Changes between Initial Version and Version 1 of Ticket #19596, comment 1


Ignore:
Timestamp:
04/07/2024 10:25:47 PM (12 months ago)
Author:
Bruce Dubbs

Legend:

Unmodified
Added
Removed
Modified
  • TabularUnified Ticket #19596, comment 1

    initial v1  
    1 * Fixes [https://github.com/nghttp2/nghttp2/security/advisories/GHSA-x6x3-gv8h-m57q CVE-2024-28182]
    2 * nghttpx: Shutdown h3 stream read with trailer as well by @tatsuhiro-t in https://github.com/nghttp2/nghttp2/pull/2087
    3 * Checkout with submodules by @jonaski in https://github.com/nghttp2/nghttp2/pull/2093
    4 * Respect BUILD_STATIC_LIBS and add option for tests by @jonaski in https://github.com/nghttp2/nghttp2/pull/2092
    5 * build(deps): bump golang.org/x/net from 0.21.0 to 0.22.0 by @dependabot in https://github.com/nghttp2/nghttp2/pull/2097
    6 * Workaround llvm issue on github ubuntu runner by @tatsuhiro-t in https://github.com/nghttp2/nghttp2/pull/2098
    7 * docker: Use copy --link by @tatsuhiro-t in https://github.com/nghttp2/nghttp2/pull/2099
    8 * Nghttpx header idle timeout by @tatsuhiro-t in https://github.com/nghttp2/nghttp2/pull/2100
    9 * nghttpx: Fix frontend-header-timeout does not work in config file by @tatsuhiro-t in https://github.com/nghttp2/nghttp2/pull/2101
    10 * Rewrite hexdump by @tatsuhiro-t in https://github.com/nghttp2/nghttp2/pull/2102
    11 * Switch to distroless/base-nossl by @tatsuhiro-t in https://github.com/nghttp2/nghttp2/pull/2103
    12 * Bump ngtcp2 by @tatsuhiro-t in https://github.com/nghttp2/nghttp2/pull/2105
    13 * nghttpx: Simplify quic connection close handling by @tatsuhiro-t in https://github.com/nghttp2/nghttp2/pull/2106
    14 * build(deps): bump github.com/quic-go/quic-go from 0.41.0 to 0.42.0 by @dependabot in https://github.com/nghttp2/nghttp2/pull/2107
    15 * autotools: Use tar-ustar automake option by @tatsuhiro-t in https://github.com/nghttp2/nghttp2/pull/2108
    16 * Automate release process by @tatsuhiro-t in https://github.com/nghttp2/nghttp2/pull/2109
    17 * autotools: Switch to tar-pax by @tatsuhiro-t in https://github.com/nghttp2/nghttp2/pull/2110
    18 * nghttpx: Drop a UDP datagram from well-known port by @tatsuhiro-t in https://github.com/nghttp2/nghttp2/pull/2111
    19 * nghttpx: Fix port byte order by @tatsuhiro-t in https://github.com/nghttp2/nghttp2/pull/2112
    20 * h2load: Allow host header to be overridden by @tatsuhiro-t in https://github.com/nghttp2/nghttp2/pull/2113
    21 * nghttpx: Rework QUIC stateless reset packet size by @tatsuhiro-t in https://github.com/nghttp2/nghttp2/pull/2114
    22 * nghttpx: More QUIC prohibited ports by @tatsuhiro-t in https://github.com/nghttp2/nghttp2/pull/2115
    23 * Add actions/stale by @tatsuhiro-t in https://github.com/nghttp2/nghttp2/pull/2116
    24 * nghttpx: Discard UDP datagram that is too short to be a valid QUIC packet by @tatsuhiro-t in https://github.com/nghttp2/nghttp2/pull/2117
    25 * nghttp: Support SSLKEYLOGFILE by @tatsuhiro-t in https://github.com/nghttp2/nghttp2/pull/2119
    26 * No rfc7540 priority fix by @tatsuhiro-t in https://github.com/nghttp2/nghttp2/pull/2120
    27 * Further reduce Stateless reset emission by @tatsuhiro-t in https://github.com/nghttp2/nghttp2/pull/2122
    28 * nghttpx: Rework Connection ID construction by @tatsuhiro-t in https://github.com/nghttp2/nghttp2/pull/2124
    29 * Nghttpx faster worker lookup by @tatsuhiro-t in https://github.com/nghttp2/nghttp2/pull/2125
    30 * nghttpx: Split thread into worker_process and thread by @tatsuhiro-t in https://github.com/nghttp2/nghttp2/pull/2126
    31 * bpf: Drop bad QUIC packet by @tatsuhiro-t in https://github.com/nghttp2/nghttp2/pull/2127
    32 * cmake: check `SSL_provide_quic_data` when `ENABLE_HTTP3` is `ON` by @jimmy-park in https://github.com/nghttp2/nghttp2/pull/2128
    33 * nghttpx: Allocate 3 bits for QUIC configuration in Connection ID by @tatsuhiro-t in https://github.com/nghttp2/nghttp2/pull/2129
    34 * nghttpx: Migrate to ares_getaddrinfo by @tatsuhiro-t in https://github.com/nghttp2/nghttp2/pull/2132
    35 * Bump munit by @tatsuhiro-t in https://github.com/nghttp2/nghttp2/pull/2131
    36 * nghttpx: Fix error message by @tatsuhiro-t in https://github.com/nghttp2/nghttp2/pull/2133
    37 * nghttpd: Fix read stall by @tatsuhiro-t in https://github.com/nghttp2/nghttp2/pull/2134
     1* Fixes CVE-2024-28182
     2* nghttpx: Shutdown h3 stream read with trailer as well
     3* Checkout with submodules
     4* Respect BUILD_STATIC_LIBS and add option for tests
     5* build(deps): bump golang.org/x/net from 0.21.0 to 0.22.0
     6* Workaround llvm issue on github ubuntu runner
     7* docker: Use copy --link
     8* Nghttpx header idle timeout
     9* nghttpx: Fix frontend-header-timeout does not work in config file
     10* Rewrite hexdump
     11* Switch to distroless/base-nossl
     12* Bump ngtcp2
     13* nghttpx: Simplify quic connection close handling
     14* build(deps): bump github.com/quic-go/quic-go from 0.41.0 to 0.42.0
     15* autotools: Use tar-ustar automake option
     16* Automate release process
     17* autotools: Switch to tar-pax
     18* nghttpx: Drop a UDP datagram from well-known port
     19* nghttpx: Fix port byte order
     20* h2load: Allow host header to be overridden
     21* nghttpx: Rework QUIC stateless reset packet size
     22* nghttpx: More QUIC prohibited ports
     23* Add actions/stale
     24* nghttpx: Discard UDP datagram that is too short to be a valid QUIC packet
     25* nghttp: Support SSLKEYLOGFILE
     26* No rfc7540 priority fix
     27* Further reduce Stateless reset emission
     28* nghttpx: Rework Connection ID construction
     29* Nghttpx faster worker lookup
     30* nghttpx: Split thread into worker_process and thread
     31* bpf: Drop bad QUIC packet
     32* cmake: check `SSL_provide_quic_data` when `ENABLE_HTTP3` is `ON`
     33* nghttpx: Allocate 3 bits for QUIC configuration in Connection ID
     34* nghttpx: Migrate to ares_getaddrinfo
     35* Bump munit
     36* nghttpx: Fix error message
     37* nghttpd: Fix read stall