CVS commit: pkgsrc/www/nghttp2

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Sat Mar 21 12:06:22 UTC 2026

Modified Files:
        pkgsrc/www/nghttp2: Makefile Makefile.common distinfo

Log Message:
nghttp2: update to 1.68.1.

CVE-2026-27135: Denial of service: Assertion failure due to the missing state validation


To generate a diff of this commit:
cvs rdiff -u -r1.97 -r1.98 pkgsrc/www/nghttp2/Makefile
cvs rdiff -u -r1.32 -r1.33 pkgsrc/www/nghttp2/Makefile.common
cvs rdiff -u -r1.78 -r1.79 pkgsrc/www/nghttp2/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/nghttp2/Makefile
diff -u pkgsrc/www/nghttp2/Makefile:1.97 pkgsrc/www/nghttp2/Makefile:1.98
--- pkgsrc/www/nghttp2/Makefile:1.97    Wed Jan  7 08:49:22 2026
+++ pkgsrc/www/nghttp2/Makefile Sat Mar 21 12:06:21 2026
@@ -1,6 +1,5 @@
-# $NetBSD: Makefile,v 1.97 2026/01/07 08:49:22 wiz Exp $
+# $NetBSD: Makefile,v 1.98 2026/03/21 12:06:21 wiz Exp $
 
-PKGREVISION= 1
 .include "Makefile.common"
 
 COMMENT=       Implementation of HTTP/2 in C

Index: pkgsrc/www/nghttp2/Makefile.common
diff -u pkgsrc/www/nghttp2/Makefile.common:1.32 pkgsrc/www/nghttp2/Makefile.common:1.33
--- pkgsrc/www/nghttp2/Makefile.common:1.32     Sat Oct 25 11:41:08 2025
+++ pkgsrc/www/nghttp2/Makefile.common  Sat Mar 21 12:06:21 2026
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile.common,v 1.32 2025/10/25 11:41:08 adam Exp $
+# $NetBSD: Makefile.common,v 1.33 2026/03/21 12:06:21 wiz Exp $
 # used by www/nghttp2/Makefile
 # used by www/nghttp2-tools/Makefile
 
-DISTNAME=      nghttp2-1.68.0
+DISTNAME=      nghttp2-1.68.1
 CATEGORIES=    www
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=tatsuhiro-t/}
 EXTRACT_SUFX=  .tar.xz

Index: pkgsrc/www/nghttp2/distinfo
diff -u pkgsrc/www/nghttp2/distinfo:1.78 pkgsrc/www/nghttp2/distinfo:1.79
--- pkgsrc/www/nghttp2/distinfo:1.78    Sat Oct 25 11:41:08 2025
+++ pkgsrc/www/nghttp2/distinfo Sat Mar 21 12:06:21 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.78 2025/10/25 11:41:08 adam Exp $
+$NetBSD: distinfo,v 1.79 2026/03/21 12:06:21 wiz Exp $
 
-BLAKE2s (nghttp2-1.68.0.tar.xz) = 15bcbe3f32d07c67ac0824a024cf4cdf827ff172c8733ceb497da5162e0a04e7
-SHA512 (nghttp2-1.68.0.tar.xz) = a5182c2c54cdff3c70bdad204bff9a573cf7951e189d68665087f047cb79e5fc2d5d5aefbb41e2dfe264e2e74fbbe10196cb596248e328c944406ca09da98344
-Size (nghttp2-1.68.0.tar.xz) = 1691408 bytes
+BLAKE2s (nghttp2-1.68.1.tar.xz) = d095e1af16f46bbd310e1a38ff0075389c4ee99b1a4201c499eb479cf031b088
+SHA512 (nghttp2-1.68.1.tar.xz) = d41d3422127d3190feedcd738bc477c00fa74068afbd5a08d84e954aaf20e172ea593a11db21cd70ddc63fe9550dab42cee55605d75dd4bca0f24ac1cd4b75d7
+Size (nghttp2-1.68.1.tar.xz) = 1675948 bytes