From 015b63d628d2bd98d269c644178e90d975b949f2 Mon Sep 17 00:00:00 2001
From: Jan Macku <jamacku@redhat.com>
Date: Wed, 11 Oct 2023 08:26:28 +0200
Subject: [PATCH] update to the latest upstream release (1.57.0)

---
 nghttp2.spec | 8 ++++++--
 sources      | 4 ++--
 2 files changed, 8 insertions(+), 4 deletions(-)

diff --git a/nghttp2.spec b/nghttp2.spec
index 3ab8838..e29a74b 100644
--- a/nghttp2.spec
+++ b/nghttp2.spec
@@ -6,8 +6,8 @@
 
 Summary: Experimental HTTP/2 client, server and proxy
 Name: nghttp2
-Version: 1.56.0
-Release: 2%{?dist}
+Version: 1.57.0
+Release: 1%{?dist}
 
 # Parts of ruby bindings are additionally under GPL-2.0-or-later, MIT and
 # Kevlin Henney (this one is not recognized by Fedora!) but they are NOT shipped.
@@ -215,6 +215,10 @@ popd
 
 
 %changelog
+* Wed Oct 11 2023 Jan Macku <jamacku@redhat.com> 1.57.0-1
+- update to the latest upstream release
+- fixes CVE-2023-44487 - HTTP/2 Rapid Reset
+
 * Fri Sep 15 2023 Marc-André Lureau <marcandre.lureau@redhat.com> - 1.56.0-2
 - Add MinGW packages. rhbz#2102067
 
diff --git a/sources b/sources
index 9b85400..939a69b 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (nghttp2-1.56.0.tar.xz) = 9754bd637705400cc4c3488d6dd1fc217c765a0925d2a5edfd83d380db0ad9e9a05974afa4fcda40b07287e8e8261b9d8009892cb1c2cc417ce4232a01b0011d
-SHA512 (nghttp2-1.56.0.tar.xz.asc) = 57e4c899b6e8688b0aadae548461be270f04eebb15511c1fe470dfeca429eb587f554d9c45760f691f1b563da5ab7a448b8f43461e59387ea99cc4e1762a13dd
+SHA512 (nghttp2-1.57.0.tar.xz) = d914eb48afd1ea182c1b2a454bf5e7963a7e28165f1d6d29bb83dd61a1b611c8c469e72a7a22daf23b8037f6e5ae9d4e791150b7d135746c1a5ec71ceb777f92
+SHA512 (nghttp2-1.57.0.tar.xz.asc) = fa3eaa0af783efa76931a037516e6ddc05d82e45a378fe7f136366ea4bbf94138dfdbc40e337abe8f16a329df3f388fe9b81f148635d936d28bc70fc3f687745