# Module Magic Number %{!?_httpd_mmn: %global _httpd_mmn %(cat %{_includedir}/httpd/.mmn 2>/dev/null || echo 0-0)} Name: mod_http2 Version: 1.15.19 Release: 5%{?dist} Summary: module implementing HTTP/2 for Apache 2 License: ASL 2.0 URL: https://icing.github.io/mod_h2/ Source0: https://github.com/icing/mod_h2/releases/download/v%{version}/mod_http2-%{version}.tar.gz Patch1: mod_http2-1.14.1-buildfix.patch Patch2: mod_http2-1.15.14-openssl30.patch # Security patches: # https://bugzilla.redhat.com/show_bug.cgi?id=2034672 Patch100: mod_http2-1.15.19-CVE-2021-44224.patch # https://bugzilla.redhat.com/show_bug.cgi?id=2176209 Patch101: mod_http2-1.15.19-CVE-2023-25690.patch BuildRequires: make BuildRequires: gcc BuildRequires: pkgconfig, httpd-devel >= 2.4.20, libnghttp2-devel >= 1.7.0, openssl-devel >= 1.0.2 BuildRequires: autoconf, libtool, /usr/bin/hostname Requires: httpd-mmn = %{_httpd_mmn} Requires: httpd >= 2.4.51-7 Conflicts: httpd < 2.4.57 %description The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers. %prep %setup -q %patch1 -p1 -b .buildfix %patch2 -p1 -b .openssl30 %patch100 -p1 -b .CVE-2021-44224 %patch101 -p1 -b .CVE-2023-25690 %build autoreconf -i %configure --with-apxs=%{_httpd_apxs} %make_build %install %make_install rm -rf %{buildroot}/etc/httpd/share/doc/ # create configuration mkdir -p %{buildroot}%{_httpd_modconfdir} echo "LoadModule http2_module modules/mod_http2.so" > %{buildroot}%{_httpd_modconfdir}/10-h2.conf echo "LoadModule proxy_http2_module modules/mod_proxy_http2.so" > %{buildroot}%{_httpd_modconfdir}/10-proxy_h2.conf %files %doc README.md ChangeLog AUTHORS %license LICENSE %config(noreplace) %{_httpd_modconfdir}/10-h2.conf %config(noreplace) %{_httpd_modconfdir}/10-proxy_h2.conf %{_httpd_moddir}/mod_http2.so %{_httpd_moddir}/mod_proxy_http2.so %changelog * Wed Aug 16 2023 Luboš Uhliarik - 1.15.19-5 - Resolves: #2177753 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy * Mon Dec 05 2022 Luboš Uhliarik - 1.15.19-4 - Resolves: #2143176 - Dependency from mod_http2 on httpd broken * Mon Mar 21 2022 Luboš Uhliarik - 1.15.19-3 - Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF in forward proxy configurations * Mon Aug 09 2021 Mohan Boddu - 1.15.19-2 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 * Fri Jun 18 2021 Luboš Uhliarik - 1.15.19-1 - new version 1.15.19 - Resolves: #1970918 - mod_http2: rebase to 1.15.19 * Wed Jun 16 2021 Mohan Boddu - 1.15.14-6 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 * Fri May 7 2021 Joe Orton - 1.15.14-5 - avoid use of deprecated OpenSSL 3.0 API (#1958042) * Fri Apr 16 2021 Mohan Boddu - 1.15.14-4 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 * Tue Jan 26 2021 Fedora Release Engineering - 1.15.14-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Thu Aug 27 2020 Joe Orton - 1.15.14-2 - use apxs via _httpd_apxs macro * Mon Aug 17 2020 Joe Orton - 1.15.14-1 - update to 1.15.14 * Tue Jul 28 2020 Fedora Release Engineering - 1.15.7-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Fri Mar 6 2020 Joe Orton - 1.15.7-1 - update to 1.15.7 * Fri Feb 7 2020 Joe Orton - 1.15.5-1 - update to 1.15.5 * Wed Jan 29 2020 Fedora Release Engineering - 1.15.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Mon Aug 19 2019 Lubos Uhliarik - 1.15.3-2 - Rebuilt with newer nghttp2 * Thu Aug 8 2019 Joe Orton - 1.15.3-1 - update to 1.15.3 * Thu Jul 25 2019 Fedora Release Engineering - 1.15.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Wed May 29 2019 Joe Orton - 1.15.1-1 - update to 1.15.1 * Wed May 22 2019 Joe Orton - 1.15.0-1 - update to 1.15.0 * Thu Mar 14 2019 Joe Orton - 1.14.1-1 - update to 1.14.1 * Tue Mar 5 2019 Joe Orton - 1.14.0-1 - update to 1.14.0 * Tue Feb 26 2019 Joe Orton - 1.13.0-1 - update to 1.13.0 * Fri Feb 01 2019 Fedora Release Engineering - 1.12.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Fri Jan 18 2019 Joe Orton - 1.12.1-1 - update to 1.12.1 * Tue Oct 09 2018 Lubos Uhliarik - 1.11.2-1 - new version 1.11.2 * Fri Oct 05 2018 Luboš Uhliarik - 1.11.1-1 - new version 1.11.1 (CVE-2018-11763) * Fri Jul 13 2018 Fedora Release Engineering - 1.10.20-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Wed May 2 2018 Joe Orton - 1.10.20-1 - update to 1.10.20 * Wed Apr 18 2018 Joe Orton - 1.10.18-1 - update to 1.10.18 * Thu Mar 29 2018 Joe Orton - 1.10.16-1 - update to 1.10.16 (CVE-2018-1302) * Thu Feb 08 2018 Fedora Release Engineering - 1.10.13-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Tue Nov 7 2017 Joe Orton - 1.10.13-1 - update to 1.10.13 * Fri Oct 20 2017 Joe Orton - 1.10.12-1 - update to 1.10.12 * Thu Aug 03 2017 Fedora Release Engineering - 1.10.10-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Mon Jul 31 2017 Joe Orton - 1.10.10-1 - update to 1.10.10 * Wed Jul 26 2017 Fedora Release Engineering - 1.10.7-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Thu Jul 6 2017 Joe Orton - 1.10.7-1 - update to 1.10.7 * Mon Jun 12 2017 Joe Orton - 1.10.6-1 - update to 1.10.6 * Tue May 16 2017 Joe Orton - 1.10.5-1 - update to 1.10.5 * Mon Apr 10 2017 Luboš Uhliarik - 1.10.1-1 - Initial import (#1440780).