* update nginx to 1.24.0-3

nginx/PKGBUILD

@@ -12,7 +12,7 @@ pkgbase=nginx
 pkgname=(nginx nginx-src)
 # update tests revision too
 pkgver=1.24.0
-pkgrel=2
+pkgrel=3
 arch=(x86_64 powerpc64le powerpc64 powerpc riscv64)
 url='https://nginx.org'
 license=(custom)
@@ -31,7 +31,9 @@ backup=(etc/nginx/fastcgi.conf
 source=($url/download/nginx-$pkgver.tar.gz{,.asc}
         hg+https://hg.nginx.org/nginx-tests#revision=24482e311749
         nginx.service
-        logrotate)
+        logrotate
+        # https://hg.nginx.org/nginx/rev/cdda286c0f1b CVE-2023-44487
+        HTTP2_per-iteration-stream-handling-limit.patch::https://hg.nginx.org/nginx/raw-rev/cdda286c0f1b)
 # https://nginx.org/en/pgp_keys.html
 validpgpkeys=('B0F4253373F8F6F510D42178520A9993A1C052F8' # Maxim Dounin <mdounin@mdounin.ru>
               '13C82A63B603576156E30A4EA0EA981B66B0D967') # Konstantin Pavlov <thresh@nginx.com>
@@ -39,7 +41,8 @@ sha512sums=('1114e37de5664a8109c99cfb2faa1f42ff8ac63c932bcf3780d645e5ed32c0b2ac4
             'SKIP'
             'SKIP'
             'ca7d8666177d31b6c4924e9ab44ddf3d5b596b51da04d38da002830b03bd176d49354bbdd2a496617d57f44111ad59833296af87d03ffe3fca6b99327a7b4c3c'
-            '2f4dfcfa711b8bcbc5918ba635f5e430ef7132e66276261ade62bb1cba016967432c8dce7f84352cb8b07dc7c6b18f09177aa3eb92c8e358b2a106c8ca142fe9')
+            '2f4dfcfa711b8bcbc5918ba635f5e430ef7132e66276261ade62bb1cba016967432c8dce7f84352cb8b07dc7c6b18f09177aa3eb92c8e358b2a106c8ca142fe9'
+            '18b69643648119dfab45101bb9404be667aeb9d550aa3bc9706e63e7da1c2806106e9a6bbfb2d10bd57ef56b9b5b0b524059353ec30a51469b44641cb7dbd8a6')
 
 _common_flags=(
   --with-compat
@@ -78,6 +81,8 @@ _stable_flags=(
 
 prepare() {
   cp -r $pkgbase-$pkgver{,-src}
+  cd $pkgbase-$pkgver
+  patch -Np1 -i "$srcdir/HTTP2_per-iteration-stream-handling-limit.patch"
 }
 
 build() {