From patchwork Thu Apr 2 13:05:54 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ashish Sharma X-Patchwork-Id: 85162 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id DA23CD3941E for ; Thu, 2 Apr 2026 13:06:04 +0000 (UTC) Received: from alln-iport-3.cisco.com (alln-iport-3.cisco.com [173.37.142.90]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.15197.1775135157001569592 for ; Thu, 02 Apr 2026 06:05:57 -0700 Authentication-Results: mx.groups.io; dkim=none (message not signed); spf=pass (domain: cisco.com, ip: 173.37.142.90, mailfrom: ashissh7@cisco.com) X-CSE-ConnectionGUID: 3OVz/vAiQ561yLRgXfWDmQ== X-CSE-MsgGUID: cFpbHtPCSoOsUK5afotH9Q== X-IPAS-Result: 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 IronPort-Data: A9a23:QUkavqzEh3F8VJZByMZ6t+drxyrEfRIJ4+MujC+fZmUNrF6WrkVSy 2VLWjjQMvrfNGH9eNklPN7g/R9QusLRzoRmTFBk/1hgHilAwSbn6Xt1DatR0we6dJCroJdPt p1GAjX4BJlqCCKa/lHxYuaJQUBUjcmgXqD7BPPPJhd/TAplTDZJoR94kobVuKYw6TSCK13L4 4iaT/H3Ygf/hWYoajhMsspvlTs21BjMkGJA1rABTagjUG/2zxE9EJ8ZLKetGHr0KqE88jmSH rurIBmRpws1zj91Yj+Xuu+Tnn4iHtY+CTOzZk9+AMBOtPTtShsaic7XPNJEAateZq7gc9pZk L2hvrToIesl0zGldOk1C3Fl/y9C0aJuo5j5Mz+hmM2qkhOfYl/WzMVgM20zBNhNkgp3KTkmG f0wMjsBaFWHwumx2r/+ErMqjcU4J86tN4Qa0p1i5WiGVrB9HtaZHviMvIQJtNszrpgm8fL2b tEZaCF0bEvoaBxUMVBRA5U79AutrialL2cB8wzE+8Lb5UDY4hR78KTVG+HSXce3ZphckEGEh jP/qjGR7hYycYb3JSC+2mqlhubDnD/2U4ITGZW38/drhBuYwWl7IBoOWF22pPO0hkKzV5dUL FYZ0i4vtrQpskuzQ9/wWhe1rHKJslgbQdU4LgEhwBuGxqyR50OSAXIJC2YbLtcnr8QxAzct0 zdlgu/UONCmi5XNIVr1y1tehWra1fQ9RYPaWRI5cA== IronPort-HdrOrdr: A9a23:VcPa2Kx79/68GJXJqNfXKrPwJ71zdoMgy1knxilNoNJuHfBw8P re+cjzuiWUtN98YhwdcLO7Scu9qA3nlaKdiLN5VdzJYOCMggWVxe9ZgbcKuweQeBEXMoVmpM Bdm28UMqyVMWRH X-Talos-CUID: 9a23:UKybZ2nfBv1N8I79UokkyaiZhKPXOSb68mWXPWa5MDs3Eayxc1Cg9pxIlvM7zg== X-Talos-MUID: 9a23:Zlqk1AY7iJtekeBTvBH0jhF+DOxT5IO1NWNQmJsBp+nVDHkl X-IronPort-Anti-Spam-Filtered: true X-IronPort-AV: E=Sophos;i="6.23,155,1770595200"; d="scan'208";a="724213696" Received: from rcdn-l-core-02.cisco.com ([173.37.255.139]) by alln-iport-3.cisco.com with ESMTP/TLS/TLS_AES_256_GCM_SHA384; 02 Apr 2026 13:05:56 +0000 Received: from sjc-ads-21720.cisco.com (sjc-ads-21720.cisco.com [10.128.165.208]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by rcdn-l-core-02.cisco.com (Postfix) with ESMTPS id DF37518000356; Thu, 2 Apr 2026 13:05:55 +0000 (GMT) Received: by sjc-ads-21720.cisco.com (Postfix, from userid 1869324) id 8DAA0CC1288; Thu, 2 Apr 2026 06:05:55 -0700 (PDT) From: Ashish Sharma To: openembedded-core@lists.openembedded.org Cc: Ashish Sharma , ashissh7@cisco.com Subject: [OE-core][whinlatter][PATCH] nghttp2: upgrade 1.66.0 -> 1.68.1 Date: Thu, 2 Apr 2026 06:05:54 -0700 Message-Id: <20260402130554.3466031-1-pahaditechie@gmail.com> X-Mailer: git-send-email 2.35.6 MIME-Version: 1.0 X-Outbound-SMTP-Client: 10.128.165.208, sjc-ads-21720.cisco.com X-Outbound-Node: rcdn-l-core-02.cisco.com List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 02 Apr 2026 13:06:04 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/234521 Upgrade nghttp2 to 1.68.1 which includes fixes from upstream, including the fix for