- #define DEFAULT_EXP_PROXYCACHEDIR "@exp_proxycachedir@"
142
- #define DEFAULT_REL_PROXYCACHEDIR "@rel_proxycachedir@"
143
-+#define DEFAULT_PIDLOG "/run/httpd/httpd.pid"
144
- 
145
- #endif /* AP_CONFIG_LAYOUT_H */
146
-diff -Naur a/include/httpd.h b/include/httpd.h
147
-+++ b/include/httpd.h	2022-03-19 10:58:09.203098373 +0100
148
-@@ -110,7 +110,7 @@
149
- #define DOCUMENT_LOCATION  HTTPD_ROOT "/docs"
150
- #else
151
- /* Set default for non OS/2 file system */
152
--#define DOCUMENT_LOCATION  HTTPD_ROOT "/htdocs"
153
-+#define DOCUMENT_LOCATION  "/srv/www"
154
- #endif
155
- #endif /* DOCUMENT_LOCATION */
156
- 
157
-diff -Naur a/Makefile.in b/Makefile.in
158
-+++ b/Makefile.in	2022-03-19 11:07:06.441588175 +0100
159
-@@ -121,9 +121,9 @@
160
- 	    done ; \
161
- 	done ; \
162
- 	if test -f "$(builddir)/envvars-std"; then \
163
--	    cp -p envvars-std $(DESTDIR)$(sbindir); \
164
--	    if test ! -f $(DESTDIR)$(sbindir)/envvars; then \
165
--	        cp -p envvars-std $(DESTDIR)$(sbindir)/envvars ; \
166
-+	    install -m644 envvars-std $(DESTDIR)$(installbuilddir); \
167
-+		 if test ! -f $(DESTDIR)$(sysconfdir)/envvars; then \
168
-+		 	install -m644 envvars-std $(DESTDIR)$(sysconfdir)/envvars; \
169
- 	    fi ; \
170
- 	fi
171
- 
172
-@@ -195,7 +195,7 @@
173
- 	    if test -d $(htdocs-srcdir) && test "x$(RSYNC)" != "x" && test -x $(RSYNC) ; then \
174
- 		$(RSYNC) --exclude .svn -rlpt --numeric-ids $(htdocs-srcdir)/ $(DESTDIR)$(htdocsdir)/; \
175
- 	    else \
176
--		test -d $(htdocs-srcdir) && (cd $(htdocs-srcdir) && cp -rp * $(DESTDIR)$(htdocsdir)) ; \
177
-+		test -d $(htdocs-srcdir) && (cd $(htdocs-srcdir) && cp -r * $(DESTDIR)$(htdocsdir)) ; \
178
- 		cd $(DESTDIR)$(htdocsdir) && find . -name ".svn" -type d -print | xargs rm -rf 2>/dev/null || true; \
179
- 	    fi; \
180
- 	fi
181
-@@ -206,7 +206,7 @@
182
-         else \
183
- 	    echo Installing error documents ; \
184
- 	    $(MKINSTALLDIRS) $(DESTDIR)$(errordir) ; \
185
--	    cd $(top_srcdir)/docs/error && cp -rp * $(DESTDIR)$(errordir) ; \
186
-+	    cd $(top_srcdir)/docs/error && cp -r * $(DESTDIR)$(errordir) ; \
187
- 	    test "x$(errordir)" != "x" && cd $(DESTDIR)$(errordir) && find . -name ".svn" -type d -print | xargs rm -rf 2>/dev/null || true; \
188
- 	fi
189
- 
190
-@@ -216,7 +216,7 @@
191
-         else \
192
- 	    echo Installing icons ; \
193
- 	    $(MKINSTALLDIRS) $(DESTDIR)$(iconsdir) ; \
194
--	    cd $(top_srcdir)/docs/icons && cp -rp * $(DESTDIR)$(iconsdir) ; \
195
-+	    cd $(top_srcdir)/docs/icons && cp -r * $(DESTDIR)$(iconsdir) ; \
196
