From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Tue, 25 Jun 2024 09:33:05 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1sM0fp-00Bu6m-0q for lore@lore.pengutronix.de; Tue, 25 Jun 2024 09:33:05 +0200 Received: from localhost ([127.0.0.1] helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1sM0fo-000333-Es; Tue, 25 Jun 2024 09:33:04 +0200 Received: from mail.thorsis.com ([217.92.40.78]) by metis.whiteo.stw.pengutronix.de with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1sM0fU-00031Q-4U for ptxdist@pengutronix.de; Tue, 25 Jun 2024 09:32:44 +0200 Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id A404B14812CF; Tue, 25 Jun 2024 09:32:42 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=thorsis.com; s=dkim; t=1719300763; h=from:subject:date:message-id:to:cc:mime-version:content-type: in-reply-to:references; bh=VMxYLx9XNUdxDMzd5AoKv1+dyhXkENn2Uzk5WU7R9Kg=; b=EV6NTnSvVwG3Qj08f67+yNgCfsYrM32++mnSNPZbgtBXq+xBT4O61BsY6KHTP4WwW28VMW o6sKNKCtElefgtw+gzFAWXeg3mmRb6K2IPzYev6RZh/7KBoohSaxYtkpbjDuaCZTYCds2z 8K3rVdw/UjzOuZ84ZJD2MIL0ttCchzZ4nvGnWMBPcUJZJDo2UEv0wjutIFWQVcJNIo/lAL C0qYVcCdldDT3tsBVMkt2CfstECWR7wOO7YaQRN4rlrcq347/HoYJnH2Iiej9S3N07BegE weJBmwWykDxAkShJ3i2DAK7vDxsPzjmHOsrm5hh/sej257efPsyqzKrME5E97g== Date: Tue, 25 Jun 2024 09:32:37 +0200 From: Alexander Dahl To: ptxdist@pengutronix.de Message-ID: <20240625-badland-frustrate-acb0f8ad3ae2@thorsis.com> Mail-Followup-To: ptxdist@pengutronix.de, Andreas Helmcke References: <20240624163606.1202570-3-ahelmcke@ela-soft.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20240624163606.1202570-3-ahelmcke@ela-soft.com> User-Agent: Mutt/2.2.12 (2023-09-09) X-Last-TLS-Session-Version: TLSv1.3 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-2.8 required=4.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,SPF_HELO_NONE,SPF_PASS autolearn=ham autolearn_force=no version=3.4.2 Subject: Re: [ptxdist] [PATCH] lighttpd: Version bump, 1.4.74 -> 1.4.76 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Cc: Andreas Helmcke Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Hello Andreas, Am Mon, Jun 24, 2024 at 06:36:05PM +0200 schrieb Andreas Helmcke: > Important changes > - detect VU#421644 HTTP/2 CONTINUATION Flood > - avoid CVE-2024-3094 xz supply chain attack > - incrementally stronger TLS cipher defaults > > bugfixes > > Link: https://www.lighttpd.net/2024/4/12/1.4.76/ > Link: https://www.lighttpd.net/2024/3/13/1.4.75/ > Signed-off-by: Andreas Helmcke > --- > rules/lighttpd.make | 12 ++++++++++-- > 1 file changed, 10 insertions(+), 2 deletions(-) > mode change 100644 => 100755 rules/lighttpd.make > > diff --git a/rules/lighttpd.make b/rules/lighttpd.make > old mode 100644 > new mode 100755 > index 96382b86a..fcb543818 > --- a/rules/lighttpd.make > +++ b/rules/lighttpd.make > @@ -15,8 +15,8 @@ PACKAGES-$(PTXCONF_LIGHTTPD) += lighttpd > # > # Paths and names > # > -LIGHTTPD_VERSION := 1.4.74 > -LIGHTTPD_MD5 := f38c400232151c69cc608fca35e593a9 > +LIGHTTPD_VERSION := 1.4.76 > +LIGHTTPD_MD5 := f9018cda389b1aa6dae4c5f962c20825 > LIGHTTPD := lighttpd-$(LIGHTTPD_VERSION) > LIGHTTPD_SUFFIX := tar.xz > LIGHTTPD_URL := http://download.lighttpd.net/lighttpd/releases-1.4.x/$(LIGHTTPD).$(LIGHTTPD_SUFFIX) > @@ -77,6 +77,14 @@ LIGHTTPD_CONF_OPT := \ > --without-maxminddb \ > --$(call ptx/wwo, PTXCONF_LIGHTTPD_LUA)-lua > > +$(STATEDIR)/lighttpd.prepare: > + @$(call targetinfo) > + @$(call world/execute, LIGHTTPD, ./autogen.sh) > + @$(call world/prepare, LIGHTTPD) > + @$(call touch) This probably works, but it is not the way ptxdist usually handles this. For packages not distributing ./configure you create a folder in patches and symlink autogen.sh from the abovce folder. See dropwatch or evtest for example. A short note in commit message about lighttpd not distributing ./configure anymore would be nice. By chance, do you know how lighttpd is going forward on this? I saw buildroot switching to meson for building lighttpd. Greets Alex > + > + > + > # ---------------------------------------------------------------------------- > # Install > # ---------------------------------------------------------------------------- > -- > 2.43.0 > >