From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from omta002.cacentral1.a.cloudfilter.net (omta002.cacentral1.a.cloudfilter.net [3.97.99.33]) by sourceware.org (Postfix) with ESMTPS id 1F3773858D35 for ; Sun, 16 Jul 2023 01:48:55 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 1F3773858D35 Authentication-Results: sourceware.org; dmarc=pass (p=none dis=none) header.from=Shaw.ca Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=shaw.ca Received: from shw-obgw-4003a.ext.cloudfilter.net ([10.228.9.183]) by cmsmtp with ESMTP id Kbf8qUFWg6NwhKqsYqFrf5; Sun, 16 Jul 2023 01:48:54 +0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=shaw.ca; s=s20180605; t=1689472134; bh=CtIQSrByV3S4EbkHdA7MUHbPDz3H3uU1SDnHivd0ScM=; h=From:To:Reply-To:Date:Subject; b=R0fj+VGuJx6BtcYSVcWUNvxDlL2uQTRqbsMP7qbKhxpasRJ3Z4F0CFUFvDJ6O6EWC OJ2+L/HqT8z3lz+Zicfi0hfAjR0r7yzkBBygXweV9MzIAsmsdYVTTBvLnwEOba3GgG /KNXhJ8UpOKm9B8QDuwTrLT7yzIPRBQ8qr8S82H2rX3TOyZA+pS4lCf5Nwt5lKxJ2J TLUsfU7epFyrVpG0CRmXlRbn3ZTP4tia8pg5HDU/5dr8QutPH7KACB8woyJBr0kbZ0 q6R9sS1+JxuP4jvb/VUBI9E2unqlrGMEvL00weUnD8mBPQOWs8jCA7o1UAdg7ubrTu VyxUnT8zlLoDA== Received: from localhost.localdomain ([184.64.102.149]) by cmsmtp with ESMTP id KqsXqPxBLcyvuKqsXqQLYm; Sun, 16 Jul 2023 01:48:54 +0000 X-Authority-Analysis: v=2.4 cv=VbHkgXl9 c=1 sm=1 tr=0 ts=64b34c86 a=DxHlV3/gbUaP7LOF0QAmaA==:117 a=DxHlV3/gbUaP7LOF0QAmaA==:17 a=X-QBuKCoAAAA:8 a=NEAV23lmAAAA:8 a=jXWkgAb3al2ovkKXuZ4A:9 a=vbxwTe1tunHIfGfxEBYx:22 From: "Cygwin nghttp2 Maintainer" To: "Cygwin Announcements" Reply-To: "Cygwin" Date: Sat, 15 Jul 2023 19:47:39 -0600 Message-Id: <20230715194739.8768-1-Brian.Inglis@Shaw.ca> Subject: Updated: mingw64-x86_64-/nghttp2 libnghttp2_14/-devel 1.55.1 X-CMAE-Envelope: MS4xfA9FYkGu0RmTOxF/8CBZM+SsWeWq+lpNkp6jggUNTq56NQ7FfJbB2SUJ57f6KeEhOxARLSmT06/zCeW29+gH2EPTokeYBu1ro0V2dr1Ycinl67LTFC2S pC4RD1U+co+pQutpU9Mp5IASgGhl9bNNme0yph5JlzJAC7RdWBXFd6Y+3MjZMK0fmiK4Ra0huy1dUx/2I9FZ3xlcIEkEiuVQ3Dk= X-Spam-Status: No, score=-3.2 required=5.0 tests=BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,KAM_NUMSUBJECT,RCVD_IN_DNSWL_LOW,SPF_HELO_NONE,SPF_PASS,TXREP,T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: The following packages have been upgraded in the Cygwin distribution: * nghttp2 1.55.1 * libnghttp2_14 1.55.1 * libnghttp2-devel 1.55.1 * mingw64-x86_64-nghttp2 1.55.1 HTTP/2 and its header compression algorithm HPACK implementation. The framing layer of HTTP/2 is implemented as a reusable library. Also included are an HTTP/2 client, server, proxy, load test and benchmarking tool. NOTE: Support for previously deprecated Python bindings, modules, and documentation was dropped some releases ago. For more information see the project home page: https://nghttp2.org/ or the repo README: https://github.com/nghttp2/nghttp2#readme See link or text below for recent changes; after installation for complete details of changes read /usr/share/doc/nghttp2/ChangeLog. https://nghttp2.org/blog/ 2023-07-14 v1.55.1 Lib CVE-2023-35945: HTTP/2 memory leak in nghttp2 codec https://github.com/envoyproxy/envoy/security/advisories/GHSA-jfxv-29pc-x22r 2023-07-12 v1.55.0 Build The following dependencies have been updated: * ngtcp2 * nghttp3 * BoringSSL * This release fixes build error without libev. Third-party * llhttp has been updated. * Cross-compiling mruby is now supported. Nghttpx * UDP_GRO is enabled for QUIC socket. * The initial QUIC packet number is now randomized. H2load * UDP_GRO is enabled for QUIC socket.