- 	    test "x$(iconsdir)" != "x" && cd $(DESTDIR)$(iconsdir) && find . -name ".svn" -type d -print | xargs rm -rf 2>/dev/null || true; \
197
- 	fi
198
- 
199
-@@ -226,7 +226,7 @@
200
- 	else \
201
- 	   echo Installing CGIs ; \
202
- 	   $(MKINSTALLDIRS) $(DESTDIR)$(cgidir) ; \
203
--	   cd $(top_srcdir)/docs/cgi-examples && cp -rp * $(DESTDIR)$(cgidir) ; \
204
-+	   cd $(top_srcdir)/docs/cgi-examples && cp -r * $(DESTDIR)$(cgidir) ; \
205
- 	   test "x$(cgidir)" != "x" && cd $(DESTDIR)$(cgidir) && find . -name ".svn" -type d -print | xargs rm -rf 2>/dev/null || true; \
206
- 	fi
207
- 
208
-@@ -280,12 +280,12 @@
209
- 	@test -d $(DESTDIR)$(mandir)/man1 || $(MKINSTALLDIRS) $(DESTDIR)$(mandir)/man1
210
- 	@test -d $(DESTDIR)$(mandir)/man8 || $(MKINSTALLDIRS) $(DESTDIR)$(mandir)/man8
211
- 	@test -d $(DESTDIR)$(manualdir)   || $(MKINSTALLDIRS) $(DESTDIR)$(manualdir)
212
--	@cp -p $(top_srcdir)/docs/man/*.1 $(DESTDIR)$(mandir)/man1
213
--	@cp -p $(top_srcdir)/docs/man/*.8 $(DESTDIR)$(mandir)/man8
214
-+	@cp $(top_srcdir)/docs/man/*.1 $(DESTDIR)$(mandir)/man1
215
-+	@cp $(top_srcdir)/docs/man/*.8 $(DESTDIR)$(mandir)/man8
216
- 	@if test "x$(RSYNC)" != "x" && test -x $(RSYNC) ; then \
217
- 	  $(RSYNC) --exclude .svn -rlpt --numeric-ids $(top_srcdir)/docs/manual/ $(DESTDIR)$(manualdir)/; \
218
- 	else \
219
--	  cd $(top_srcdir)/docs/manual && cp -rp * $(DESTDIR)$(manualdir); \
220
-+	  cd $(top_srcdir)/docs/manual && cp -r * $(DESTDIR)$(manualdir); \
221
- 	  cd $(DESTDIR)$(manualdir) && find . -name ".svn" -type d -print | xargs rm -rf 2>/dev/null || true; \
222
- 	fi
223
- 
224
-diff -Naur a/support/apachectl.in b/support/apachectl.in
225
-+++ b/support/apachectl.in	2022-03-19 10:58:09.204098361 +0100
226
-@@ -45,8 +45,8 @@
227
- HTTPD='@exp_sbindir@/@progname@'
228
- #
229
- # pick up any necessary environment variables
230
--if test -f @exp_sbindir@/envvars; then
231
--  . @exp_sbindir@/envvars
232
-+if test -f @exp_sysconfdir@/envvars; then
233
-+  . @exp_sysconfdir@/envvars
234
- fi
235
- #
236
- # a command that outputs a formatted text version of the HTML at the
237
-diff -Naur a/support/Makefile.in b/support/Makefile.in
238
-+++ b/support/Makefile.in	2022-03-19 11:10:11.799345130 +0100
239
-@@ -16,23 +16,23 @@
240
- 	@test -d $(DESTDIR)$(bindir) || $(MKINSTALLDIRS) $(DESTDIR)$(bindir)
241
- 	@test -d $(DESTDIR)$(sbindir) || $(MKINSTALLDIRS) $(DESTDIR)$(sbindir)
242
- 	@test -d $(DESTDIR)$(libexecdir) || $(MKINSTALLDIRS) $(DESTDIR)$(libexecdir)
243
--	@cp -p $(top_builddir)/server/httpd.exp $(DESTDIR)$(libexecdir)
244
-+	@test -d $(DESTDIR)$(sysconfdir) || $(MKINSTALLDIRS) $(DESTDIR)$(sysconfdir)
