The following packages have been upgraded in the Cygwin distribution:
* nghttp2 1.55.1
* libnghttp2_14 1.55.1
* libnghttp2-devel 1.55.1
* mingw64-x86_64-nghttp2 1.55.1
HTTP/2 and its header compression algorithm HPACK implementation.
The framing layer of HTTP/2 is implemented as a reusable library.
Also included are an HTTP/2 client, server, proxy, load test and
benchmarking tool.
NOTE:
Support for previously deprecated Python bindings, modules, and
documentation was dropped some releases ago.
For more information see the project home page:
https://nghttp2.org/
or the repo README:
https://github.com/nghttp2/nghttp2#readme
See link or text below for recent changes; after installation for
complete details of changes read /usr/share/doc/nghttp2/ChangeLog.
https://nghttp2.org/blog/
2023-07-14 v1.55.1
Lib
CVE-2023-35945: HTTP/2 memory leak in nghttp2 codec
https://github.com/envoyproxy/envoy/security/advisories/GHSA-jfxv-29pc-x22r
2023-07-12 v1.55.0
Build
The following dependencies have been updated:
* ngtcp2
* nghttp3
* BoringSSL
* This release fixes build error without libev.
Third-party
* llhttp has been updated.
* Cross-compiling mruby is now supported.
Nghttpx
* UDP_GRO is enabled for QUIC socket.
* The initial QUIC packet number is now randomized.
H2load
* UDP_GRO is enabled for QUIC socket.
--
Problem reports: https://cygwin.com/problems.html
FAQ: https://cygwin.com/faq/
Documentation: https://cygwin.com/docs.html
Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple
