nghttp2: fix CVE-2024-28182
authorHirokazu MORIKAWA <morikw2@gmail.com>
Wed, 10 Apr 2024 03:55:02 +0000 (12:55 +0900)
committerTianling Shen <cnsztl@gmail.com>
Sat, 13 Apr 2024 05:18:27 +0000 (13:18 +0800)
commit50810923da4373c9a6e997e2c2ce7b1d453f5ac9
treefd7fc1d60950d33be8a47c6e88e0301b49bf579e
parenta5557a2a47f57c651dd5dc97eac40de26617de91
nghttp2: fix CVE-2024-28182

update to v1.61.0
CVE-2024-28182: Reading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usage

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
libs/nghttp2/Makefile