245
-+	@test -d $(DESTDIR)$(installbuilddir) || $(MKINSTALLDIRS) $(DESTDIR)$(installbuilddir)
246
-+	@install -m644 $(top_builddir)/server/httpd.exp $(DESTDIR)$(libexecdir)
247
- 	@for i in apxs dbmmanage; do \
248
- 	    if test -f "$(builddir)/$$i"; then \
249
--	        cp -p $$i $(DESTDIR)$(bindir); \
250
--	        chmod 755 $(DESTDIR)$(bindir)/$$i; \
251
-+	        install -m755 $$i $(DESTDIR)$(bindir);\
252
- 	    fi ; \
253
- 	done
254
- 	@for i in apachectl; do \
255
- 	    if test -f "$(builddir)/$$i"; then \
256
--	        cp -p $$i $(DESTDIR)$(sbindir); \
257
--	        chmod 755 $(DESTDIR)$(sbindir)/$$i; \
258
-+	        install -m755 $$i $(DESTDIR)$(sbindir);\
259
- 	    fi ; \
260
- 	done
261
- 	@if test -f "$(builddir)/envvars-std"; then \
262
--	    cp -p envvars-std $(DESTDIR)$(sbindir); \
263
--	    if test ! -f $(DESTDIR)$(sbindir)/envvars; then \
264
--	        cp -p envvars-std $(DESTDIR)$(sbindir)/envvars ; \
265
-+	    install -m644 envvars-std $(DESTDIR)$(installbuilddir); \
266
-+		 if test ! -f $(DESTDIR)$(sysconfdir)/envvars; then \
267
-+		 	install -m644 envvars-std $(DESTDIR)$(sysconfdir)/envvars; \
268
- 	    fi ; \
269
- 	fi
270
- 
271 1
new file mode 100644
... ...
@@ -0,0 +1,278 @@
0
+Submitted By:            Pierre Labastie <pierre dot labastie at neuf dot fr>
1
+Date:                    2022-03-19
2
+Initial Package Version: 2.4.53
3
+Comment:                 This patch has been done initially by
4
+                         Armin K. <krejzi at email dot com> on
5
+                         2013-04-17, for version 2.4.4, and rediffed
6
+                         several times since then by various persons:
7
+                         Fernando de Oliveira for 2.4.10, thomas for
8
+                         2.4.34, renodr for 2.4.52, bdubbs for 2.4.58.
9
+                         The present version removes the ownership changes
10
+                         at install time, and removes the -p flag from
11
+                         cp commands at install time, so that ownership
12
+                         is set to that of the installing user.
13
+Upstream Status:         Not applicable
14
+Origin:                  Self
15
+Description:             Patches the build system to install stuff into BLFS
16
+                         specific paths, and adjusts proper permissions
17
+                         on installed files and directories.
18
+
19
+diff -Naur a/config.layout b/config.layout
20
+--- a/config.layout	2020-02-21 01:39:22.000000000 +0100
21
+@@ -9,6 +9,30 @@
22
+ ##    (This may become a configurable parameter at some point.)
