nghttp2 (1.36.0-2+deb10u3) buster-security; urgency=high * Non-maintainer upload by the LTS Security Team. * Fix CVE-2024-28182: An implementation using the nghttp2 library will continue to receive CONTINUATION frames, and will not callback to the application to allow visibility into this information before it resets the stream, resulting in Denial of Service. (Closes: #1068415) * d/libnghttp2-14.symbols: Add missig symbol from the backported upstream fix. -- Guilhem Moulin Tue, 30 Apr 2024 18:59:06 +0200 nghttp2 (1.36.0-2+deb10u2) buster-security; urgency=high * Non-maintainer upload by the LTS Security Team. * Backport upstream fixes for CVE-2020-11080 (Closes: #962145). * Backport upstream fix for CVE-2023-44487 (Closes: #1053769). * Add three new symbols from backported fixes to libnghttp2-14.symbols. -- Sean Whitton Mon, 16 Oct 2023 13:34:24 +0100 nghttp2 (1.36.0-2+deb10u1) buster-security; urgency=high * Fix CVE-2019-9511 and CVE-2019-9513. -- Tomasz Buchert Fri, 23 Aug 2019 17:52:43 +0200 nghttp2 (1.36.0-2) unstable; urgency=medium * d/*: drop support for spdy (Closes: #920988) -- Tomasz Buchert Sun, 03 Feb 2019 10:53:17 -0800 nghttp2 (1.36.0-1) unstable; urgency=medium * Packaging refresh (debhelper 12, std-ver 4.3.0) * New upstream release 1.36.0 -- Tomasz Buchert Wed, 23 Jan 2019 09:32:13 +0100 nghttp2 (1.35.1-1) unstable; urgency=medium * New upstream version 1.35.1 -- Tomasz Buchert Fri, 14 Dec 2018 10:03:56 +0100 nghttp2 (1.35.0-1) unstable; urgency=medium * New upstream version 1.35.0 -- Tomasz Buchert Mon, 26 Nov 2018 00:35:43 +0100 nghttp2 (1.34.0-1) unstable; urgency=medium * Imported upstream version 1.34.0 -- Tomasz Buchert Thu, 11 Oct 2018 08:04:01 +0200 nghttp2 (1.33.0-1) unstable; urgency=medium * Imported upstream version 1.33.0 -- Tomasz Buchert Fri, 07 Sep 2018 00:49:22 +0200 nghttp2 (1.32.1-1) unstable; urgency=medium * Imported upstream version 1.32.1 * Update debian control with "cme fix dpkg-control" -- Tomasz Buchert Sat, 01 Sep 2018 12:02:10 +0200 nghttp2 (1.32.0-1) unstable; urgency=medium * Imported upstream version 1.32.0 -- Tomasz Buchert Sat, 19 May 2018 15:01:25 +0200 nghttp2 (1.31.1-1) unstable; urgency=medium * Imported upstream version 1.31.1 (fixes CVE-2018-1000168) -- Tomasz Buchert Sat, 21 Apr 2018 19:35:33 +0200 nghttp2 (1.31.0-1) unstable; urgency=medium * Imported upstream version 1.31.0 * Update symbols of libnghttp2 -- Tomasz Buchert Tue, 06 Mar 2018 00:06:34 +0100 nghttp2 (1.30.0-1) unstable; urgency=medium * Imported upstream version 1.30.0 -- Tomasz Buchert Mon, 12 Feb 2018 13:44:16 +0100 nghttp2 (1.29.0-1) unstable; urgency=medium * Imported upstream version 1.29.0 * Bumped Standards-Version to 4.1.2 (no changes needed) * Updated debhelper compat to 11 * d/patches: use python3 for fetch-ocsp-response -- Tomasz Buchert Tue, 02 Jan 2018 12:43:09 +0100 nghttp2 (1.28.0-1) unstable; urgency=medium * Imported upstream version 1.28.0 * Bumped Standards-Version to 4.1.1 (no changes needed) -- Tomasz Buchert Sun, 03 Dec 2017 13:34:25 +0100 nghttp2 (1.27.0-1) unstable; urgency=medium * Imported upstream version 1.27.0 * Bumped Standards-Version to 4.1.0 (no changes needed) -- Tomasz Buchert Fri, 27 Oct 2017 22:12:09 +0200 nghttp2 (1.26.0-1) unstable; urgency=medium * Imported upstream version 1.26.0 -- Tomasz Buchert Thu, 21 Sep 2017 09:34:29 +0200 nghttp2 (1.25.0-1) unstable; urgency=medium * Imported upstream version 1.25.0 -- Tomasz Buchert Wed, 23 Aug 2017 23:21:44 +0200 nghttp2 (1.24.0-1) unstable; urgency=medium * Imported upstream version 1.24.0 * Bumped Standards-Version to 4.0.0 (no changes needed) -- Tomasz Buchert Wed, 05 Jul 2017 08:31:03 +0200 nghttp2 (1.23.1-1) unstable; urgency=medium * Imported upstream version 1.23.1 -- Tomasz Buchert Sat, 03 Jun 2017 10:32:36 +0200 nghttp2 (1.23.0-1) unstable; urgency=medium * Imported upstream version 1.23.0 -- Tomasz Buchert Tue, 30 May 2017 08:49:22 +0200 nghttp2 (1.22.0-1) unstable; urgency=medium * Import upstream version 1.22.0 -- Tomasz Buchert Mon, 01 May 2017 12:55:59 +0200 nghttp2 (1.21.1-1) unstable; urgency=medium * Import upstream version 1.21.1 -- Tomasz Buchert Fri, 14 Apr 2017 09:19:37 +0200 nghttp2 (1.21.0-1) unstable; urgency=medium * Import upstream version 1.21.0 (Closes: #858744) -- Tomasz Buchert Sun, 02 Apr 2017 11:22:17 +0200 nghttp2 (1.20.0-1) unstable; urgency=medium * Import upstream version 1.20.0 * Revamp the systemd service * Make sure spdylay is used -- Tomasz Buchert Sun, 19 Mar 2017 14:32:34 +0100 nghttp2 (1.19.0-2) unstable; urgency=medium * Add h2load to nghttp2-client (Closes: #853860) -- Tomasz Buchert Sat, 04 Feb 2017 11:39:34 +0100 nghttp2 (1.19.0-1) unstable; urgency=medium * Imported upstream version 1.19.0 -- Tomasz Buchert Mon, 30 Jan 2017 22:00:27 +0100 nghttp2 (1.18.1-1) unstable; urgency=medium * Imported upstream version 1.18.1 -- Tomasz Buchert Sun, 08 Jan 2017 12:26:25 +0100 nghttp2 (1.18.0-1) unstable; urgency=medium * Imported upstream version 1.18.0 * debian/*: use debhelper v10 and watch v4 * Add build dependency on libc-ares-dev -- Tomasz Buchert Thu, 29 Dec 2016 09:34:38 +0100 nghttp2 (1.17.0-1) unstable; urgency=medium * Imported upstream version 1.17.0 -- Tomasz Buchert Sun, 27 Nov 2016 15:55:57 +0100 nghttp2 (1.16.0-1) unstable; urgency=medium * Imported upstream version 1.16.0 -- Tomasz Buchert Tue, 25 Oct 2016 20:45:10 +0200 nghttp2 (1.15.0-1) unstable; urgency=medium * Imported upstream version 1.15.0 -- Tomasz Buchert Thu, 29 Sep 2016 08:21:30 +0200 nghttp2 (1.14.1-1) unstable; urgency=medium * Imported upstream version 1.14.1 -- Tomasz Buchert Sun, 11 Sep 2016 08:34:01 +0200 nghttp2 (1.14.0-1) unstable; urgency=medium * Imported upstream version 1.14.0 -- Tomasz Buchert Mon, 29 Aug 2016 20:42:10 +0200 nghttp2 (1.13.0-1) unstable; urgency=medium * Imported upstream version 1.13.0 * Drop merged upstream patches * Update URLs -- Tomasz Buchert Sun, 24 Jul 2016 09:06:27 +0200 nghttp2 (1.12.0-2) unstable; urgency=medium * d/patches: fix FTBFS on armel -- Tomasz Buchert Sun, 03 Jul 2016 23:18:42 +0200 nghttp2 (1.12.0-1) unstable; urgency=medium * Imported upstream version 1.12.0 -- Tomasz Buchert Sat, 02 Jul 2016 10:59:57 +0200 nghttp2 (1.11.1-1) unstable; urgency=medium * Imported upstream version 1.11.1 -- Tomasz Buchert Tue, 31 May 2016 23:28:27 +0200 nghttp2 (1.11.0-1) unstable; urgency=medium * Imported upstream version 1.11.0 * d/control: bump std-ver to 3.9.8 (no changes needed) * d/symbols: update symbol list -- Tomasz Buchert Sun, 29 May 2016 14:49:29 +0200 nghttp2 (1.10.0-1) unstable; urgency=medium * Imported upstream version 1.10.0 * Fix broken default config for nghttp2-proxy * d/symbols: update the list of symbols -- Tomasz Buchert Tue, 26 Apr 2016 23:29:25 +0200 nghttp2 (1.9.2-1) unstable; urgency=medium * Imported upstream version 1.9.2 -- Tomasz Buchert Tue, 05 Apr 2016 07:33:05 +0200 nghttp2 (1.9.1-1) unstable; urgency=medium * Imported upstream version 1.9.1 -- Tomasz Buchert Mon, 28 Mar 2016 11:17:23 +0200 nghttp2 (1.8.0-1) unstable; urgency=medium * Imported upstream version 1.8.0 (Closes: #811995) * d/symbols: update symbol list * d/control: bump std-ver to 3.9.7 (no changes needed) -- Tomasz Buchert Mon, 29 Feb 2016 13:28:57 +0100 nghttp2 (1.7.1-2) unstable; urgency=medium * Add missing script for OCSP stapling (Closes: #815226) -- Tomasz Buchert Sun, 21 Feb 2016 21:22:54 +0100 nghttp2 (1.7.1-1) unstable; urgency=high * Imported upstream version 1.7.1 (fixes CVE-2016-1544) -- Tomasz Buchert Sat, 13 Feb 2016 10:17:19 +0100 nghttp2 (1.7.0-1) unstable; urgency=medium * Imported upstream version 1.7.0 -- Tomasz Buchert Wed, 27 Jan 2016 18:10:34 +0100 nghttp2 (1.6.0-1) unstable; urgency=medium * Imported upstream version 1.6.0 -- Tomasz Buchert Sat, 26 Dec 2015 11:15:01 +0100 nghttp2 (1.5.0-2) unstable; urgency=medium * Update Build-Depends for cross compilation (Closes: #807849) Patch provided by Helmut Grohne (with some minor changes) * Split build into -arch and -indep packages * Fix two Lintian warnings -- Tomasz Buchert Tue, 15 Dec 2015 11:39:36 +0100 nghttp2 (1.5.0-1) unstable; urgency=medium * Imported upstream version 1.5.0 -- Tomasz Buchert Sat, 05 Dec 2015 09:00:48 +0100 nghttp2 (1.4.0-2) unstable; urgency=medium * Fix systemd service -- Tomasz Buchert Sat, 07 Nov 2015 14:17:48 +0100 nghttp2 (1.4.0-1) unstable; urgency=medium * Imported Upstream version 1.4.0 -- Tomasz Buchert Sat, 31 Oct 2015 18:41:18 +0100 nghttp2 (1.3.4-2) unstable; urgency=medium * Split into subpackages: nghttp2-{client,proxy,server} (Closes: #802206) -- Tomasz Buchert Fri, 23 Oct 2015 17:39:22 +0200 nghttp2 (1.3.4-1) unstable; urgency=medium * Imported Upstream version 1.3.4 (Closes: #801957) * Adding myself as Uploader -- Tomasz Buchert Thu, 01 Oct 2015 10:47:15 +0200 nghttp2 (1.3.2-0.1) unstable; urgency=medium * Non-maintainer upload. * Imported Upstream version 1.3.2 * d/patches: drop patches -- Tomasz Buchert Sat, 19 Sep 2015 21:39:17 +0200 nghttp2 (1.3.1-0.4) unstable; urgency=medium * Non-maintainer upload. * Fix build problem on armel -- Tomasz Buchert Sun, 13 Sep 2015 09:37:02 +0200 nghttp2 (1.3.1-0.3) unstable; urgency=medium * Non-maintainer upload. * Imported Upstream version 1.3.1 (Closes: #798598) * d/copyright: add license for mruby * d/conf: send errorlog to syslog -- Tomasz Buchert Sat, 12 Sep 2015 22:34:22 +0200 nghttp2 (1.3.0-0.2) unstable; urgency=medium * Non-maintainer upload. * Upload to unstable (Closes: #784666, #793571) * d/*: dropping dbg package (ddebs are coming) -- Tomasz Buchert Tue, 08 Sep 2015 12:38:55 +0200 nghttp2 (1.3.0-0.1) experimental; urgency=medium * Non-maintainer upload * Imported Upstream version 1.3.0 * Switch to dh -- Tomasz Buchert Wed, 02 Sep 2015 18:22:19 +0200 nghttp2 (0.6.7-1) unstable; urgency=medium * New upstream release -- Dave Beckett Sun, 30 Nov 2014 13:45:03 -0800 nghttp2 (0.6.6-1) unstable; urgency=medium * New upstream release -- Dave Beckett Sat, 08 Nov 2014 14:02:38 -0800 nghttp2 (0.6.5-2) unstable; urgency=medium * Fix nghttpx init script path. -- Dave Beckett Fri, 31 Oct 2014 11:44:14 -0700 nghttp2 (0.6.5-1) unstable; urgency=medium * New upstream release * Install init file and logrotate files for nghttpx daemon into the nghttp2 package. Add sample config file. -- Dave Beckett Thu, 30 Oct 2014 11:57:27 -0700 nghttp2 (0.6.4-2) unstable; urgency=medium * debian/rules: Fix test for jemalloc configure arg so hurd may build -- Dave Beckett Sun, 19 Oct 2014 08:36:26 -0700 nghttp2 (0.6.4-1) unstable; urgency=medium * New upstream release -- Dave Beckett