From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Tue, 25 Jun 2024 17:39:19 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1sM8GN-00C5n3-27 for lore@lore.pengutronix.de; Tue, 25 Jun 2024 17:39:19 +0200 Received: from localhost ([127.0.0.1] helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1sM8GM-0001rB-SW; Tue, 25 Jun 2024 17:39:18 +0200 Received: from mail.ela-soft.com ([213.23.49.162]) by metis.whiteo.stw.pengutronix.de with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1sM8G1-0001r1-RD for ptxdist@pengutronix.de; Tue, 25 Jun 2024 17:38:58 +0200 Received: from [10.0.1.140] (tupai.ela-bln.local [10.0.1.140]) by mail.ela-soft.com (mailsystem) with ESMTPSA id 2270911C53 for ; Tue, 25 Jun 2024 17:38:57 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ela-soft.com; s=2021; t=1719329937; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:autocrypt:autocrypt; bh=1k9u8RMSsyGD3drqarh1i2TxYsjcZg9td+TqG085Xws=; b=CxxYdC6g7qTWG/3X1vejKUtpwZrHXRI0CywXoinGJGfG9txdlmViCHE4GL059SgXFs++so WF2oG9wU7XhbQ9xI673qKdnKdx30zuF7MJf9v2cUAofRjdJxQmBJwCQIgTnulOocptdbeL VlEfYWfIHG7w0ihTApqTtjmsLaku5yHxlYbJ2QuTTNaSSqd9cRZZl5HtpAietVF1vyslVY FpI2ps2DksJ7iZP0fgnlwz5jvSobngk7ivTVSd2pkZZ6PLf2Mv/UuKao/bMnAOJTknUVZr aIDxCePHnx5BCM9PO43b6QJfIpBS+uK2JeJQhjAkr1vr+X/W2qKs80KQALcZjg== Message-ID: Date: Tue, 25 Jun 2024 17:38:56 +0200 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird To: ptxdist@pengutronix.de References: <20240624163606.1202570-3-ahelmcke@ela-soft.com> <20240625-badland-frustrate-acb0f8ad3ae2@thorsis.com> From: Andreas Helmcke Content-Language: en-US, de-DE Autocrypt: addr=ahelmcke@ela-soft.com; keydata= xsDiBDqtzDQRBADYJNLjNC+RK93Lhqx89UudxF0GIBfb+7AzjKRMe1aWRB5o3a14vm7ScQh+ xFIw8j2jaxM1jNZ/6eZw3nT8vy/3gRVazBnJg/JXKxU0axpvCwioodS8UKy82Wp89Gya+yhF IH10Q/2Rp2Y33oxbmwAl/YSS8eqN2oPjCrnCbEWcQQCg/w2d6Pwilu2ajlxtNby1lXOs7R0E AIveEzbSpi5hFsUgRz3MEnvBxTYvP3F0yU8x/LPl08FTa+0kNb+8FVqPxNPenBAtX0mRPLLA BRknO9xEQ8Zi1bnQ3/1Gcj1W+92XIClMkFJWTxPn5lmHOLsH1K/FaWEDS9z1+usxgPVDUVxT MbPSxhXxJU7S9tC02noI0rB1/0WLBACGNP3II9pZ5cZJP7ZBje/LtZCMK+anx6Ix9DHBpedL kkPYFBwSCEB9AciFtPa0IVkuvynqnyeiyfdwQK7ul9nMowjSWarnmWcdQkByfMNzEdVQF1oy IV+FJCx3bPYc6Bxb8mRmwEK7s6i8Y3qdgFwyyphGTWkMcFtvTr/Tknf3L80nQW5kcmVhcyBI ZWxtY2tlIDxhaGVsbWNrZUBlbGEtc29mdC5jb20+wn0EExEIAD0CGwMGCwkIBwMCBBUCCAME FgIDAQIeAQIXgBYhBFA9ZZ0xTAe07lSeJg1WleJJOvBfBQJmeVNQBQktrAIsAAoJEA1WleJJ OvBf0t8An0j3xQEFjOFP9ERQGDPr6eXhCn/7AJ4vOpd8gKkOzwOvxSmguDI0WpHJfM7BTQQ6 rcw0EAgA9kJXtwh/CBdyorrWqULzBej5UxE5T7bxbrlLOCDaAadWoxTpj0BV89AHxstDqZSt 90xkhkn4DIO9ZekX1KHTUPj1WV/cdlJPPT2N286Z4VeSWc39uK50T8X8dryDxUcwYc58yWb/ Ffm7/ZFexwGq01uejaClcjrUGvC/RgBYK+X0iP1YTknbzSC0neSRBzZrM2w4DUUdD3yIsxx8 Wy2O9vPJI8BD8KVbGI2Ou1WMuF040zT9fBdXQ6MdGGzeMyEstSr/POGxKUAYEY18hKcKctaG xAMZyAcpesqVDNmWn6vQClCbAkbTCD1mpF1Bn5x8vYlLIhkmuquiXsNV6TILOwACAggAwYsD zwilCtMj1WbBxKHhjyLf57L0AJsHx1SB8gixbvSS9Z1lvWri7UXwljvI747af56DgwxWs+/p c/voH/xkVHdgSEf4AuUc2lWQcoFmNHo8QJKN4An1j1H7DvJXKyffRLHj7YsgQ7NPs8/FsPm9 69oHX61xuzRiY7ndi34DduMjChFvoWV/ddQjitjvekP5gCm64TGQg23mUMGixuTWXAgUmgN0 fHPieqYXqVvEgwChgm1iZQJDSQ0sYRfOqfMK4vvwQCp6aSlRPrd06EKaOvxCL8HWUWX7tPzt n3BwxNU8uWqXFejPTymRry3WsoABRgpBvAhO8+ByoRA1ZV9EK8JpBBgRCAApBRsMAAAAFiEE UD1lnTFMB7TuVJ4mDVaV4kk68F8FAmZ5U1AFCS2sAiwACgkQDVaV4kk68F+ucQCg9WOSxWS4 xfqy0waV6r5Ay85AYsUAoLbhfkb56kvJKJzl5+4sZscVl75X In-Reply-To: <20240625-badland-frustrate-acb0f8ad3ae2@thorsis.com> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-102.2 required=4.