23
+ ##
24
+ 
25
++<Layout BLFS>
26
++    prefix:       
27
++    exec_prefix:  ${prefix}/usr
28
++    bindir:       ${exec_prefix}/bin
29
++    sbindir:      ${exec_prefix}/sbin
30
++    libdir:       ${exec_prefix}/lib
31
++    libexecdir:   ${exec_prefix}/lib/httpd/modules
32
++    mandir:       ${exec_prefix}/share/man
33
++    sysconfdir:   ${prefix}/etc/httpd
34
++    datadir:      ${exec_prefix}/share/httpd
35
++    iconsdir:     ${datadir}/icons
36
++    htdocsdir:    ${prefix}/srv/www
37
++    manualdir:    ${datadir}/manual
38
++    cgidir:       ${exec_prefix}/lib/httpd/cgi-bin
39
++    includedir:   ${exec_prefix}/include/httpd
40
++    localstatedir: ${prefix}/var/lock/httpd
41
++    runtimedir:   ${prefix}/run/httpd
42
++    logfiledir:   ${prefix}/var/log/httpd
43
++    proxycachedir: ${prefix}/var/cache/httpd/proxy
44
++    infodir:      ${exec_prefix}/share/info
45
++    installbuilddir: ${datadir}/build
46
++    errordir:     ${datadir}/error
47
++</Layout>
48
++
49
+ #   Classical Apache path layout.
50
+ <Layout Apache>
51
+     prefix:        /usr/local/apache2
52
+ 
53
+diff -Naur a/configure.in b/configure.in
54
+--- a/configure.in	2022-02-24 23:18:42.000000000 +0100
55
+@@ -901,11 +901,11 @@
56
+ echo $MODLIST | $AWK -f $srcdir/build/build-modules-c.awk > modules.c
57
+ 
58
+ APR_EXPAND_VAR(ap_prefix, $prefix)
59
+-AC_DEFINE_UNQUOTED(HTTPD_ROOT, "${ap_prefix}",
60
++AC_DEFINE_UNQUOTED(HTTPD_ROOT, "/etc/httpd",
61
+ 	[Root directory of the Apache install area])
62
+-AC_DEFINE_UNQUOTED(SERVER_CONFIG_FILE, "${rel_sysconfdir}/${progname}.conf",
63
++AC_DEFINE_UNQUOTED(SERVER_CONFIG_FILE, "${progname}.conf",
64
+ 	[Location of the config file, relative to the Apache root directory])
65
+-AC_DEFINE_UNQUOTED(AP_TYPES_CONFIG_FILE, "${rel_sysconfdir}/mime.types",
66
++AC_DEFINE_UNQUOTED(AP_TYPES_CONFIG_FILE, "mime.types",
67
+ 	[Location of the MIME types config file, relative to the Apache root directory])
68
+ 
69
+ perlbin=`$ac_aux_dir/PrintPath perl`
70
+
71
+diff -Naur a/docs/conf/httpd.conf.in b/docs/conf/httpd.conf.in
72
+--- a/docs/conf/httpd.conf.in	2016-08-17 01:12:07.000000000 +0200
73
+@@ -28,7 +28,7 @@
74
+ # same ServerRoot for multiple httpd daemons, you will need to change at
75
+ # least PidFile.
76
+ #
77
+-ServerRoot "@@ServerRoot@@"
78
++#ServerRoot "@@ServerRoot@@"
79
+ 
80
+ #
81
+ # Mutex: Allows you to set the mutex mechanism and mutex file directory
82
+@@ -74,8 +74,8 @@
83
+ # It is usually good practice to create a dedicated user and group for
84
+ # running httpd, as with most system services.
85
+ #
86
+-User daemon
87
+-Group daemon
88
++User apache
89
++Group apache
90
+ 
91
+ </IfModule>
92
+ 
93
+@@ -96,7 +96,7 @@
94
+ # e-mailed.  This address appears on some server-generated pages, such
95
+ # as error documents.  e.g. admin@your-domain.com
96
+ #
97
+-ServerAdmin you@example.com
98
++ServerAdmin admin@localhost
99
+ 
100
+ #
101
+ # ServerName gives the name and port that the server uses to identify itself.
102
+@@ -105,7 +105,7 @@
103
+ #
104
+ # If your host doesn't have a registered DNS name, enter its IP address here.
105
+ #
106
+-#ServerName www.example.com:@@Port@@
107
++#ServerName localhost:@@Port@@
108
+ 
109
+ #
110
+ # Deny access to the entirety of your server's filesystem. You must
111
+@@ -181,7 +181,7 @@
112
+ # logged here.  If you *do* define an error logfile for a <VirtualHost>
113
+ # container, that host's errors will be logged there and not here.
