gnu: Apache HTTPD: Update to 2.4.51 [fixes CVE-2021-42013].

This fixes CVE-2021-42013, which refers to the incomplete fix of CVE-2021-41773
in httpd 2.4.50:

https://httpd.apache.org/security/vulnerabilities_24.html

* gnu/packages/web.scm (httpd): Update to 2.4.51.
This commit is contained in:
Leo Famulari 2021-10-08 19:08:42 -04:00
parent b37fe44b7d
commit 2a273e9e22
No known key found for this signature in database
GPG key ID: 2646FA30BACA7F08

View file

@ -252,14 +252,14 @@ (define-public qhttp
(define-public httpd (define-public httpd
(package (package
(name "httpd") (name "httpd")
(version "2.4.50") (version "2.4.51")
(source (origin (source (origin
(method url-fetch) (method url-fetch)
(uri (string-append "mirror://apache/httpd/httpd-" (uri (string-append "mirror://apache/httpd/httpd-"
version ".tar.bz2")) version ".tar.bz2"))
(sha256 (sha256
(base32 (base32
"03w9nc7v0rqljxazikbrlgbw7lq72i8n7n9ynlp6h1n6f301fa3a")))) "1x1qp10pfh33x1b56liwsjl0jamjm5lkk7j3lj87c1ygzs0ivq10"))))
(build-system gnu-build-system) (build-system gnu-build-system)
(native-inputs `(("pcre" ,pcre "bin"))) ;for 'pcre-config' (native-inputs `(("pcre" ,pcre "bin"))) ;for 'pcre-config'
(inputs `(("apr" ,apr) (inputs `(("apr" ,apr)