nghttp2-1.61.0

[Bruce Dubbs]

New minor version.

[Xi Ruoyao]

• Fixes CVE-2024-28182
• nghttpx: Shutdown h3 stream read with trailer as well
• Checkout with submodules
• Respect BUILD_STATIC_LIBS and add option for tests
• build(deps): bump golang.org/x/net from 0.21.0 to 0.22.0
• Workaround llvm issue on github ubuntu runner
• docker: Use copy --link
• Nghttpx header idle timeout
• nghttpx: Fix frontend-header-timeout does not work in config file
• Rewrite hexdump
• Switch to distroless/base-nossl
• Bump ngtcp2
• nghttpx: Simplify quic connection close handling
• build(deps): bump github.com/quic-go/quic-go from 0.41.0 to 0.42.0
• autotools: Use tar-ustar automake option
• Automate release process
• autotools: Switch to tar-pax
• nghttpx: Drop a UDP datagram from well-known port
• nghttpx: Fix port byte order
• h2load: Allow host header to be overridden
• nghttpx: Rework QUIC stateless reset packet size
• nghttpx: More QUIC prohibited ports
• Add actions/stale
• nghttpx: Discard UDP datagram that is too short to be a valid QUIC packet
• nghttp: Support SSLKEYLOGFILE
• No rfc7540 priority fix
• Further reduce Stateless reset emission
• nghttpx: Rework Connection ID construction
• Nghttpx faster worker lookup
• nghttpx: Split thread into worker_process and thread
• bpf: Drop bad QUIC packet
• cmake: check SSL_provide_quic_data when ENABLE_HTTP3 is ON
• nghttpx: Allocate 3 bits for QUIC configuration in Connection ID
• nghttpx: Migrate to ares_getaddrinfo
• Bump munit
• nghttpx: Fix error message
• nghttpd: Fix read stall

[Xi Ruoyao]

The test suite now uses munit instead of cunit. And a munit copy is included in the tarball, thus we can just run "make check" for testing.

[Bruce Dubbs]

Fixed at commits

e703da7b3f Update to nghttp2-1.61.0.
2399f363b6 Update to xorg-server-21.1.12.
ecce19100a Update to xwayland-23.2.5.

[Douglas R. Reno]

SA-12.1-022 issued