Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

apacheHttpd: 2.4.35 -> 2.4.37 #50819

Merged
merged 1 commit into from Nov 20, 2018
Merged

apacheHttpd: 2.4.35 -> 2.4.37 #50819

merged 1 commit into from Nov 20, 2018

Conversation

r-ryantm
Copy link
Contributor

Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools. This update was made based on information from https://repology.org/metapackage/apache-httpd/versions.

meta.description for apacheHttpd is: '"Apache HTTPD, the world's most popular web server"'.

Checks done (click to expand)
  • built on NixOS
  • Warning: no invocation of /nix/store/3ajwlpw4g29sjg02f5kmp7yw2z9yxm4m-apache-httpd-2.4.37/bin/dbmmanage had a zero exit code or showed the expected version
  • Warning: no invocation of /nix/store/3ajwlpw4g29sjg02f5kmp7yw2z9yxm4m-apache-httpd-2.4.37/bin/envvars-std had a zero exit code or showed the expected version
  • Warning: no invocation of /nix/store/3ajwlpw4g29sjg02f5kmp7yw2z9yxm4m-apache-httpd-2.4.37/bin/envvars had a zero exit code or showed the expected version
  • Warning: no invocation of /nix/store/3ajwlpw4g29sjg02f5kmp7yw2z9yxm4m-apache-httpd-2.4.37/bin/htpasswd had a zero exit code or showed the expected version
  • Warning: no invocation of /nix/store/3ajwlpw4g29sjg02f5kmp7yw2z9yxm4m-apache-httpd-2.4.37/bin/htdigest had a zero exit code or showed the expected version
  • Warning: no invocation of /nix/store/3ajwlpw4g29sjg02f5kmp7yw2z9yxm4m-apache-httpd-2.4.37/bin/htdbm had a zero exit code or showed the expected version
  • /nix/store/3ajwlpw4g29sjg02f5kmp7yw2z9yxm4m-apache-httpd-2.4.37/bin/ab passed the binary check.
  • /nix/store/3ajwlpw4g29sjg02f5kmp7yw2z9yxm4m-apache-httpd-2.4.37/bin/logresolve passed the binary check.
  • Warning: no invocation of /nix/store/3ajwlpw4g29sjg02f5kmp7yw2z9yxm4m-apache-httpd-2.4.37/bin/httxt2dbm had a zero exit code or showed the expected version
  • Warning: no invocation of /nix/store/3ajwlpw4g29sjg02f5kmp7yw2z9yxm4m-apache-httpd-2.4.37/bin/htcacheclean had a zero exit code or showed the expected version
  • Warning: no invocation of /nix/store/3ajwlpw4g29sjg02f5kmp7yw2z9yxm4m-apache-httpd-2.4.37/bin/rotatelogs had a zero exit code or showed the expected version
  • Warning: no invocation of /nix/store/3ajwlpw4g29sjg02f5kmp7yw2z9yxm4m-apache-httpd-2.4.37/bin/checkgid had a zero exit code or showed the expected version
  • Warning: no invocation of /nix/store/3ajwlpw4g29sjg02f5kmp7yw2z9yxm4m-apache-httpd-2.4.37/bin/fcgistarter had a zero exit code or showed the expected version
  • /nix/store/3ajwlpw4g29sjg02f5kmp7yw2z9yxm4m-apache-httpd-2.4.37/bin/httpd passed the binary check.
  • /nix/store/3ajwlpw4g29sjg02f5kmp7yw2z9yxm4m-apache-httpd-2.4.37/bin/apachectl passed the binary check.
  • 4 of 15 passed binary check by having a zero exit code.
  • 0 of 15 passed binary check by having the new version present in output.
  • found 2.4.37 with grep in /nix/store/3ajwlpw4g29sjg02f5kmp7yw2z9yxm4m-apache-httpd-2.4.37
  • directory tree listing: https://gist.github.com/ce3396099d85915cdc6df0b980d4c2e8
  • du listing: https://gist.github.com/d3cd9db0b7687582d84ba4492b79980a
Rebuild report (click to expand)

215 total rebuild path(s)

129 package rebuild(s)

129 x86_64-linux rebuild(s)
35 i686-linux rebuild(s)
16 x86_64-darwin rebuild(s)
35 aarch64-linux rebuild(s)

First fifty rebuilds by attrpath
apacheHttpd
apacheHttpd_2_4
arcanist
drush
gnome3.gnome-user-share
haxe
haxePackages.hxcpp
haxePackages.hxcs
haxePackages.hxjava
haxePackages.hxnodejs_4
haxe_3_2
haxe_3_4
hhvm
hxcpp
kcachegrind
kdeApplications.kcachegrind
limesurvey
lsp-plugins
mate.mate-user-share
matomo
mod_dnssd
mod_fastcgi
mod_python
mod_wsgi
modsecurity_standalone
nagios
neko
nextcloud-news-updater
perl526Packages.GoferTransporthttp
perl526Packages.libapreq2
perl526Packages.mod_perl2
perl528Packages.GoferTransporthttp
perl528Packages.libapreq2
perl528Packages.mod_perl2
perldevelPackages.GoferTransporthttp
perldevelPackages.libapreq2
perldevelPackages.mod_perl2
php
php71
php71Packages.apcu
php71Packages.apcu51
php71Packages.apcu_bc
php71Packages.ast
php71Packages.box
php71Packages.composer
php71Packages.couchbase
php71Packages.igbinary
php71Packages.imagick
php71Packages.mailparse
php71Packages.memcached

