CVS commit: pkgsrc/www/apache24

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Thu Jul 24 13:23:23 UTC 2025

Modified Files:
        pkgsrc/www/apache24: Makefile distinfo

Log Message:
apache24: updated to 2.4.65

Changes with Apache 2.4.65

*) SECURITY: CVE-2025-54090: Apache HTTP Server: 'RewriteCond expr'
   always evaluates to true in 2.4.64 (cve.mitre.org)
   A bug in Apache HTTP Server 2.4.64 results in all "RewriteCond
   expr ..." tests evaluating as "true".
   Users are recommended to upgrade to version 2.4.65, which fixes
   the issue.


To generate a diff of this commit:
cvs rdiff -u -r1.136 -r1.137 pkgsrc/www/apache24/Makefile
cvs rdiff -u -r1.68 -r1.69 pkgsrc/www/apache24/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/apache24/Makefile
diff -u pkgsrc/www/apache24/Makefile:1.136 pkgsrc/www/apache24/Makefile:1.137
--- pkgsrc/www/apache24/Makefile:1.136  Sun Jul 13 16:33:04 2025
+++ pkgsrc/www/apache24/Makefile        Thu Jul 24 13:23:23 2025
@@ -1,11 +1,11 @@
-# $NetBSD: Makefile,v 1.136 2025/07/13 16:33:04 adam Exp $
+# $NetBSD: Makefile,v 1.137 2025/07/24 13:23:23 adam Exp $
 #
 # When updating this package, make sure that no strings like
 # "PR 12345" are in the commit message. Upstream likes
 # to reference their own PRs this way, but this ends up
 # in NetBSD GNATS.
 
-DISTNAME=      httpd-2.4.64
+DISTNAME=      httpd-2.4.65
 PKGNAME=       ${DISTNAME:S/httpd/apache/}
 CATEGORIES=    www
 MASTER_SITES=  ${MASTER_SITE_APACHE:=httpd/}

Index: pkgsrc/www/apache24/distinfo
diff -u pkgsrc/www/apache24/distinfo:1.68 pkgsrc/www/apache24/distinfo:1.69
--- pkgsrc/www/apache24/distinfo:1.68   Sun Jul 13 16:33:04 2025
+++ pkgsrc/www/apache24/distinfo        Thu Jul 24 13:23:23 2025
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.68 2025/07/13 16:33:04 adam Exp $
+$NetBSD: distinfo,v 1.69 2025/07/24 13:23:23 adam Exp $
 
-BLAKE2s (httpd-2.4.64.tar.bz2) = 04480017e5f76ee609ee3c10b19cb08f8d25129395a1272f6341315b9ea2e06d
-SHA512 (httpd-2.4.64.tar.bz2) = 299cb0d87a7e0e0a99d22bba7349b6b07c69222897410f9670af29896288d1f4e1da81d22ac9e1d8d6ea096e88044ab1dd34555b40a4b1b1cb3fd4b1d1897a7a
-Size (httpd-2.4.64.tar.bz2) = 7293281 bytes
+BLAKE2s (httpd-2.4.65.tar.bz2) = e80a265bf2b162d52c472f3522ed048008f3f0789378cf1960d47a59c071fa9e
+SHA512 (httpd-2.4.65.tar.bz2) = 202f8bfe2aafcfbcd7315191d466e9c10b9a8c0abafb7864510b6e1abe4cb660aaacc2456aa77d43e48ef7a49e591d0b54170d3daf67abc3e06c3da1c63fdffc
+Size (httpd-2.4.65.tar.bz2) = 7506711 bytes
 SHA1 (patch-aa) = 9a66685f1d2e4710ab464beda98cbaad632aebf9
 SHA1 (patch-ad) = 4ba4a9c812951f533fa316e5dbf17eaab5494157
 SHA1 (patch-ae) = 5bd3bf54e792bf8a2916d7e1b49b1702b02c6903