mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-08-01 21:23:51 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/nghttp2: security bump to 1.68.1

Browse Source 
For changelog, see:
https://github.com/nghttp2/nghttp2/releases/tag/v1.68.1

Fixes:
CVE-2026-27135:
nghttp2 Denial of service: Assertion failure due to the missing
state validation:
https://www.cve.org/CVERecord?id=CVE-2026-27135

Signed-off-by: Mattias Walström <lazzer@gmail.com>
[Julien: add links to changelog and CVE]
Signed-off-by: Julien Olivain <ju.o@free.fr>
This commit is contained in:
Mattias Walström
2026-03-25 14:45:26 +01:00
committed by Julien Olivain
parent 50eca46e35
commit 7d26ff6c14
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
package/nghttp2/nghttp2.hash
View File

@@ -1,3 +1,3 @@
# Locally calculated
sha256 5511d3128850e01b5b26ec92bf39df15381c767a63441438b25ad6235def902c nghttp2-1.68.0.tar.xz
sha256 6abd7ab0a7f1580d5914457cb3c85eb80455657ee5119206edbd7f848c14f0b2 nghttp2-1.68.1.tar.xz
sha256 6b94f3abc1aabd0c72a7c7d92a77f79dda7c8a0cb3df839a97890b4116a2de2a COPYING

2
package/nghttp2/nghttp2.mk
View File

@@ -4,7 +4,7 @@
#
################################################################################
NGHTTP2_VERSION = 1.68.0
NGHTTP2_VERSION = 1.68.1
NGHTTP2_SOURCE = nghttp2-$(NGHTTP2_VERSION).tar.xz
NGHTTP2_SITE = https://github.com/nghttp2/nghttp2/releases/download/v$(NGHTTP2_VERSION)
NGHTTP2_LICENSE = MIT