114
+ #
115
+-ErrorLog "@rel_logfiledir@/error_log"
116
++ErrorLog "@rel_logfiledir@/error.log"
117
+ 
118
+ #
119
+ # LogLevel: Control the number of messages logged to the error_log.
120
+@@ -210,13 +210,13 @@
121
+     # define per-<VirtualHost> access logfiles, transactions will be
122
+     # logged therein and *not* in this file.
123
+     #
124
+-    CustomLog "@rel_logfiledir@/access_log" common
125
++    CustomLog "@rel_logfiledir@/access.log" common
126
+ 
127
+     #
128
+     # If you prefer a logfile with access, agent, and referer information
129
+     # (Combined Logfile Format) you can use the following directive.
130
+     #
131
+-    #CustomLog "@rel_logfiledir@/access_log" combined
132
++    #CustomLog "@rel_logfiledir@/access.log" combined
133
+ </IfModule>
134
+ 
135
+ <IfModule alias_module>
136
+diff -Naur a/include/ap_config_layout.h.in b/include/ap_config_layout.h.in
137
+--- a/include/ap_config_layout.h.in	2006-07-11 22:55:32.000000000 +0200
138
+@@ -60,5 +60,6 @@
139
+ #define DEFAULT_REL_LOGFILEDIR "@rel_logfiledir@"
140
+ #define DEFAULT_EXP_PROXYCACHEDIR "@exp_proxycachedir@"
141
+ #define DEFAULT_REL_PROXYCACHEDIR "@rel_proxycachedir@"
142
++#define DEFAULT_PIDLOG "/run/httpd/httpd.pid"
143
+ 
144
+ #endif /* AP_CONFIG_LAYOUT_H */
145
+diff -Naur a/include/httpd.h b/include/httpd.h
146
+--- a/include/httpd.h	2022-03-09 15:04:15.000000000 +0100
147
+@@ -110,7 +110,7 @@
148
+ #define DOCUMENT_LOCATION  HTTPD_ROOT "/docs"
149
+ #else
150
+ /* Set default for non OS/2 file system */
151
+-#define DOCUMENT_LOCATION  HTTPD_ROOT "/htdocs"
152
++#define DOCUMENT_LOCATION  "/srv/www"
153
+ #endif
154
+ #endif /* DOCUMENT_LOCATION */
155
+ 
156
+diff -Naur a/Makefile.in b/Makefile.in
157
+--- a/Makefile.in	2021-06-02 09:11:47.000000000 +0200
158
+@@ -121,9 +121,9 @@
159
+ 	    done ; \
160
+ 	done ; \
161
+ 	if test -f "$(builddir)/envvars-std"; then \
162
+-	    cp -p envvars-std $(DESTDIR)$(sbindir); \
163
+-	    if test ! -f $(DESTDIR)$(sbindir)/envvars; then \
164
+-	        cp -p envvars-std $(DESTDIR)$(sbindir)/envvars ; \
165
++	    install -m644 envvars-std $(DESTDIR)$(installbuilddir); \
166
++		 if test ! -f $(DESTDIR)$(sysconfdir)/envvars; then \
167
++		 	install -m644 envvars-std $(DESTDIR)$(sysconfdir)/envvars; \
168
+ 	    fi ; \
169
+ 	fi
170
+ 
171
+@@ -195,7 +195,7 @@
172
+ 	    if test -d $(htdocs-srcdir) && test "x$(RSYNC)" != "x" && test -x $(RSYNC) ; then \
173
+ 		$(RSYNC) --exclude .svn -rlpt --numeric-ids $(htdocs-srcdir)/ $(DESTDIR)$(htdocsdir)/; \
174
+ 	    else \
175
