From e88f57539ed5cc600e3e572061a10ff259e98400 Mon Sep 17 00:00:00 2001 From: Gyorgy Sarvari Date: Mon, 20 Apr 2026 11:33:16 +0200 Subject: [PATCH] ngtcp2: upgrade 1.22.0 -> 1.22.1 Contains fix for CVE-2026-40170 (which is tracked without version by NVD, so also mark explicitly as patched). Changelog: https://github.com/ngtcp2/ngtcp2/releases/tag/v1.22.1 Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj --- .../ngtcp2/{ngtcp2_1.22.0.bb => ngtcp2_1.22.1.bb} | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) rename meta-networking/recipes-protocols/ngtcp2/{ngtcp2_1.22.0.bb => ngtcp2_1.22.1.bb} (84%) diff --git a/meta-networking/recipes-protocols/ngtcp2/ngtcp2_1.22.0.bb b/meta-networking/recipes-protocols/ngtcp2/ngtcp2_1.22.1.bb similarity index 84% rename from meta-networking/recipes-protocols/ngtcp2/ngtcp2_1.22.0.bb rename to meta-networking/recipes-protocols/ngtcp2/ngtcp2_1.22.1.bb index f7c0ee0d4f..acff7b548b 100644 --- a/meta-networking/recipes-protocols/ngtcp2/ngtcp2_1.22.0.bb +++ b/meta-networking/recipes-protocols/ngtcp2/ngtcp2_1.22.1.bb @@ -4,8 +4,8 @@ BUGTRACKER = "https://github.com/ngtcp2/ngtcp2/issues" LICENSE = "MIT" LIC_FILES_CHKSUM = "file://COPYING;md5=de0966c8ff4f62661a3da92967a75434" -SRC_URI = "gitsm://github.com/ngtcp2/ngtcp2;protocol=https;branch=main;tag=v${PV};name=ngtcp2" -SRCREV = "2a441e8540d192b0707989b146ce80efcae5f0d6" +SRC_URI = "gitsm://github.com/ngtcp2/ngtcp2;protocol=https;branch=release-1.22;tag=v${PV}" +SRCREV = "716e64b05f4a3709dfc0b0522cf9fd4456d055e5" DEPENDS = "brotli libev nghttp3" @@ -18,3 +18,5 @@ PACKAGECONFIG[shared] = "-DENABLE_SHARED_LIB=ON, -DENABLE_SHARED_LIB=OFF" PACKAGECONFIG[build-lib-only] = "-DENABLE_LIB_ONLY=ON, -DENABLE_LIB_ONLY=OFF" PACKAGECONFIG[openssl] = "-DENABLE_OPENSSL=ON, -DENABLE_OPENSSL=OFF, openssl" PACKAGECONFIG[gnutls] = "-DENABLE_GNUTLS=ON, -DENABLE_GNUTLS=OFF, gnutls" + +CVE_STATUS[CVE-2026-40170] = "fixed-version: fixed in 1.22.1"