Opened 20 months ago

Closed 20 months ago

#17647 closed enhancement (fixed)

nghttp2-1.52.0

Reported by: Douglas R. Reno Owned by: ken@…
Priority: normal Milestone: 11.3
Component: BOOK Version: git
Severity: normal Keywords:
Cc:

Description

New minor version

Change History (3)

comment:1 by ken@…, 20 months ago

Owner: changed from blfs-book to ken@…
Status: new → assigned

What's Changed

Integration h3 by @tatsuhiro-t in #1833 integration: Use HTTP status code constants by @tatsuhiro-t in #1834 integration: Fix lint errors by @tatsuhiro-t in #1835 Don't use the unofficial libevent component by @fredizzimo in #1837 Bump ngtcp2 dependencies by @tatsuhiro-t in #1843 Minor cleanup by @tatsuhiro-t in #1845 Remove deprecated libnghttp2_asio by @tatsuhiro-t in #1844 Remove deprecated python bindings by @tatsuhiro-t in #1846 Bump zlib to 1.2.13 by @tatsuhiro-t in #1847 Remove src/includes by @tatsuhiro-t in #1848 Remove unused function by @tatsuhiro-t in #1849 src: Fix path component resolution by @tatsuhiro-t in #1850 Bump neverbleed by @tatsuhiro-t in #1851 Remove sphinx theme bundle by @tatsuhiro-t in #1852 Bump ngtcp2 to v0.13.0 by @tatsuhiro-t in #1853 Bump ngtcp2 in Dockerfile to v0.13.0 by @tatsuhiro-t in #1854 nghttpx: Fix bug that stalls TLS write by @tatsuhiro-t in #1857 Bump ngtcp2 to v0.13.1 by @tatsuhiro-t in #1858 Bump libbpf to v1.1.0 by @tatsuhiro-t in #1859 Bump llhttp to f2e1914b6c59f5cd88f492abc9d8af6be246bc85 by @tatsuhiro-t in #1860 Simplify std::uniform_int_distribution call by @tatsuhiro-t in #1861 Bump quictls by @tatsuhiro-t in #1862

comment:2 by ken@…, 20 months ago

The zlib bump would be a security issue if we were using the shipped zlib. Looking at my build of 1.51.0 does not mention zlib, and the relevant hunk of configure in 1.51.0 is 

if test "x$request_lib_only" = "xyes"; then
  request_app=no
  request_hpack_tools=no
  request_examples=no
  request_python_bindings=no
  request_http3=no
  request_libxml2=no
  request_jansson=no
  request_zlib=no
  request_libevent_openssl=no
  request_libcares=no
  request_openssl=no
  request_libev=no
  request_jemalloc=no
  request_systemd=no
  request_mruby=no
  request_neverbleed=no
  request_libngtcp2=no
  request_libnghttp3=no
  request_libbpf=no
fi

So by specifying only the lib we omit all of those, which is good (and otherwise zlib should be 'auto' so we would still have been ok.

comment:3 by ken@…, 20 months ago

Resolution: → fixed
Status: assigned → closed

Fixed in 2974f012e65a687fa025d47bf7d6fb848d899960 11.2-1177

Note: See TracTickets for help on using tickets.