Revisions of nghttp2
Martin Pluskal (pluskalm)
accepted
request 941434
from
Dirk Mueller (dirkmueller)
(revision 103)
- update to 1.46.0: * see https://nghttp2.org/blog/2021/07/18/nghttp2-v1-44-0/ * see https://nghttp2.org/blog/2021/09/20/nghttp2-v1-45-0/ * see https://nghttp2.org/blog/2021/10/19/nghttp2-v1-46-0/
Martin Pluskal (pluskalm)
accepted
request 869209
from
Dirk Mueller (dirkmueller)
(revision 102)
- update to 1.43.0: * doc: Make doc generation work with sphinx v3.3 * python: Require python3 for python bindings * python: Require python3 for python scripts * nghttpx: Make sure that Pool gets cleared when all buffers are returned * nghttpx: Choose ECDSA cert if compatible signature algorithm available * nghttpx: Add workaround to include ':' in backend pattern
Martin Pluskal (pluskalm)
accepted
request 860715
from
Dirk Mueller (dirkmueller)
(revision 101)
- update to 1.42.0: * lib: fix ubsan errors (Patch from Asra Ali) (GH-1468) * lib: Don't send RST_STREAM to idle stream (GH-1477) * lib: nghttp2_map backed by nghttp2_ksl * doc: Update sphinx_rtd_theme * doc: nghttp2_session_send is also affected by max concurrent streams (Patch from Tomas Krizek) (GH-1489) * doc: clarify flow control behaviour for nghttp2_session_send() (Patch from Tomas Krizek) (GH-1488) * build: Add missing cmake/FindSystemd.cmake to dist (GH-1526) * third-party: Bump llhttp to 2.2.0 * third-party: Bump mruby to 2.1.2 * nghttpx: Deal with the case when h2 backend is retired before it is initialized * nghttpx: Add accesslog variables to record request path without query (GH-1511) * nghttpx: Fix stall when TLS follows after proxy protocol * nghttpx: Fix logging integer
Tomáš Chvátal (scarabeus_iv)
accepted
request 811122
from
Paolo Stivanin (polslinux)
(revision 100)
- Update to 1.41.0 * Fix CVE-2020-11080 * lib: Implement max settings option (Patch from James M Snell) * lib: Earlier check for settings flood (Patch from James M Snell) * lib: Fix receiving stream data stall (GH-1444) * build: cmake: Make hard-coded static lib suffix optional (Patch from Viktor Szakats) (GH-1418) * third-party: Bump llhttp to 2.0.4 (GH-1442) * nghttpx: Add PROXY-protocol v2 support (GH-1452) * nghttpx: Fix get_x509_serial for long serial numbers (Patch from Jacky Tian) (GH-1455) * h2load: Allow port in --connect-to * h2load: add --connect-to option (Patch from Lucas Pardue) (GH-1426)
Tomáš Chvátal (scarabeus_iv)
accepted
request 765237
from
Michał Rostecki (mrostecki)
(revision 99)
- Update to version 1.40.0
* lib: Add nghttp2_check_authority as public API
* lib: Fix the bug that stream is closed with wrong error code
* lib: Faster huffman encoding and decoding
* build: Avoid filename collision of static and dynamic lib
* build: Add new flag ENABLE_STATIC_CRT for Windows
* build: cmake: Support building nghttpx with systemd
* third-party: Update neverbleed to fix memory leak
* nghttpx: Fix bug that mruby is incorrectly shared between
backends
* nghttpx: Reconnect h1 backend if it lost connection before
sending headers
* nghttpx: Returns 408 if backend timed out before sending
headers
* nghttpx: Fix request stal
Martin Pluskal (pluskalm)
committed
(revision 98)
Martin Pluskal (pluskalm)
committed
(revision 97)
- Conditionally remove dependecy on jemalloc for SLE-12
Martin Pluskal (pluskalm)
accepted
request 724578
from
Adam Majer (adamm)
(revision 96)
- Update to version 1.39.2 (bsc#1146184, bsc#1146182): * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513 “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2 frames cause Denial of Service by consuming CPU time. Check out https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md for details. For nghttpx, additionally limiting inbound traffic by --read-rate and --read-burst options is quite effective against this kind of attack. * Add nghttp2_option_set_max_outbound_ack API function * nghttpx: Fix request stall
Martin Pluskal (pluskalm)
committed
(revision 95)
- Require correct library from devel package - boo#1125689
Martin Pluskal (pluskalm)
committed
(revision 94)
- Update to version 1.39.1:
* This release fixes the bug that log-level is not set with
cmd-line or configuration file. It also fixes FPE with default
backend.
- Changes for version 1.39.0:
* libnghttp2 now ignores content-length in 200 response to
CONNECT request as per RFC 7230.
* mruby has been upgraded to 2.0.1.
* libnghttp2-asio now supports boost-1.70.
* http-parser has been replaced with llhttp.
* nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
or 200 to CONNECT.
- Drop no longer needed boost170.patch
Tomáš Chvátal (scarabeus_iv)
committed
(revision 93)
- Update to 1.38.0: * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry. * It also fixes the bug that HTTP/1.1 chunked request stalls. * Now nghttpx does not log authorization request header field value with -LINFO. * This release fixes possible backend stall when header and request body are sent in their own packets. * The backend option gets weight parameter to influence backend selection. * This release fixes compile error with BoringSSL. - Add patch from upstream to build with new boost bsc#1134616: * boost170.patch
Martin Pluskal (pluskalm)
accepted
request 667023
from
Sean Lewis (seanlew)
(revision 92)
Update nghttp2
Martin Pluskal (pluskalm)
accepted
request 666996
from
Tomáš Chvátal (scarabeus_iv)
(revision 90)
- Use multibuild to not pull in python3 in first build, nghttp2 is low in the system
Martin Pluskal (pluskalm)
committed
(revision 89)
- Update to version 1.35.1: * nghttpx: Fix broken trailing slash handling (GH-1276) - Changes for version 1.35: * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238) * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222) * src: Require C++14 language feature * nghttpx: Write mruby send_info early * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend * h2load: Handle HTTP/1 non-final response (GH-1259) * h2load: Clarify that time for connect includes TLS handshake
Adam Majer (adamm)
accepted
request 640687
from
Adam Majer (adamm)
(revision 87)
- Update to version 1.34.0: * lib: Implement RFC 8441 :protocol support * nghttpx: Add read/write-timeout parameters to backend option * nghttpx: Fix mruby parameter validation in backend option * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2 * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues * nghttpx: Update mruby 1.4.1 * nghttpx: Add mruby env.tls_handshake_finished * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options * nghttpx: Add RFC 8470 Early-Data header field support * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support
Ismail Dönmez (namtrac)
accepted
request 638343
from
Adam Majer (adamm)
(revision 86)
- Update to version 1.33.0:
* lib: Tweak nghttp2_session_set_stream_user_data
* lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
* lib: Implement ORIGIN frame
* asio: support definition of local endpoint for cleartext
client session
* integration: Remove remaining SPDY code from the integration tests
* nghttpx: Fix worker process crash with neverbleed write error
* nghttpx: Support per-backend mruby script
* nghttpx: Fix stream reset if data from client is arrived before
dconn is attached
Martin Pluskal (pluskalm)
committed
(revision 85)
- Update to version 1.32.0:
* lib: Ignore all input after calling session_terminate_session
* lib: Fix treatment of padding
* lib: Don't allow 101 HTTP status code because HTTP/2 removes
HTTP Upgrade
* build: add ENABLE_STATIC_LIB option to build static lib
* third-party: Upgrade neverbleed to the latest master
* asio: Support client side SNI
* src: Compile with libressl 2.7.2
* src: Allow building without NPN
* h2load: -r and --duration are mutually exclusive
Tomáš Chvátal (scarabeus_iv)
committed
(revision 84)
- Version umpdate to 1.31.1: * Fix bsc#1088639 CVE-2018-1000168 * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/
Displaying revisions 21 - 40 of 123
