[openwrt/openwrt] nghttp2: bump to 1.41.0

LEDE Commits lede-commits at lists.infradead.org
Sat Jul 4 15:18:42 EDT 2020


dedeckeh pushed a commit to openwrt/openwrt.git, branch openwrt-19.07:
https://git.openwrt.org/d46650de7c0e5aed7b70f67940588124427248ab

commit d46650de7c0e5aed7b70f67940588124427248ab
Author: Hans Dedecker <dedeckeh at gmail.com>
AuthorDate: Sat Jun 6 14:00:37 2020 +0200

    nghttp2: bump to 1.41.0
    
    8f7b008b Update bash_completion
    83086ba9 Update manual pages
    c3b46625 Merge pull request from GHSA-q5wr-xfw9-q7xr
    3eecc2ca Bump version number to v1.41.0, LT revision to 34:0:20
    881c060d Update AUTHORS
    f8da73bd Earlier check for settings flood
    336a98fe Implement max settings option
    ef415836 Revert "Add missing connection error handling"
    979e6c53 Merge pull request #1459 from nghttp2/proxyprotov2
    b7d16101 Add missing connection error handling
    cd53bd81 Merge pull request #1460 from gportay/patch-1
    e5625b8c Fix doc
    c663349f integration: Add PROXY protocol v2 tests
    854e9fe3 nghttpx: Always call init_forwarded_for
    c60ea227 Update doc
    49cd8e6e nghttpx: Add PROXY-protocol v2 support
    3b17a659 Merge pull request #1453 from Leo-Neat/master
    600fcdf5 Merge pull request #1455 from xjtian/long_serials
    4922bb41 static_cast size parameter in StringRef constructor to size_t
    aad86975 Fix get_x509_serial for long serial numbers
    dc7a7df6 Adding CIFuzz
    b3f85e2d Merge pull request #1444 from nghttp2/fix-recv-window-flow-control-issue
    ffb49c6c Merge pull request #1435 from geoffhill/master
    2ec58551 Fix receiving stream data stall
    459df42b Merge pull request #1442 from nghttp2/upgrade-llhttp
    a4c1fed5 Bump llhttp to 2.0.4
    866eadb5 Enable session_create_idle_stream test, fix errors
    5e13274b Fix typo
    e0d7f7de h2load: Allow port in --connect-to
    df575f96 h2load: add --connect-to option
    1fff7379 clang-format-9
    b40c6c86 Merge pull request #1418 from vszakats/patch-1
    9bc2c75e lib/CMakeLists.txt: Make hard-coded static lib suffix optional
    2d5f7659 Bump up version number to 1.41.0-DEV
    
    Signed-off-by: Hans Dedecker <dedeckeh at gmail.com>
    
    Note this is cherry-pick from master. It fixes CVE-2020-11080
    and  https://github.com/nxhack/openwrt-node-packages/issues/679
    
    Signed-off-by: Jan Pavlinec <jan.pavlinec at nic.cz>
---
 package/libs/nghttp2/Makefile | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/package/libs/nghttp2/Makefile b/package/libs/nghttp2/Makefile
index 4fb26319ad..06150b78d4 100644
--- a/package/libs/nghttp2/Makefile
+++ b/package/libs/nghttp2/Makefile
@@ -1,12 +1,12 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=nghttp2
-PKG_VERSION:=1.39.2
+PKG_VERSION:=1.41.0
 PKG_RELEASE:=1
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz
 
 PKG_SOURCE_URL:=https://github.com/nghttp2/nghttp2/releases/download/v$(PKG_VERSION)
-PKG_HASH:=a2d216450abd2beaf4e200c168957968e89d602ca4119338b9d7ab059fd4ce8b
+PKG_HASH:=abc25b8dc601f5b3fefe084ce50fcbdc63e3385621bee0cbfa7b57f9ec3e67c2
 
 PKG_LICENSE:=MIT
 PKG_LICENSE_FILES:=COPYING



More information about the lede-commits mailing list