Files
buildroot/package/nghttp2/nghttp2.mk
Mattias Walström 7d26ff6c14 package/nghttp2: security bump to 1.68.1
For changelog, see:
https://github.com/nghttp2/nghttp2/releases/tag/v1.68.1

Fixes:
CVE-2026-27135:
nghttp2 Denial of service: Assertion failure due to the missing
state validation:
https://www.cve.org/CVERecord?id=CVE-2026-27135

Signed-off-by: Mattias Walström <lazzer@gmail.com>
[Julien: add links to changelog and CVE]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-25 20:56:21 +01:00

25 lines
770 B
Makefile

################################################################################
#
# nghttp2
#
################################################################################
NGHTTP2_VERSION = 1.68.1
NGHTTP2_SOURCE = nghttp2-$(NGHTTP2_VERSION).tar.xz
NGHTTP2_SITE = https://github.com/nghttp2/nghttp2/releases/download/v$(NGHTTP2_VERSION)
NGHTTP2_LICENSE = MIT
NGHTTP2_LICENSE_FILES = COPYING
NGHTTP2_INSTALL_STAGING = YES
NGHTTP2_CPE_ID_VENDOR = nghttp2
NGHTTP2_DEPENDENCIES = host-pkgconf
NGHTTP2_CONF_OPTS = --enable-lib-only
define NGHTTP2_INSTALL_CLEAN_HOOK
# Remove fetch-ocsp-response script unused by library
$(Q)$(RM) -rf $(TARGET_DIR)/usr/share/nghttp2
endef
NGHTTP2_POST_INSTALL_TARGET_HOOKS += NGHTTP2_INSTALL_CLEAN_HOOK
$(eval $(autotools-package))