+-		test -d $(htdocs-srcdir) && (cd $(htdocs-srcdir) && cp -rp * $(DESTDIR)$(htdocsdir)) ; \
176
++		test -d $(htdocs-srcdir) && (cd $(htdocs-srcdir) && cp -r * $(DESTDIR)$(htdocsdir)) ; \
177
+ 		cd $(DESTDIR)$(htdocsdir) && find . -name ".svn" -type d -print | xargs rm -rf 2>/dev/null || true; \
178
+ 	    fi; \
179
+ 	fi
180
+@@ -206,7 +206,7 @@
181
+         else \
182
+ 	    echo Installing error documents ; \
183
+ 	    $(MKINSTALLDIRS) $(DESTDIR)$(errordir) ; \
184
+-	    cd $(top_srcdir)/docs/error && cp -rp * $(DESTDIR)$(errordir) ; \
185
++	    cd $(top_srcdir)/docs/error && cp -r * $(DESTDIR)$(errordir) ; \
186
+ 	    test "x$(errordir)" != "x" && cd $(DESTDIR)$(errordir) && find . -name ".svn" -type d -print | xargs rm -rf 2>/dev/null || true; \
187
+ 	fi
188
+ 
189
+@@ -216,7 +216,7 @@
190
+         else \
191
+ 	    echo Installing icons ; \
192
+ 	    $(MKINSTALLDIRS) $(DESTDIR)$(iconsdir) ; \
193
+-	    cd $(top_srcdir)/docs/icons && cp -rp * $(DESTDIR)$(iconsdir) ; \
194
++	    cd $(top_srcdir)/docs/icons && cp -r * $(DESTDIR)$(iconsdir) ; \
195
+ 	    test "x$(iconsdir)" != "x" && cd $(DESTDIR)$(iconsdir) && find . -name ".svn" -type d -print | xargs rm -rf 2>/dev/null || true; \
196
+ 	fi
197
+ 
198
+@@ -226,7 +226,7 @@
199
+ 	else \
200
+ 	   echo Installing CGIs ; \
201
+ 	   $(MKINSTALLDIRS) $(DESTDIR)$(cgidir) ; \
202
+-	   cd $(top_srcdir)/docs/cgi-examples && cp -rp * $(DESTDIR)$(cgidir) ; \
203
++	   cd $(top_srcdir)/docs/cgi-examples && cp -r * $(DESTDIR)$(cgidir) ; \
204
+ 	   test "x$(cgidir)" != "x" && cd $(DESTDIR)$(cgidir) && find . -name ".svn" -type d -print | xargs rm -rf 2>/dev/null || true; \
205
+ 	fi
206
+ 
207
+@@ -280,12 +280,12 @@
208
+ 	@test -d $(DESTDIR)$(mandir)/man1 || $(MKINSTALLDIRS) $(DESTDIR)$(mandir)/man1
209
+ 	@test -d $(DESTDIR)$(mandir)/man8 || $(MKINSTALLDIRS) $(DESTDIR)$(mandir)/man8
210
+ 	@test -d $(DESTDIR)$(manualdir)   || $(MKINSTALLDIRS) $(DESTDIR)$(manualdir)
211
+-	@cp -p $(top_srcdir)/docs/man/*.1 $(DESTDIR)$(mandir)/man1
212
+-	@cp -p $(top_srcdir)/docs/man/*.8 $(DESTDIR)$(mandir)/man8
213
++	@cp $(top_srcdir)/docs/man/*.1 $(DESTDIR)$(mandir)/man1
214
++	@cp $(top_srcdir)/docs/man/*.8 $(DESTDIR)$(mandir)/man8
215
+ 	@if test "x$(RSYNC)" != "x" && test -x $(RSYNC) ; then \
216
+ 	  $(RSYNC) --exclude .svn -rlpt --numeric-ids $(top_srcdir)/docs/manual/ $(DESTDIR)$(manualdir)/; \
217
+ 	else \
218
+-	  cd $(top_srcdir)/docs/manual && cp -rp * $(DESTDIR)$(manualdir); \
219
++	  cd $(top_srcdir)/docs/manual && cp -r * $(DESTDIR)$(manualdir); \
220
+ 	  cd $(DESTDIR)$(manualdir) && find . -name ".svn" -type d -print | xargs rm -rf 2>/dev/null || true; \
