mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-07-27 07:57:27 +00:00
Jasper Orschulko
a1c4d361ed
Reduces the impact of HTTP/2 Stream Reset flooding in the nginx product (CVE-2023-44487). See: https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/ This patch only reduces the impact and does not completely mitigate the CVE in question, the latter being due to a design flaw in the HTTP/2 protocol itself. For transparancy reasons I therefore opted to not mark the CVE as resolved, so that integrators can decide for themselves, wheither to enable HTTP/2 support or allow HTTP/1.1 connections only. Signed-off-by: Jasper Orschulko <jasper@fancydomain.eu> Signed-off-by: Armin Kuster <akuster808@gmail.com>
13 lines
476 B
BlitzBasic
13 lines
476 B
BlitzBasic
require nginx.inc
|
|
|
|
# 1.16.x branch is the current stable branch, the recommended default
|
|
# 1.17.x is the current mainline branches containing all new features
|
|
DEFAULT_PREFERENCE = "-1"
|
|
|
|
LIC_FILES_CHKSUM = "file://LICENSE;md5=52e384aaac868b755b93ad5535e2d075"
|
|
|
|
SRC_URI[md5sum] = "29cd861a13aae69a058cbabaae86177b"
|
|
SRC_URI[sha256sum] = "97d23ecf6d5150b30e284b40e8a6f7e3bb5be6b601e373a4d013768d5a25965b"
|
|
|
|
SRC_URI += "file://0001-HTTP-2-per-iteration-stream-handling-limit.patch"
|