Bug 278178 - www/libnghttp2: Update to 1.61.0
Summary: www/libnghttp2: Update to 1.61.0
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Only Me
Assignee: Po-Chuan Hsieh
URL: https://github.com/nghttp2/nghttp2/re...
Keywords:
Depends on:
Blocks: 278179
  Show dependency treegraph
 
Reported: 2024-04-04 21:54 UTC by Daniel Engberg
Modified: 2024-04-08 04:52 UTC (History)
1 user (show)

See Also:
bugzilla: maintainer-feedback? (sunpoet)


Attachments
Patch for libnghttp2 (3.61 KB, patch)
2024-04-04 21:54 UTC, Daniel Engberg
no flags Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Daniel Engberg freebsd_committer freebsd_triage 2024-04-04 21:54:51 UTC
Created attachment 249716 [details]
Patch for libnghttp2

Use CMake for consistency and faster builds
Fixes CVE-2024-28182

Note: Build now also includes .cmake files for other projects

Compile tested on FreeBSD 14.0-RELEASE (amd64) (make, make check-plist)
Poudriere testport OK 14.0-RELEASE (amd64)
Poudriere testport OK 13.2-RELEASE (amd64)

Tested with following consumers in Poudriere (14.0-RELEASE amd64):
biology/ncbi-blast+
devel/libsoup3
dns/bind-tools
dns/bind9-devel
dns/bind918
dns/dnsdist
dns/dnsperf
dns/flamethrower
dns/knot-resolver
dns/knot3
dns/unbound
ftp/curl
lang/julia
net/sakisafecli
net/wireshark
science/lammps
security/bitwarden-cli	(skipped, unrelated)
security/wazuh-agent
security/wazuh-manager
sysutils/libdnf
www/apache24
www/envoy		(Marked BROKEN, unrelated)
www/mod_http2
www/mod_http2
www/nghttp2
www/node18
www/node20
www/node21
www/wget2
Comment 2 Po-Chuan Hsieh freebsd_committer freebsd_triage 2024-04-06 01:13:39 UTC
Updated to 1.61.0 in ports 2b3fb394078e2fefe26d4066eefa3989781ce2ec. Note that cmake files are udpated.
Comment 3 Daniel Engberg freebsd_committer freebsd_triage 2024-04-06 07:49:09 UTC
(In reply to Po-Chuan Hsieh from comment #2)
Referred commit does not include cmake files and what changes are you referring to?
Comment 4 Po-Chuan Hsieh freebsd_committer freebsd_triage 2024-04-08 04:52:26 UTC
I got mixed with zstd update which includes cmake files update. And this port follows upstream instructions.