221
+ 	fi
222
+ 
223
+diff -Naur a/support/apachectl.in b/support/apachectl.in
224
+--- a/support/apachectl.in	2012-02-01 04:47:28.000000000 +0100
225
+@@ -45,8 +45,8 @@
226
+ HTTPD='@exp_sbindir@/@progname@'
227
+ #
228
+ # pick up any necessary environment variables
229
+-if test -f @exp_sbindir@/envvars; then
230
+-  . @exp_sbindir@/envvars
231
++if test -f @exp_sysconfdir@/envvars; then
232
++  . @exp_sysconfdir@/envvars
233
+ fi
234
+ #
235
+ # a command that outputs a formatted text version of the HTML at the
236
+diff -Naur a/support/Makefile.in b/support/Makefile.in
237
+--- a/support/Makefile.in	2018-02-09 11:17:30.000000000 +0100
238
+@@ -16,23 +16,23 @@
239
+ 	@test -d $(DESTDIR)$(bindir) || $(MKINSTALLDIRS) $(DESTDIR)$(bindir)
240
+ 	@test -d $(DESTDIR)$(sbindir) || $(MKINSTALLDIRS) $(DESTDIR)$(sbindir)
241
+ 	@test -d $(DESTDIR)$(libexecdir) || $(MKINSTALLDIRS) $(DESTDIR)$(libexecdir)
242
+-	@cp -p $(top_builddir)/server/httpd.exp $(DESTDIR)$(libexecdir)
243
++	@test -d $(DESTDIR)$(sysconfdir) || $(MKINSTALLDIRS) $(DESTDIR)$(sysconfdir)
244
++	@test -d $(DESTDIR)$(installbuilddir) || $(MKINSTALLDIRS) $(DESTDIR)$(installbuilddir)
245
++	@install -m644 $(top_builddir)/server/httpd.exp $(DESTDIR)$(libexecdir)
246
+ 	@for i in apxs dbmmanage; do \
247
+ 	    if test -f "$(builddir)/$$i"; then \
248
+-	        cp -p $$i $(DESTDIR)$(bindir); \
249
+-	        chmod 755 $(DESTDIR)$(bindir)/$$i; \
250
++	        install -m755 $$i $(DESTDIR)$(bindir);\
251
+ 	    fi ; \
252
+ 	done
253
+ 	@for i in apachectl; do \
254
+ 	    if test -f "$(builddir)/$$i"; then \
255
+-	        cp -p $$i $(DESTDIR)$(sbindir); \
256
+-	        chmod 755 $(DESTDIR)$(sbindir)/$$i; \
257
++	        install -m755 $$i $(DESTDIR)$(sbindir);\
258
+ 	    fi ; \
259
+ 	done
260
+ 	@if test -f "$(builddir)/envvars-std"; then \
261
+-	    cp -p envvars-std $(DESTDIR)$(sbindir); \
262
+-	    if test ! -f $(DESTDIR)$(sbindir)/envvars; then \
263
+-	        cp -p envvars-std $(DESTDIR)$(sbindir)/envvars ; \
264
++	    install -m644 envvars-std $(DESTDIR)$(installbuilddir); \
265
++		 if test ! -f $(DESTDIR)$(sysconfdir)/envvars; then \
266
++		 	install -m644 envvars-std $(DESTDIR)$(sysconfdir)/envvars; \
267
+ 	    fi ; \
268
+ 	fi
269
+ 
... ...
@@ -1,7 +1,7 @@
1 1
 Summary:        The Apache HTTP Server
2 2
 Name:           httpd
3
-Version:        2.4.58
4
-Release:        3%{?dist}
3
+Version:        2.4.59
4
+Release:        1%{?dist}
5 5
 License:        Apache License 2.0
6 6
 URL:            http://httpd.apache.org
7 7
 Group:          Applications/System
... ...