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,SPF_HELO_NONE,SPF_PASS, USER_IN_WELCOMELIST,USER_IN_WHITELIST autolearn=ham autolearn_force=no version=3.4.2 Subject: Re: [ptxdist] [PATCH] lighttpd: Version bump, 1.4.74 -> 1.4.76 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Hello Alex, Am 25.06.24 um 09:32 schrieb Alexander Dahl: > Hello Andreas, > > Am Mon, Jun 24, 2024 at 06:36:05PM +0200 schrieb Andreas Helmcke: >> Important changes >> - detect VU#421644 HTTP/2 CONTINUATION Flood >> - avoid CVE-2024-3094 xz supply chain attack >> - incrementally stronger TLS cipher defaults >> >> bugfixes >> >> Link: https://www.lighttpd.net/2024/4/12/1.4.76/ >> Link: https://www.lighttpd.net/2024/3/13/1.4.75/ >> Signed-off-by: Andreas Helmcke >> --- >> rules/lighttpd.make | 12 ++++++++++-- >> 1 file changed, 10 insertions(+), 2 deletions(-) >> mode change 100644 => 100755 rules/lighttpd.make >> >> diff --git a/rules/lighttpd.make b/rules/lighttpd.make >> old mode 100644 >> new mode 100755 >> index 96382b86a..fcb543818 >> --- a/rules/lighttpd.make >> +++ b/rules/lighttpd.make >> @@ -15,8 +15,8 @@ PACKAGES-$(PTXCONF_LIGHTTPD) += lighttpd >> # >> # Paths and names >> # >> -LIGHTTPD_VERSION := 1.4.74 >> -LIGHTTPD_MD5 := f38c400232151c69cc608fca35e593a9 >> +LIGHTTPD_VERSION := 1.4.76 >> +LIGHTTPD_MD5 := f9018cda389b1aa6dae4c5f962c20825 >> LIGHTTPD := lighttpd-$(LIGHTTPD_VERSION) >> LIGHTTPD_SUFFIX := tar.xz >> LIGHTTPD_URL := http://download.lighttpd.net/lighttpd/releases-1.4.x/$(LIGHTTPD).$(LIGHTTPD_SUFFIX) >> @@ -77,6 +77,14 @@ LIGHTTPD_CONF_OPT := \ >> --without-maxminddb \ >> --$(call ptx/wwo, PTXCONF_LIGHTTPD_LUA)-lua >> >> +$(STATEDIR)/lighttpd.prepare: >> + @$(call targetinfo) >> + @$(call world/execute, LIGHTTPD, ./autogen.sh) >> + @$(call world/prepare, LIGHTTPD) >> + @$(call touch) > > This probably works, but it is not the way ptxdist usually handles > this. For packages not distributing ./configure you create a folder > in patches and symlink autogen.sh from the abovce folder. See > dropwatch or evtest for example. I don't particularly like this solution, because then with future updates (and these come regularly with lighttpd) yet another place has to be adapted which can also be easily overlooked. But if this is the usual way and there is no better solution (e.g. another build system) then I'll do it this way. > A short note in commit message about lighttpd not distributing > ./configure anymore would be nice. You are right. I will add this. > By chance, do you know how lighttpd is going forward on this? I saw > buildroot switching to meson for building lighttpd. I can only refer to the official documentation and there are examples for automake, cmake, meson and scons, without any particular way being advertised there. I am willing to convert this to another build system if that helps to avoid the patches. Is one of them preferred with ptxdist? Andreas > Greets > Alex > >> + >> + >> + >> # ---------------------------------------------------------------------------- >> # Install >> # ---------------------------------------------------------------------------- >> -- >> 2.43.0 >> >>