Instructions to test this update (click to expand)

Either download from Cachix:

nix-store -r /nix/store/3ajwlpw4g29sjg02f5kmp7yw2z9yxm4m-apache-httpd-2.4.37 \
  --option binary-caches 'https://cache.nixos.org/ https://r-ryantm.cachix.org/' \
  --option trusted-public-keys '
  r-ryantm.cachix.org-1:gkUbLkouDAyvBdpBX0JOdIiD2/DP1ldF3Z3Y6Gqcc4c=
  cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
  '

(r-ryantm's Cachix cache is only trusted for this store-path realization.)

Or, build yourself:

nix-build -A apacheHttpd https://github.com/r-ryantm/nixpkgs/archive/1b32158eab4e5bafd4d492e7209a18210b6d5eb8.tar.gz

After you've downloaded or built it, look at the files and if there are any, run the binaries:

ls -la /nix/store/3ajwlpw4g29sjg02f5kmp7yw2z9yxm4m-apache-httpd-2.4.37
ls -la /nix/store/3ajwlpw4g29sjg02f5kmp7yw2z9yxm4m-apache-httpd-2.4.37/bin

cc @lovek323 @peti for testing.

@r-ryantm
apacheHttpd: 2.4.35 -> 2.4.37
1b32158 
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/apache-httpd/versions
@GrahamcOfBorg
Copy link

Success on x86_64-linux (full log)

Attempted: apacheHttpd

Partial log (click to expand)

  /nix/store/pphkcqkgigk1zajsziz1rlq838xaqlz2-apache-httpd-2.4.37
  /nix/store/py9qx5zlmrl30qk6g25gkqbz3sid168f-lynx-2.8.9dev.17
  /nix/store/xdg1nzaf7gcgicymsk4kb00l8jvidrir-libxml2-2.9.8
copying path '/nix/store/bky5nkd75mv1b93fwp0grzp6vxs0ways-apr-1.6.5' from 'https://cache.nixos.org'...
copying path '/nix/store/xdg1nzaf7gcgicymsk4kb00l8jvidrir-libxml2-2.9.8' from 'https://cache.nixos.org'...
copying path '/nix/store/i8azrw4fg1wxkka3bym7sz2gd09ih74v-brotli-1.0.7-lib' from 'https://cache.nixos.org'...
copying path '/nix/store/py9qx5zlmrl30qk6g25gkqbz3sid168f-lynx-2.8.9dev.17' from 'https://cache.nixos.org'...
copying path '/nix/store/m6k2jsll6sgmnxjyck0y0ksw2zipgd5w-apr-util-1.6.1' from 'https://cache.nixos.org'...
copying path '/nix/store/pphkcqkgigk1zajsziz1rlq838xaqlz2-apache-httpd-2.4.37' from 'https://cache.nixos.org'...
/nix/store/pphkcqkgigk1zajsziz1rlq838xaqlz2-apache-httpd-2.4.37

@GrahamcOfBorg
Copy link

Success on aarch64-linux (full log)

Attempted: apacheHttpd

Partial log (click to expand)

shrinking RPATHs of ELF executables and libraries in /nix/store/k6inaazsgb6035ncyg3d0f2ddzf4c23d-apache-httpd-2.4.37-man
gzipping man pages under /nix/store/k6inaazsgb6035ncyg3d0f2ddzf4c23d-apache-httpd-2.4.37-man/share/man/
strip is /nix/store/1jprj383qnzd50vn8qq3a0id6a08a9fi-binutils-2.30/bin/strip
patching script interpreter paths in /nix/store/k6inaazsgb6035ncyg3d0f2ddzf4c23d-apache-httpd-2.4.37-man
checking for references to /build/ in /nix/store/k6inaazsgb6035ncyg3d0f2ddzf4c23d-apache-httpd-2.4.37-man...
shrinking RPATHs of ELF executables and libraries in /nix/store/ypsl7p0nx9sfrarlbsflwsgrr7lllr7f-apache-httpd-2.4.37-doc
strip is /nix/store/1jprj383qnzd50vn8qq3a0id6a08a9fi-binutils-2.30/bin/strip
patching script interpreter paths in /nix/store/ypsl7p0nx9sfrarlbsflwsgrr7lllr7f-apache-httpd-2.4.37-doc
checking for references to /build/ in /nix/store/ypsl7p0nx9sfrarlbsflwsgrr7lllr7f-apache-httpd-2.4.37-doc...
/nix/store/jksrq2j9kvi2l4qw91iccgsycyiw0z31-apache-httpd-2.4.37

@GrahamcOfBorg
Copy link

Timed out, unknown build status on x86_64-darwin (full log)

