mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-07-27 07:57:27 +00:00
Jasper Orschulko
a1c4d361ed
Reduces the impact of HTTP/2 Stream Reset flooding in the nginx product (CVE-2023-44487). See: https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/ This patch only reduces the impact and does not completely mitigate the CVE in question, the latter being due to a design flaw in the HTTP/2 protocol itself. For transparancy reasons I therefore opted to not mark the CVE as resolved, so that integrators can decide for themselves, wheither to enable HTTP/2 support or allow HTTP/1.1 connections only. Signed-off-by: Jasper Orschulko <jasper@fancydomain.eu> Signed-off-by: Armin Kuster <akuster808@gmail.com>
12 lines
422 B
BlitzBasic
12 lines
422 B
BlitzBasic
require nginx.inc
|
|
|
|
LIC_FILES_CHKSUM = "file://LICENSE;md5=52e384aaac868b755b93ad5535e2d075"
|
|
|
|
SRC_URI[md5sum] = "45a80f75336c980d240987badc3dcf60"
|
|
SRC_URI[sha256sum] = "f11c2a6dd1d3515736f0324857957db2de98be862461b5a542a3ac6188dbe32b"
|
|
|
|
SRC_URI += "file://CVE-2019-20372.patch \
|
|
file://CVE-2022-41741-CVE-2022-41742.patch \
|
|
file://0001-HTTP-2-per-iteration-stream-handling-limit.patch \
|
|
"
|