Tue, 14 Oct 2014 10:55:00 -0700 nghttp2 (0.6.3-2) unstable; urgency=medium * Standards-Version: 3.9.6 * Disable dependency and use of jemalloc on hurd since it's broken there, and an upstream recommendation not requirement. -- Dave Beckett Sun, 12 Oct 2014 13:21:05 -0700 nghttp2 (0.6.3-1) unstable; urgency=medium * New upstream release (Closes: #763906, #750616) * Removed debian/patches/path_max.patch applied upstream -- Dave Beckett Fri, 10 Oct 2014 09:12:15 -0700 nghttp2 (0.6.2-2) unstable; urgency=medium * debian/rules: Add quilt for patching * debian/patches/path_max.patch Added to remove use of PATH_MAX; also applied upstream (Closes: #762696) -- Dave Beckett Fri, 03 Oct 2014 07:00:49 -0700 nghttp2 (0.6.2-1) unstable; urgency=medium * New upstream release * Add the recommended jemalloc -- Dave Beckett Sun, 28 Sep 2014 08:41:32 -0700 nghttp2 (0.6.1-1) unstable; urgency=medium * New upstream release * debian/copyright: Fix some lintian deb5 warnings -- Dave Beckett Wed, 10 Sep 2014 13:30:14 -0700 nghttp2 (0.6.0-1) unstable; urgency=medium * New upstream release * Major soname bumped so rename packages to libnghttp2-5* * Switch dev package to libnghttp2-dev from ftpmaster suggestion -- Dave Beckett Sat, 30 Aug 2014 11:34:33 -0700 nghttp2 (0.5.1-1) unstable; urgency=medium * New upstream release -- Dave Beckett Wed, 23 Jul 2014 13:51:09 -0700 nghttp2 (0.5.0-1) unstable; urgency=medium * New upstream release * Major soname bumped so rename packages to libnghttp2-4* -- Dave Beckett Fri, 18 Jul 2014 12:34:34 -0700 nghttp2 (0.4.1-1) unstable; urgency=medium * New upstream release -- Dave Beckett Tue, 03 Jun 2014 20:50:26 -0700 nghttp2 (0.4.0-1) unstable; urgency=medium * New upstream release * Major soname bumped so rename packages to libnghttp2-3* -- Dave Beckett Sat, 17 May 2014 09:35:36 -0700 nghttp2 (0.3.2-3) experimental; urgency=medium * Add symbols -- Dave Beckett Sat, 08 Mar 2014 15:35:32 -0800 nghttp2 (0.3.2-2) experimental; urgency=medium * Explicitly set to install AUTHORS and README.rst (not README which is a pointer). (Closes: #741102) * Remove useless objects.inv from libnghttp2-doc -- Dave Beckett Sat, 08 Mar 2014 10:36:48 -0800 nghttp2 (0.3.2-1) experimental; urgency=medium * New upstream release * Added doc-base file for libnghttp2-doc * Mark libnghttp2-2-dbg as Multi-Arch: same -- Dave Beckett Sun, 02 Mar 2014 10:24:19 -0800 nghttp2 (0.3.1-1) experimental; urgency=medium * New upstream release * Use the new upstream manpages * Remove debian/sphinx.tar.bz2 now upstream ships it * debian/README.source: removed since upstream source is good -- Dave Beckett Mon, 17 Feb 2014 13:14:09 -0800 nghttp2 (0.3.0-3) experimental; urgency=medium * Update debian/sphinx.tar.bz2 from latest git upstream * debian/copyright: Updated to describe above -- Dave Beckett Fri, 14 Feb 2014 09:53:50 -0800 nghttp2 (0.3.0-2) experimental; urgency=medium * Build-Depends: pkg-config, libpython-dev -- Dave Beckett Mon, 10 Feb 2014 19:09:47 -0800 nghttp2 (0.3.0-1) experimental; urgency=medium * New upstream release * Major soname bumped so rename packages to libnghttp2-2* * Added libnghttp2-2-dbg package * Added libnghttp2-2.shlibs to manage changing ABI * debian/copyright: updated for new files * debian/watch: added debian and uupdate * Added debian/sphinx.tar.bz2 from upstream so 'make html' works. -- Dave Beckett Fri, 07 Feb 2014 14:45:39 -0800 nghttp2 (0.2.0-1) experimental; urgency=low * Initial release. (Closes: #737261) -- Dave Beckett Fri, 31 Jan 2014 23:18:41 -0800