Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 820755 - www-servers/lighttpd-1.4.61: version bump
Summary: www-servers/lighttpd-1.4.61: version bump
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Herb Miller Jr.
URL:
Whiteboard:
Keywords: PullRequest
Depends on:
Blocks: CVE-2022-22707
  Show dependency tree
 
Reported: 2021-10-29 19:24 UTC by Sam James
Modified: 2022-01-23 17:57 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Sam James archtester Gentoo Infrastructure gentoo-dev Security 2021-10-29 19:24:55 UTC
Thanks!

Note in the changelog:
```

lighttpd (optional) dependencies on libev and on FAM are deprecated.
lighttpd event loop and file monitoring use native OS interfaces
except on obscure platforms. FAM and gamin appear to be abandoned.
Package maintainers on Linux and *BSD:
please remove —with-libev and —with-fam from package builds
lighttpd uses epoll() on Linux, kqueue() on *BSD for event notification.
lighttpd uses inotify() on Linux, kqueue() on *BSD for file monitoring.
```
Comment 1 Herb Miller Jr. 2021-12-05 18:39:28 UTC
Gonna shoot for knocking this out 12/7.
Comment 2 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2021-12-07 02:25:20 UTC
(In reply to Herb Miller Jr. from comment #1)
> Gonna shoot for knocking this out 12/7.

Thanks! May want to migrate to meson for the latest release too.
Comment 3 Larry the Git Cow gentoo-dev 2022-01-23 17:57:23 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=b140ffec25508b15927c6b4eba30b2225a82a91d

commit b140ffec25508b15927c6b4eba30b2225a82a91d
Author:     Glenn Strauss <gstrauss@gluelogic.com>
AuthorDate: 2022-01-21 14:05:07 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2022-01-23 17:57:12 +0000

    www-servers/lighttpd: Version bump (v1.4.64)
    
    * use pcre2 instead of pcre
    * remove long-deprecated modules and obsolete dependencies
    * update configs to use mod_deflate (subsumed mod_compress)
    * CVE-2022-22707 https://bugs.gentoo.org/830691
    
    Closes: https://bugs.gentoo.org/820755
    Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
    Signed-off-by: Sam James <sam@gentoo.org>

 www-servers/lighttpd/Manifest                    |   1 +
 www-servers/lighttpd/files/conf/lighttpd.conf-r1 | 309 +++++++++++++++++++++++
 www-servers/lighttpd/lighttpd-1.4.64-r1.ebuild   | 236 +++++++++++++++++
 www-servers/lighttpd/metadata.xml                |   2 +
 4 files changed, 548 insertions(+)