[ptxdist] [PATCH] fcgi: version bump 2.4.2 -> 2.4.5

[ptxdist] [PATCH] fcgi: version bump 2.4.2 -> 2.4.5

[Alexander Dahl via ptxdist]

Mitigates CVE-2025-23016.

Link: https://github.com/FastCGI-Archives/fcgi2/compare/2.4.2...2.4.3
Link: https://github.com/FastCGI-Archives/fcgi2/compare/2.4.3...2.4.4
Link: https://github.com/FastCGI-Archives/fcgi2/compare/2.4.4...2.4.5
Link: https://github.com/advisories/GHSA-9825-56cx-cfg6
Signed-off-by: Alexander Dahl <ada@thorsis.com>
---
 patches/{fcgi-2.4.2 => fcgi-2.4.5}/autogen.sh | 0
 rules/fcgi.make                               | 6 +++---
 2 files changed, 3 insertions(+), 3 deletions(-)
 rename patches/{fcgi-2.4.2 => fcgi-2.4.5}/autogen.sh (100%)

diff --git a/patches/fcgi-2.4.2/autogen.sh b/patches/fcgi-2.4.5/autogen.sh
similarity index 100%
rename from patches/fcgi-2.4.2/autogen.sh
rename to patches/fcgi-2.4.5/autogen.sh
diff --git a/rules/fcgi.make b/rules/fcgi.make
index 1ff327672..249eb2e27 100644
--- a/rules/fcgi.make
+++ b/rules/fcgi.make
@@ -12,15 +12,15 @@ PACKAGES-$(PTXCONF_FCGI) += fcgi
 #
 # Paths and names
 #
-FCGI_VERSION    	:= 2.4.2
-FCGI_MD5		:= 146376d5c5c059b9184755db76505fab
+FCGI_VERSION		:= 2.4.5
+FCGI_MD5		:= 2d87ab3f5b1321cd39e1b6a9bd9e3088
 FCGI			:= fcgi-$(FCGI_VERSION)
 FCGI_SUFFIX		:= tar.gz
 FCGI_URL		:= https://github.com/FastCGI-Archives/fcgi2/archive/$(FCGI_VERSION).$(FCGI_SUFFIX)
 FCGI_SOURCE		:= $(SRCDIR)/$(FCGI).$(FCGI_SUFFIX)
 FCGI_DIR		:= $(BUILDDIR)/$(FCGI)
 FCGI_LICENSE		:= OML
-FCGI_LICENSE_FILES	:= file://LICENSE.TERMS;md5=e3aacac3a647af6e7e31f181cda0a06a
+FCGI_LICENSE_FILES	:= file://LICENSE;md5=e3aacac3a647af6e7e31f181cda0a06a
 
 # ----------------------------------------------------------------------------
 # Prepare

base-commit: f61905c23240642dec3e5390ee15e83cf1e016e9
-- 
2.39.5

Re: [ptxdist] [APPLIED] fcgi: version bump 2.4.2 -> 2.4.5

[Michael Olbrich]

Thanks, applied as c244a79b1b73430e0f2cbedb5126a41e9d794756.

Michael

[sent from post-receive hook]

On Fri, 09 May 2025 09:25:10 +0200, Alexander Dahl <ada@thorsis.com> wrote:
> Mitigates CVE-2025-23016.
> 
> Link: https://github.com/FastCGI-Archives/fcgi2/compare/2.4.2...2.4.3
> Link: https://github.com/FastCGI-Archives/fcgi2/compare/2.4.3...2.4.4
> Link: https://github.com/FastCGI-Archives/fcgi2/compare/2.4.4...2.4.5
> Link: https://github.com/advisories/GHSA-9825-56cx-cfg6
> Signed-off-by: Alexander Dahl <ada@thorsis.com>
> Message-Id: <20250415110728.529785-1-ada@thorsis.com>
> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
> 
> diff --git a/patches/fcgi-2.4.2/autogen.sh b/patches/fcgi-2.4.5/autogen.sh
> similarity index 100%
> rename from patches/fcgi-2.4.2/autogen.sh
> rename to patches/fcgi-2.4.5/autogen.sh
> diff --git a/rules/fcgi.make b/rules/fcgi.make
> index 1ff327672b03..249eb2e27ad2 100644
> --- a/rules/fcgi.make
> +++ b/rules/fcgi.make
> @@ -12,15 +12,15 @@ PACKAGES-$(PTXCONF_FCGI) += fcgi
>  #
>  # Paths and names
>  #
> -FCGI_VERSION    	:= 2.4.2
> -FCGI_MD5		:= 146376d5c5c059b9184755db76505fab
> +FCGI_VERSION		:= 2.4.5
> +FCGI_MD5		:= 2d87ab3f5b1321cd39e1b6a9bd9e3088
>  FCGI			:= fcgi-$(FCGI_VERSION)
>  FCGI_SUFFIX		:= tar.gz
>  FCGI_URL		:= https://github.com/FastCGI-Archives/fcgi2/archive/$(FCGI_VERSION).$(FCGI_SUFFIX)
>  FCGI_SOURCE		:= $(SRCDIR)/$(FCGI).$(FCGI_SUFFIX)
>  FCGI_DIR		:= $(BUILDDIR)/$(FCGI)
>  FCGI_LICENSE		:= OML
> -FCGI_LICENSE_FILES	:= file://LICENSE.TERMS;md5=e3aacac3a647af6e7e31f181cda0a06a
> +FCGI_LICENSE_FILES	:= file://LICENSE;md5=e3aacac3a647af6e7e31f181cda0a06a
>  
>  # ----------------------------------------------------------------------------
>  # Prepare