nghttp2-1.62.1.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:2345d4dc136fda28ce243e0bb21f2e7e8ef6293d62c799abbf6f633a6887af72
+size 1606084

nghttp2-1.62.1.tar.xz.asc

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=dcEC
+-----END PGP SIGNATURE-----

nghttp2-1.64.0.tar.xz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEEUWtiKRjRXEeKseo6UzmivoLgfewFAmcWQzsACgkQUzmivoLg
-fexT6w/9Eo6PuvGWcYn0e8CbTHDi+BhyCs3AQHPKmuJi19yIeknZd7qcQE1xYryJ
-Xef5W1q5+p06kDgFH56Y7wORwCWmtzx5gZLVYNY7qNCCJ0CsMLI2/ypf2L06MLWe
-c8dS8DFsvqrSTe3QzPHCP+T7FDp7bfH7gKLoEobhU9v299MseLMUdw06fBTLGqKs
-KWhuQ0gD2r1zJfGdX+O5zf97pLYtR/Ch+YGHqcNYCmiIguKpZX+Vg3pHr1vJhqnT
-P6LiFVeokI6zeW1YWB0DQNBrGXEx3AZWzR9d9IlA2ijobtItc/lTTUn0zpmqNFiv
-E95D29wEQ2MtbCJd/nolIz0YiDn0JpwHBBfkWRNLj7+LqBlebyVwig8nMO453sE9
-vxklm7yONLJDDiU3o8lmUf8IVTX+FpZ3nbbeQkDwTPKU7hvcTojasPMegS4Laiok
-sfKIKaMTeYokSD4M++ikyb8c2+Vt4genVIyeUAohlSUhUr4I8E/O36JvfPaA4nTe
-S2oNl5iv/0pPQpuXTMcf/MGR3b8HmN0bH4tkowV3sRWLNHeBn6hnlY1sq1ZcegMs
-vAqum1CyReyhLfThvXAV7ImjsplNVmshQK4IaXNDYYJyr/wNAgnw41RiO01W+NgX
-KbPvx4H1actquW04yYCAAvDcBHfERM71Ye17oTFjoOEeDoQsMJg=
-=aykV
------END PGP SIGNATURE-----

nghttp2.changes

@@ -1,58 +1,3 @@
--------------------------------------------------------------------
-Tue Nov 12 10:57:02 UTC 2024 - pgajdos@suse.com
-
-- version update to 1.64.0
-  1.64.0
-  * Change clang-format options by @tatsuhiro-t in #2240
-  * build(deps): bump github.com/quic-go/quic-go from 0.46.0 to 0.47.0 by @dependabot in #2243
-  * build(deps): bump golang.org/x/net from 0.28.0 to 0.29.0 by @dependabot in #2244
-  * nghttp2_map: Port ngtcp2 changes by @tatsuhiro-t in #2245
-  * h2load: Fix UDP datagram send/recv metric by @tatsuhiro-t in #2248
-  * build(deps): bump golang.org/x/net from 0.29.0 to 0.30.0 by @dependabot in #2252
-  * fix race condition on h1 connection close by @TuxInvader in #2249
-  * Gha ubuntu 24.04 by @tatsuhiro-t in #2254
-  * GHA: Run tests for i686-w64-mingw32 host by @tatsuhiro-t in #2255
-  * cmake: Fix c-ares v1.34.0 version detection failure by @tatsuhiro-t in #2256
-  * fix: -Wextra-semi errors in nghttp2_helper.h by @codebytere in #2258
-  * clang-format macros that do not need semicolon at the end by @tatsuhiro-t in #2259
-  * Remove extra semicolons by @tatsuhiro-t in #2260
-  * Bump ngtcp2 and its dependencies by @tatsuhiro-t in #2261
-  * Do not allow '@' in :authority or host field values by @tatsuhiro-t in #2262
-  * h2load: GRO buffer size should be 64KiB by @tatsuhiro-t in #2263
-  * Bump libbpf to v1.4.6 by @tatsuhiro-t in #2264
-  * Update nghttp2_check_authority doc by @tatsuhiro-t in #2265
-  1.63.0
-  * Bump libbpf to v1.4.2 by @tatsuhiro-t in #2191
-  * build(deps): bump golang.org/x/net from 0.24.0 to 0.25.0 by @dependabot in #2193
-  * nghttpx: Fix batch UDP QUIC packet dropped on GRO read by @tatsuhiro-t in #2196
-  * CMakeLists.txt: allow to compile the C only lib without CXX compiler by @ThomasDevoogdt in #2200
-  * build(deps): bump github.com/quic-go/quic-go from 0.43.1 to 0.44.0 by @dependabot in #2197
-  * Fix compiler versions in readme by @ryandesign in #2203
-  * build(deps): bump golang.org/x/net from 0.25.0 to 0.26.0 by @dependabot in #2205
-  * build(deps): bump github.com/quic-go/quic-go from 0.44.0 to 0.45.0 by @dependabot in #2206
-  * Bump ngtcp2 and its dependencies by @tatsuhiro-t in #2207
-  * build(deps): bump docker/build-push-action from 5 to 6 by @dependabot in #2208
-  * Add wolfSSL support by @tatsuhiro-t in #2209
-  * Append --shallow-submodules to git clone --recursive by @tatsuhiro-t in #2210
-  * Always append options to extra options by @tatsuhiro-t in #2211
-  * build(deps): bump github.com/quic-go/quic-go from 0.45.0 to 0.45.1 by @dependabot in #2213
-  * Disable dependency tracking by @tatsuhiro-t in #2214
-  * Fix Dockerfile.android build failure by @tatsuhiro-t in #2215
-  * Fix UDP_GRO struct cmsghdr data type by @tatsuhiro-t in #2216
-  * GHA: Suppress warnings by @tatsuhiro-t in #2217
-  * Fix levenshtein initialization by @tatsuhiro-t in #2218
-  * build(deps): bump golang.org/x/net from 0.26.0 to 0.27.0 by @dependabot in #2220
-  * Undefine NGHTTP2_NO_SSIZE_T if BUILDING_NGHTTP2 is defined by @tatsuhiro-t in #2224
-  * Bump clang format by @tatsuhiro-t in #2226
-  * Suppress old compiler error by @tatsuhiro-t in #2228
-  * build(deps): bump github.com/quic-go/quic-go from 0.45.1 to 0.45.2 by @dependabot in #2229
-  * build(deps): bump golang.org/x/net from 0.27.0 to 0.28.0 by @dependabot in #2231
-  * build(deps): bump github.com/quic-go/quic-go from 0.45.2 to 0.46.0 by @dependabot in #2232
-  * Bump ngtcp2 and its dependencies by @tatsuhiro-t in #2236
-  * Bump libbpf to v1.4.5 by @tatsuhiro-t in #2237
-  * Update go by @tatsuhiro-t in #2238
-  * levenshtein: Use size_t by @tatsuhiro-t in #2239
-
 -------------------------------------------------------------------
 Mon Jun 17 18:02:25 UTC 2024 - Dirk Müller <dmueller@suse.com>
 
