Files
Mattias Walström 7d26ff6c14 package/nghttp2: security bump to 1.68.1
For changelog, see:
https://github.com/nghttp2/nghttp2/releases/tag/v1.68.1

Fixes:
CVE-2026-27135:
nghttp2 Denial of service: Assertion failure due to the missing
state validation:
https://www.cve.org/CVERecord?id=CVE-2026-27135

Signed-off-by: Mattias Walström <lazzer@gmail.com>
[Julien: add links to changelog and CVE]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-25 20:56:21 +01:00
..