Created attachment 249716 [details] Patch for libnghttp2 Use CMake for consistency and faster builds Fixes CVE-2024-28182 Note: Build now also includes .cmake files for other projects Compile tested on FreeBSD 14.0-RELEASE (amd64) (make, make check-plist) Poudriere testport OK 14.0-RELEASE (amd64) Poudriere testport OK 13.2-RELEASE (amd64) Tested with following consumers in Poudriere (14.0-RELEASE amd64): biology/ncbi-blast+ devel/libsoup3 dns/bind-tools dns/bind9-devel dns/bind918 dns/dnsdist dns/dnsperf dns/flamethrower dns/knot-resolver dns/knot3 dns/unbound ftp/curl lang/julia net/sakisafecli net/wireshark science/lammps security/bitwarden-cli (skipped, unrelated) security/wazuh-agent security/wazuh-manager sysutils/libdnf www/apache24 www/envoy (Marked BROKEN, unrelated) www/mod_http2 www/mod_http2 www/nghttp2 www/node18 www/node20 www/node21 www/wget2
Committed: https://cgit.freebsd.org/ports/commit/?id=2b3fb394078e2fefe26d4066eefa3989781ce2ec
Updated to 1.61.0 in ports 2b3fb394078e2fefe26d4066eefa3989781ce2ec. Note that cmake files are udpated.
(In reply to Po-Chuan Hsieh from comment #2) Referred commit does not include cmake files and what changes are you referring to?
I got mixed with zstd update which includes cmake files update. And this port follows upstream instructions.