@@ -253,7 +198,7 @@ Mon Oct 16 10:24:50 UTC 2023 - pgajdos@suse.com
 
 - version update to 1.57.0 [bsc#1216174]
   1.57.0
-  * Fixes CVE-2023-44487 (bsc#1216123)
+  * Fixes CVE-2023-44487
   * Bump ngtcp2 by @tatsuhiro-t in #1944
   * Add dependabot to update actions by @tatsuhiro-t in #1946
   * Bump golang.org/x/net to v0.15.0 by @tatsuhiro-t in #1950
@@ -284,7 +229,7 @@ Mon Oct 16 10:24:50 UTC 2023 - pgajdos@suse.com
 Sat Jul 15 15:11:52 UTC 2023 - Dirk Müller <dmueller@suse.com>
 
 - update to 1.55.1:
-  * Fix memory leak (bsc#1215713)
+  * Fix memory leak
     This commit fixes memory leak that happens when
     PUSH_PROMISE or HEADERS frame cannot be sent, and
     nghttp2_on_stream_close_callback fails with a fatal error.
@@ -460,7 +405,7 @@ Wed Jan  6 12:22:21 UTC 2021 - Dirk Müller <dmueller@suse.com>
 Wed Jun  3 11:45:25 UTC 2020 - Paolo Stivanin <info@paolostivanin.com>
 
 - Update to 1.41.0
-  * Fix CVE-2020-11080 (bsc#1181358)
+  * Fix CVE-2020-11080
   * lib: Implement max settings option (Patch from James M Snell)
   * lib: Earlier check for settings flood (Patch from James M Snell)
   * lib: Fix receiving stream data stall (GH-1444)
@@ -474,8 +419,7 @@ Wed Jun  3 11:45:25 UTC 2020 - Paolo Stivanin <info@paolostivanin.com>
 -------------------------------------------------------------------
 Tue Jan 14 18:01:52 UTC 2020 - Michał Rostecki <mrostecki@opensuse.org>
 
-- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
-  cilium-proxy (bsc#1166481)
+- Update to version 1.40.0
   * lib: Add nghttp2_check_authority as public API
   * lib: Fix the bug that stream is closed with wrong error code
   * lib: Faster huffman encoding and decoding

nghttp2.spec

@@ -20,7 +20,7 @@
 %global sover   14
 %global flavor @BUILD_FLAVOR@%{nil}
 Name:           nghttp2
-Version:        1.64.0
+Version:        1.62.1
 Release:        0
 Summary:        Implementation of Hypertext Transfer Protocol version 2 in C
 License:        MIT