CVE-2026-27135. CVE-2026-27135: Assertion failure in nghttp2_session_terminate_session() Release: https://github.com/nghttp2/nghttp2/releases/tag/v1.68.1 CC: ashissh7@cisco.com Signed-off-by: Ashish Sharma --- ...xt-Fix-NGHTTP2_CONFIG_INSTALL_DIR-pa.patch | 28 +++++++++++++++++++ .../{nghttp2_1.66.0.bb => nghttp2_1.68.1.bb} | 8 ++++-- 2 files changed, 34 insertions(+), 2 deletions(-) create mode 100644 meta/recipes-support/nghttp2/nghttp2/0001-lib-CMakeLists.txt-Fix-NGHTTP2_CONFIG_INSTALL_DIR-pa.patch rename meta/recipes-support/nghttp2/{nghttp2_1.66.0.bb => nghttp2_1.68.1.bb} (62%) diff --git a/meta/recipes-support/nghttp2/nghttp2/0001-lib-CMakeLists.txt-Fix-NGHTTP2_CONFIG_INSTALL_DIR-pa.patch b/meta/recipes-support/nghttp2/nghttp2/0001-lib-CMakeLists.txt-Fix-NGHTTP2_CONFIG_INSTALL_DIR-pa.patch new file mode 100644 index 0000000000..f7cc4fe539 --- /dev/null +++ b/meta/recipes-support/nghttp2/nghttp2/0001-lib-CMakeLists.txt-Fix-NGHTTP2_CONFIG_INSTALL_DIR-pa.patch @@ -0,0 +1,28 @@ +From eb5812d018eb96284aa6ef82569d0b6b75bcd020 Mon Sep 17 00:00:00 2001 +From: Ankur Tyagi +Date: Sun, 9 Nov 2025 12:45:25 +1300 +Subject: [PATCH] lib/CMakeLists.txt: Fix NGHTTP2_CONFIG_INSTALL_DIR path + +Remove hard coded path to fix installation on 64-bit arch. + +Upstream-Status: Submitted [https://github.com/nghttp2/nghttp2/pull/2551] +Signed-off-by: Ankur Tyagi +--- + lib/CMakeLists.txt | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/lib/CMakeLists.txt b/lib/CMakeLists.txt +index 98e3dbe7..3b6a4400 100644 +--- a/lib/CMakeLists.txt ++++ b/lib/CMakeLists.txt +@@ -51,7 +51,7 @@ set(NGHTTP2_GENERATED_DIR "${CMAKE_CURRENT_BINARY_DIR}/generated") + set(NGHTTP2_VERSION_CONFIG "${NGHTTP2_GENERATED_DIR}/${PROJECT_NAME}ConfigVersion.cmake") + set(NGHTTP2_PROJECT_CONFIG "${NGHTTP2_GENERATED_DIR}/${PROJECT_NAME}Config.cmake") + set(NGHTTP2_TARGETS_EXPORT_NAME "${PROJECT_NAME}Targets") +-set(NGHTTP2_CONFIG_INSTALL_DIR "lib/cmake/${PROJECT_NAME}") ++set(NGHTTP2_CONFIG_INSTALL_DIR "${CMAKE_INSTALL_LIBDIR}/cmake/${PROJECT_NAME}") + set(NGHTTP2_NAMESPACE "${PROJECT_NAME}::") + set(NGHTTP2_VERSION ${PROJECT_VERSION}) + +-- +2.43.0 diff --git a/meta/recipes-support/nghttp2/nghttp2_1.66.0.bb b/meta/recipes-support/nghttp2/nghttp2_1.68.1.bb similarity index 62% rename from meta/recipes-support/nghttp2/nghttp2_1.66.0.bb rename to meta/recipes-support/nghttp2/nghttp2_1.68.1.bb index 49d6d7e632..71d5eef8d6 100644 --- a/meta/recipes-support/nghttp2/nghttp2_1.66.0.bb +++ b/meta/recipes-support/nghttp2/nghttp2_1.68.1.bb @@ -4,8 +4,12 @@ SECTION = "libs" LICENSE = "MIT" LIC_FILES_CHKSUM = "file://COPYING;md5=764abdf30b2eadd37ce47dcbce0ea1ec" -SRC_URI = "${GITHUB_BASE_URI}/download/v${PV}/nghttp2-${PV}.tar.xz" -SRC_URI[sha256sum] = "00ba1bdf0ba2c74b2a4fe6c8b1069dc9d82f82608af24442d430df97c6f9e631" +SRC_URI = "\ + ${GITHUB_BASE_URI}/download/v${PV}/nghttp2-${PV}.tar.xz \ + file://0001-lib-CMakeLists.txt-Fix-NGHTTP2_CONFIG_INSTALL_DIR-pa.patch \ +" + +SRC_URI[sha256sum] = "6abd7ab0a7f1580d5914457cb3c85eb80455657ee5119206edbd7f848c14f0b2" inherit cmake manpages python3native github-releases