gnu: llhttp-bootstrap: Update to 2.1.4 [security-fixes].

* gnu/packages/node.scm (llhttp-bootstrap): Update to 2.1.4.

Includes fixes for CVE-2021-22959 and CVE-2021-22960.
This commit is contained in:
Jelle Licht 2021-10-28 14:10:23 +02:00
parent ecbf59abad
commit cae7c3f389
No known key found for this signature in database
GPG Key ID: DA4597F947B41025
1 changed files with 2 additions and 2 deletions

View File

@ -576,7 +576,7 @@ parser definition into a C output.")
(define-public llhttp-bootstrap
(package
(name "llhttp")
(version "2.1.3")
(version "2.1.4")
(source (origin
(method git-fetch)
(uri (git-reference
@ -585,7 +585,7 @@ parser definition into a C output.")
(file-name (git-file-name name version))
(sha256
(base32
"0pqj7kyyzr1zs4h9yzn5rdxnxspm3wqgsv00765dd42fszlmrmk8"))
"115mwyds9655p76lhglxg2blc1ksgrix6zhigaxnc2q6syy3pa6x"))
(patches (search-patches "llhttp-bootstrap-CVE-2020-8287.patch"))
(modules '((guix build utils)))
(snippet