Hello community, here is the log from the commit of package nghttp2 for openSUSE:Leap:15.2 checked in at 2020-03-26 05:41:06 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Leap:15.2/nghttp2 (Old) and /work/SRC/openSUSE:Leap:15.2/.nghttp2.new.3160 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "nghttp2" Thu Mar 26 05:41:06 2020 rev:53 rq:787908 version:1.40.0 Changes: -------- --- /work/SRC/openSUSE:Leap:15.2/nghttp2/nghttp2.changes 2020-01-15 15:33:30.482863359 +0100 +++ /work/SRC/openSUSE:Leap:15.2/.nghttp2.new.3160/nghttp2.changes 2020-03-26 05:41:06.627270434 +0100 @@ -1,0 +2,25 @@ +Tue Jan 14 18:01:52 UTC 2020 - MichaĆ Rostecki <mroste...@opensuse.org> + +- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and + cilium-proxy (bsc#1166481) + * lib: Add nghttp2_check_authority as public API + * lib: Fix the bug that stream is closed with wrong error code + * lib: Faster huffman encoding and decoding + * build: Avoid filename collision of static and dynamic lib + * build: Add new flag ENABLE_STATIC_CRT for Windows + * build: cmake: Support building nghttpx with systemd + * third-party: Update neverbleed to fix memory leak + * nghttpx: Fix bug that mruby is incorrectly shared between + backends + * nghttpx: Reconnect h1 backend if it lost connection before + sending headers + * nghttpx: Returns 408 if backend timed out before sending + headers + * nghttpx: Fix request stal + +------------------------------------------------------------------- +Fri Aug 30 02:45:32 UTC 2019 - Martin Pluskal <mplus...@suse.com> + +- Conditionally remove dependecy on jemalloc for SLE-12 + +------------------------------------------------------------------- Old: ---- nghttp2-1.39.2.tar.xz New: ---- nghttp2-1.40.0.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ nghttp2.spec ++++++ --- /var/tmp/diff_new_pack.uls5QI/_old 2020-03-26 05:41:07.051270654 +0100 +++ /var/tmp/diff_new_pack.uls5QI/_new 2020-03-26 05:41:07.055270656 +0100 @@ -29,7 +29,7 @@ %bcond_with python %endif Name: nghttp2%{psuffix} -Version: 1.39.2 +Version: 1.40.0 Release: 0 Summary: Implementation of Hypertext Transfer Protocol version 2 in C License: MIT @@ -60,8 +60,10 @@ BuildRequires: python3-setuptools %endif %ifnarch ppc %{arm} +%if 0%{?sle_version} >= 150000 && 0%{?is_opensuse} BuildRequires: pkgconfig(jemalloc) %endif +%endif %if 0%{?suse_version} > 1325 BuildRequires: libboost_system-devel BuildRequires: libboost_thread-devel ++++++ nghttp2-1.39.2.tar.xz -> nghttp2-1.40.0.tar.xz ++++++ ++++ 11311 lines of diff (skipped)