aboutsummaryrefslogtreecommitdiff
path: root/libs
diff options
context:
space:
mode:
authorHirokazu MORIKAWA <morikw2@gmail.com>2024-04-10 12:55:02 +0900
committerTianling Shen <cnsztl@gmail.com>2024-04-13 13:18:27 +0800
commit50810923da4373c9a6e997e2c2ce7b1d453f5ac9 (patch)
treefd7fc1d60950d33be8a47c6e88e0301b49bf579e /libs
parenta5557a2a47f57c651dd5dc97eac40de26617de91 (diff)
nghttp2: fix CVE-2024-28182
update to v1.61.0 CVE-2024-28182: Reading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usage Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
Diffstat (limited to 'libs')
-rw-r--r--libs/nghttp2/Makefile6
1 files changed, 3 insertions, 3 deletions
diff --git a/libs/nghttp2/Makefile b/libs/nghttp2/Makefile
index 19a4ab6c0..312835ba8 100644
--- a/libs/nghttp2/Makefile
+++ b/libs/nghttp2/Makefile
@@ -1,12 +1,12 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=nghttp2
-PKG_VERSION:=1.57.0
+PKG_VERSION:=1.61.0
PKG_RELEASE:=1
-PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz
+PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://github.com/nghttp2/nghttp2/releases/download/v$(PKG_VERSION)
-PKG_HASH:=9210b0113109f43be526ac5835d58a701411821a4d39e155c40d67c40f47a958
+PKG_HASH:=aa7594c846e56a22fbf3d6e260e472268808d3b49d5e0ed339f589e9cc9d484c
PKG_MAINTAINER:=Hans Dedecker <dedeckeh@gmail.com>
PKG_LICENSE:=MIT