diff --git a/package/lua-http/0001-http-h1_stream-handle-EOF-when-body_read_type-length.patch b/package/lua-http/0001-http-h1_stream-handle-EOF-when-body_read_type-length.patch index fdbf5243f5..7672ff3794 100644 --- a/package/lua-http/0001-http-h1_stream-handle-EOF-when-body_read_type-length.patch +++ b/package/lua-http/0001-http-h1_stream-handle-EOF-when-body_read_type-length.patch @@ -8,6 +8,7 @@ then return `EPIPE`. This fixes a potential infinite draining loop when trying to trying to `:shutdown()` a stream. +CVE: CVE-2023-4540 Upstream: https://github.com/daurnimator/lua-http/commit/ddab2835c583d45dec62680ca8d3cbde55e0bae6 Signed-off-by: Francois Perrad ---