Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[bitnami/moodle]: Upgrade Apache to 2.4.59-0 #64959

Closed
wants to merge 1 commit into from
Closed

[bitnami/moodle]: Upgrade Apache to 2.4.59-0 #64959

wants to merge 1 commit into from

Conversation

nickmarden
Copy link

@nickmarden nickmarden commented Apr 8, 2024 •
edited by carrodher
Loading

@github-actions github-actions bot added the triage Triage is needed label Apr 8, 2024
@github-actions github-actions bot requested a review from carrodher April 8, 2024 16:00
@nickmarden
Copy link
Author

I should have done the obvious thing and verified that https://downloads.bitnami.com/files/stacksmith/apache-2.4.59-linux-amd64-debian-12.tar.gz existed :-/ ... it doesn't.

@nickmarden
[bitnami/moodle]: Upgrade Apache to 2.4.59
672224f 
Solves CVE-2024-27316 (HIGH), CVE-2023-38709 (UNKKNOWN), and
CVE-2024-24795 (UNKNOWN)

Signed-off-by: Nick Marden <nick@rrsoft.co>
@nickmarden nickmarden changed the title [bitnami/moodle]: Upgrade Apache to 2.4.59 [bitnami/moodle]: Upgrade Apache to 2.4.59-0 Apr 8, 2024
@nickmarden
Copy link
Author

I should have done the obvious thing and verified that https://downloads.bitnami.com/files/stacksmith/apache-2.4.59-linux-amd64-debian-12.tar.gz existed :-/ ... it doesn't.

However, https://downloads.bitnami.com/files/stacksmith/apache-2.4.59-0-linux-amd64-debian-12.tar.gz does exist, so I fixed the MR accordingly. However, I feel like I'm doing this wrong because the cached prebuildfs/opt/bitnami/.bitnami_components.json still contains the old version.

@carrodher
Copy link
Member

Thanks for the changes! Please note our automated test & release pipeline just released a new version of every container including Apache 2.4.58 so the changes won't apply once rebased from main.

@carrodher carrodher closed this Apr 9, 2024
@github-actions github-actions bot added the solved label Apr 9, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@carrodher carrodher Awaiting requested review from carrodher

Assignees

@carrodher carrodher

Labels
solved triage Triage is needed
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

[bitnami/moodle]: Close some CVEs in vendorized Apache via upgrade
2 participants
@nickmarden @carrodher