Skip to content

Commit 3d84a7b

Browse files
kgodara912Kshitiz Godara
andauthored
Upgrade httpd to 2.4.65 to fix CVE-2025-54090 (microsoft#14402)
Co-authored-by: Kshitiz Godara <[email protected]>
1 parent a6cbae7 commit 3d84a7b

File tree

3 files changed

+8
-5
lines changed

3 files changed

+8
-5
lines changed

SPECS/httpd/httpd.signatures.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@
55
"01-ldap.conf": "cbbbdd396fe056e8ab167abd7b2cb5145b42210bfea38452968ff02a03493fc8",
66
"01-session.conf": "51df0ceeb7dae9922817f4af0554f83fe01d6268025ee08260aeed69be3953d1",
77
"10-listen443.conf": "fc7484790ec6328b9082e04083137551a5ae2e8f4d4696d9846b052915b6a0cb",
8-
"httpd-2.4.64.tar.bz2": "120b35a2ebf264f277e20f9a94f870f2063342fbff0861404660d7dd0ab1ac29",
8+
"httpd-2.4.65.tar.bz2": "58b8be97d9940ec17f7656c0c6b9f41b618aac468b894b534148e3296c53b8b3",
99
"httpd-init.service": "2501b44bdb02f583d98cc5296accbf0af36957b93ed5b871358aeb10a0512a7c",
1010
"httpd-ssl-gencerts": "ae96a94eeb0be8731c0bb976e5b878e0e5a196442a001c9e809bed3873f4755d",
1111
"httpd-ssl-pass-dialog": "b9bd4816dda673ad9294a0fbd2904fac9b96eabddb4d72080ae58b498bcd1db9",

SPECS/httpd/httpd.spec

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
%define _confdir %{_sysconfdir}
33
Summary: The Apache HTTP Server
44
Name: httpd
5-
Version: 2.4.64
5+
Version: 2.4.65
66
Release: 1%{?dist}
77
License: Apache-2.0
88
Vendor: Microsoft Corporation
@@ -316,7 +316,7 @@ fi
316316
%{_bindir}/*
317317
%{_mandir}/man1/*
318318
%license LICENSE
319-
%doc NOTICE
319+
%license NOTICE
320320
%exclude %{_bindir}/apxs
321321
%exclude %{_mandir}/man1/apxs.1*
322322

@@ -345,6 +345,9 @@ fi
345345
%{_libexecdir}/httpd-ssl-pass-dialog
346346

347347
%changelog
348+
* Mon Jul 28 2025 Kshitiz Godara <[email protected]> - 2.4.65-1
349+
- Upgrade to 2.4.65 to fix CVE-2025-54090
350+
348351
* Mon Jul 14 2025 Kevin Lockwood <[email protected]> - 2.4.64-1
349352
- Upgrade to 2.4.64 to fix CVE-2025-49812, CVE-2025-53020
350353

cgmanifest.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5410,8 +5410,8 @@
54105410
"type": "other",
54115411
"other": {
54125412
"name": "httpd",
5413-
"version": "2.4.64",
5414-
"downloadUrl": "https://archive.apache.org/dist/httpd/httpd-2.4.64.tar.bz2"
5413+
"version": "2.4.65",
5414+
"downloadUrl": "https://archive.apache.org/dist/httpd/httpd-2.4.65.tar.bz2"
54155415
}
54165416
}
54175417
},

0 commit comments

Comments
 (0)