Attempted: apacheHttpd

Partial log (click to expand)

cannot build derivation '/nix/store/py4pqknahihs2d2g474rd9z13qsf63yr-configd-osx-10.8.5.drv': 8 dependencies couldn't be built
cannot build derivation '/nix/store/5fi982rzn1d6jsz05i3byr2ml09iaqwv-openldap-2.4.46.drv': 6 dependencies couldn't be built
cannot build derivation '/nix/store/5sb8mik24lcla3cs07x6rgsxqaks0bm9-apr-util-1.6.1.drv': 7 dependencies couldn't be built
cannot build derivation '/nix/store/233zmvl13lqvcmh1xbbfilk807w70xjl-python-2.7.15.drv': 8 dependencies couldn't be built
cannot build derivation '/nix/store/9dbx9iwgrm0bsbjrbjd0plxrbmcpyd64-libxml2-2.9.8.drv': 3 dependencies couldn't be built
cannot build derivation '/nix/store/bcqlfchwwvp2r8n9hr50kln17i3rsp6z-libarchive-3.3.3.drv': 6 dependencies couldn't be built
cannot build derivation '/nix/store/igfxi0frb1hsn2hhhwmwnxnlfwdzlvqq-cmake-3.12.1.drv': 9 dependencies couldn't be built
cannot build derivation '/nix/store/d0rh4gb360fkg0caawmrnqndkrw9naq8-brotli-1.0.7.drv': 2 dependencies couldn't be built
cannot build derivation '/nix/store/fq4xhfbjj3lp225dfnwdqsq7dk2jn8xp-apache-httpd-2.4.37.drv': 10 dependencies couldn't be built
error: build of '/nix/store/fq4xhfbjj3lp225dfnwdqsq7dk2jn8xp-apache-httpd-2.4.37.drv' failed

@c0bw3b
Copy link
Contributor

c0bw3b commented Nov 20, 2018

Changelog:

Changes with Apache 2.4.37

*) mod_ssl: Fix HTTP/2 failures when using OpenSSL 1.1.1. [Rainer Jung]

*) mod_ssl: Fix crash during SSL renegotiation with OptRenegotiate set,
when client certificates are available from the original handshake
but were originally not verified and should get verified now.
This is a regression in 2.4.36 (unreleased). [Ruediger Pluem]

*) mod_ssl: Correctly merge configurations that have client certificates set
by SSLProxyMachineCertificate{File|Path}. [Ruediger Pluem]

Changes with Apache 2.4.36

*) mod_brotli, mod_deflate: Restore the separate handling of 304 Not Modified
responses. Regression introduced in 2.4.35.

*) mod_proxy_scgi, mod_proxy_uwsgi: improve error handling when sending the
body of the response. [Jim Jagielski]

*) mod_http2: adding defensive code for stream EOS handling, in case the request handler
missed to signal it the normal way (eos buckets). Addresses github issues
icing/mod_h2#164, icing/mod_h2#167
and icing/mod_h2#170. [Stefan Eissing]

*) ab: Add client certificate support. [Graham Leggett]

*) ab: Disable printing temp key for OpenSSL before
version 1.0.2. SSL_get_server_tmp_key is not available
there. [Rainer Jung]

*) mod_ssl: Fix a regression that the configuration settings for verify mode
and verify depth were taken from the frontend connection in case of
connections by the proxy to the backend. PR 62769. [Ruediger Pluem]

*) MPMs: Initialize all runtime/asynchronous objects on a dedicated pool and
before signals handling to avoid lifetime issues on restart or shutdown.
PR 62658. [Yann Ylavic]

*) mod_ssl: Add support for OpenSSL 1.1.1 and TLSv1.3. TLSv1.3 has
behavioural changes compared to v1.2 and earlier; client and
configuration changes should be expected. SSLCipherSuite is
enhanced for TLSv1.3 ciphers, but applies at vhost level only.
[Stefan Eissing, Yann Ylavic, Ruediger Pluem, Joe Orton]

*) mod_auth_basic: Be less tolerant when parsing the credencial. Only spaces
should be accepted after the authorization scheme. \t are also tolerated.
[Christophe Jaillet]

*) mod_proxy_hcheck: Fix issues with interval determination. PR 62318
[Jim Jagielski]

*) mod_proxy_hcheck: Fix issues with TCP health checks. PR 61499
[Dominik Stillhard <dominik.stillhard united-security-providers.ch>]

) mod_proxy_hcheck: take balancer's SSLProxy directives into account.
[Jim Jagielski]

*) mod_status, mod_echo: Fix the display of client addresses.
They were truncated to 31 characters which is not enough for IPv6 addresses.
This is done by deprecating the use of the 'client' field and using
the new 'client64' field in worker_score.
PR 54848 [Bernhard Schmidt , Jim Jagielski]

Apparently no CVE fixes that would warrant a backport.
https://httpd.apache.org/security/vulnerabilities_24.html

@fpletz fpletz merged commit d154cea into NixOS:staging Nov 20, 2018
@r-ryantm r-ryantm deleted the auto-update/apache-httpd branch December 8, 2018 22:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
10.rebuild-darwin: 0 10.rebuild-linux: 0
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
4 participants
@r-ryantm @GrahamcOfBorg @c0bw3b @fpletz