commit 0b91ad8a5a9c74350b76f616ad11bc0d18b506cd Author: CentOS Sources Date: Fri Jul 10 01:30:05 2020 +0000 import mod_http2-1.15.7-1.module+el8.3.0+6814+67d1e611 diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..3f335b4 --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +SOURCES/mod_http2-1.15.7.tar.gz diff --git a/.mod_http2.metadata b/.mod_http2.metadata new file mode 100644 index 0000000..1ce6bf7 --- /dev/null +++ b/.mod_http2.metadata @@ -0,0 +1 @@ +6f52107e47548eee1c45c3fc7a7ca2245a115dd8 SOURCES/mod_http2-1.15.7.tar.gz diff --git a/SPECS/mod_http2.spec b/SPECS/mod_http2.spec new file mode 100644 index 0000000..7a0d7eb --- /dev/null +++ b/SPECS/mod_http2.spec @@ -0,0 +1,114 @@ +# Module Magic Number +%{!?_httpd_mmn: %global _httpd_mmn %(cat %{_includedir}/httpd/.mmn 2>/dev/null || echo 0-0)} + +Name: mod_http2 +Version: 1.15.7 +Release: 1%{?dist} +Summary: module implementing HTTP/2 for Apache 2 +Group: System Environment/Daemons +License: ASL 2.0 +URL: https://icing.github.io/mod_h2/ +Source0: https://github.com/icing/mod_h2/releases/download/v%{version}/mod_http2-%{version}.tar.gz +BuildRequires: pkgconfig, httpd-devel >= 2.4.20, libnghttp2-devel >= 1.7.0, openssl-devel >= 1.0.2 +Requires: httpd-mmn = %{_httpd_mmn} +Conflicts: httpd < 2.4.25-8 + + +%description +The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on +top of libnghttp2 for httpd 2.4 servers. + +%prep +%setup -q + +%build +%configure +make %{?_smp_mflags} V=1 + +%install +make DESTDIR=%{buildroot} install +rm -rf %{buildroot}/etc/httpd/share/doc/ + +# create configuration +mkdir -p %{buildroot}%{_httpd_modconfdir} +echo "LoadModule http2_module modules/mod_http2.so" > %{buildroot}%{_httpd_modconfdir}/10-h2.conf +echo "LoadModule proxy_http2_module modules/mod_proxy_http2.so" > %{buildroot}%{_httpd_modconfdir}/10-proxy_h2.conf + +%check +make check + +%files +%doc README README.md ChangeLog AUTHORS +%license LICENSE +%config(noreplace) %{_httpd_modconfdir}/10-h2.conf +%config(noreplace) %{_httpd_modconfdir}/10-proxy_h2.conf +%{_httpd_moddir}/mod_http2.so +%{_httpd_moddir}/mod_proxy_http2.so + +%changelog +* Tue Apr 14 2020 Lubos Uhliarik - 1.15.7-1 +- new version 1.15.7 +- Resolves: #1814236 - RFE: mod_http2 rebase +- Resolves: #1747289 - CVE-2019-10082 httpd:2.4/mod_http2: httpd: + read-after-free in h2 connection shutdown +- Resolves: #1696099 - CVE-2019-0197 httpd:2.4/mod_http2: httpd: + mod_http2: possible crash on late upgrade +- Resolves: #1696094 - CVE-2019-0196 httpd:2.4/mod_http2: httpd: + mod_http2: read-after-free on a string compare +- Resolves: #1677591 - CVE-2018-17189 httpd:2.4/mod_http2: httpd: + mod_http2: DoS via slow, unneeded request bodies + +* Thu Aug 29 2019 Lubos Uhliarik - 1.11.3-3 +- Resolves: #1744999 - CVE-2019-9511 httpd:2.4/mod_http2: HTTP/2: large amount + of data request leads to denial of service +- Resolves: #1745086 - CVE-2019-9516 httpd:2.4/mod_http2: HTTP/2: 0-length + headers leads to denial of service +- Resolves: #1745154 - CVE-2019-9517 httpd:2.4/mod_http2: HTTP/2: request for + large response leads to denial of service + +* Thu Apr 4 2019 Joe Orton - 1.11.3-2 +- update release (#1695587) + +* Tue Oct 16 2018 Lubos Uhliarik - 1.11.3-1 +- new version 1.11.3 +- Resolves: #1633401 - CVE-2018-11763 mod_http2: httpd: DoS for HTTP/2 + connections by continuous SETTINGS + +* Wed May 2 2018 Joe Orton - 1.10.20-1 +- update to 1.10.20 + +* Wed Apr 18 2018 Joe Orton - 1.10.18-1 +- update to 1.10.18 + +* Thu Mar 29 2018 Joe Orton - 1.10.16-1 +- update to 1.10.16 (CVE-2018-1302) + +* Thu Feb 08 2018 Fedora Release Engineering - 1.10.13-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild + +* Tue Nov 7 2017 Joe Orton - 1.10.13-1 +- update to 1.10.13 + +* Fri Oct 20 2017 Joe Orton - 1.10.12-1 +- update to 1.10.12 + +* Thu Aug 03 2017 Fedora Release Engineering - 1.10.10-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild + +* Mon Jul 31 2017 Joe Orton - 1.10.10-1 +- update to 1.10.10 + +* Wed Jul 26 2017 Fedora Release Engineering - 1.10.7-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild + +* Thu Jul 6 2017 Joe Orton - 1.10.7-1 +- update to 1.10.7 + +* Mon Jun 12 2017 Joe Orton - 1.10.6-1 +- update to 1.10.6 + +* Tue May 16 2017 Joe Orton - 1.10.5-1 +- update to 1.10.5 + +* Mon Apr 10 2017 Luboš Uhliarik - 1.10.1-1 +- Initial import (#1440780).