Important changes - detect VU#421644 HTTP/2 CONTINUATION Flood - avoid CVE-2024-3094 xz supply chain attack - incrementally stronger TLS cipher defaults
bugfixes Link: https://www.lighttpd.net/2024/4/12/1.4.76/ Link: https://www.lighttpd.net/2024/3/13/1.4.75/ Signed-off-by: Andreas Helmcke <[email protected]> --- rules/lighttpd.make | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) mode change 100644 => 100755 rules/lighttpd.make diff --git a/rules/lighttpd.make b/rules/lighttpd.make old mode 100644 new mode 100755 index 96382b86a..fcb543818 --- a/rules/lighttpd.make +++ b/rules/lighttpd.make @@ -15,8 +15,8 @@ PACKAGES-$(PTXCONF_LIGHTTPD) += lighttpd # # Paths and names # -LIGHTTPD_VERSION := 1.4.74 -LIGHTTPD_MD5 := f38c400232151c69cc608fca35e593a9 +LIGHTTPD_VERSION := 1.4.76 +LIGHTTPD_MD5 := f9018cda389b1aa6dae4c5f962c20825 LIGHTTPD := lighttpd-$(LIGHTTPD_VERSION) LIGHTTPD_SUFFIX := tar.xz LIGHTTPD_URL := http://download.lighttpd.net/lighttpd/releases-1.4.x/$(LIGHTTPD).$(LIGHTTPD_SUFFIX) @@ -77,6 +77,14 @@ LIGHTTPD_CONF_OPT := \ --without-maxminddb \ --$(call ptx/wwo, PTXCONF_LIGHTTPD_LUA)-lua +$(STATEDIR)/lighttpd.prepare: + @$(call targetinfo) + @$(call world/execute, LIGHTTPD, ./autogen.sh) + @$(call world/prepare, LIGHTTPD) + @$(call touch) + + + # ---------------------------------------------------------------------------- # Install # ---------------------------------------------------------------------------- -- 2.43.0