@@ -9,7 +9,7 @@ Vendor:         VMware, Inc.
9 9
 Distribution:   Photon
10 10
 
11 11
 Source0: https://dlcdn.apache.org/%{name}/%{name}-%{version}.tar.bz2
12
-%define sha512 %{name}=d6e73bf413a507ec16b621ff635e178206207a9e9810ce3944b3dc98d39cde8f225307110167fc9da5822175796c8cb66f98be5b9f0d8b76dcd83a401d39b2c1
12
+%define sha512 %{name}=209da0bbac5e2564d4590302515b35495be6402273ff4024aa93e85e44554c95e053201d606383936425a41e1b5b97e6b40055dcbb385eb691a5029a6f3158c2
13 13
 Source1: %{name}.sysusers
14 14
 
15 15
 # Patch0 is taken from:
... ...
@@ -198,6 +198,8 @@ fi
198 198
 %{_bindir}/dbmmanage
199 199
 
200 200
 %changelog
201
+* Fri Apr 05 2024 Nitesh Kumar <nitesh-nk.kumar@broadcom.com> 2.4.59-1
202
+- Version upgrade to v2.4.59 to fix CVE-2024-27316
201 203
 * Wed Mar 06 2024 Ashwin Dayanand Kamat <ashwin.kamat@broadcom.com> 2.4.58-3
202 204
 - Bump version as a part of apr upgrade
203 205
 * Sun Nov 19 2023 Shreenidhi Shedi <sshedi@vmware.com> 2.4.58-2
... ...
@@ -1,7 +1,7 @@
1 1
 Summary:         libsoup HTTP client/server library
2 2
 Name:            libsoup
3 3
 Version:         3.2.1
4
-Release:         14%{?dist}
4
+Release:         15%{?dist}
5 5
 License:         GPLv2
6 6
 URL:             http://wiki.gnome.org/LibSoup
7 7
 Group:           System Environment/Development
... ...
@@ -95,6 +95,8 @@ These are the additional language files of libsoup.
95 95
 %{_datadir}/locale/*
96 96
 
97 97
 %changelog
98
+* Fri Apr 05 2024 Nitesh Kumar <nitesh-nk.kumar@broadcom.com> 3.2.1-15
99
+- Version Bump up to consume httpd v2.4.59
98 100
 * Thu Mar 28 2024 Ashwin Dayanand Kamat <ashwin.kamat@broadcom.com> 3.2.1-14
99 101
 - Bump version as a part of libxml2 upgrade
100 102
 * Mon Mar 04 2024 Nitesh Kumar <nitesh-nk.kumar@broadcom.com> 3.2.1-13
... ...
@@ -1,7 +1,7 @@
1 1
 Summary:        Application Container Server for Networked/Clustered Web Applications
2 2
 Name:           uwsgi
3 3
 Version:        2.0.21
4
-Release:        17%{?dist}
4
+Release:        18%{?dist}
5 5
 License:        GPLv2 with exceptions
6 6
 Group:          Productivity/Networking/Web/Servers
7 7
 Vendor:         VMware, Inc.
... ...
@@ -235,6 +235,8 @@ rm -rf %{buildroot}/*
235 235
 %{python3_sitelib}/uwsgidecorators.py*
236 236
 
237 237
 %changelog
238
+* Fri Apr 05 2024 Nitesh Kumar <nitesh-nk.kumar@broadcom.com> 2.0.21-18
239
+- Version Bump up to consume httpd v2.4.59
238 240
 * Mon Apr 01 2024 Shreenidhi Shedi <shreenidhi.shedi@broadcom.com> 2.0.21-17
239 241
 - Bump version as a part of util-linux upgrade
240 242
 * Thu Mar 28 2024 Ashwin Dayanand Kamat <ashwin.kamat@broadcom.com> 2.0.21-16