Skip to content

Commit

Permalink
h2o: Update version from 2.2.2 to 2.2.4
Browse files Browse the repository at this point in the history
Version 2.2.4 was released in December 2017, and contains some security
fixes, and improvements [1].

H2O version 2.2.3
-----------------

This is a bug-fix release of the 2.2 series, including two vulnerability
fixes.

*   [security fix][http1] fix crash when receiving request with invalid framing CVE-2017-10868 #1459 (Frederik Deweerdt)
*   [security fix][proxy] fix stack overflow when sending huge request body to upstream CVE-2017-10869 #1460 (Frederik Deweerdt)
*   [core] disable buffering of stdout, stderr #1347 (Yannick Koechlin)
*   [expires] fix incorrect header emitted when units: month or year were used #1406 (Frederik Deweerdt)
*   [fastcgi] never return 304 if the file is a dynamic handler #1385 (Kazuho Oku)
*   [mime] flush all existing mapping when file.mime.settypes is used #1416 (Ichito Nagata)
*   [mruby] update mruby and modules #1320 #1338 #1413
*   [mruby] expose SERVER_PROTOCOL #1353 (Frederik Deweerdt)
*   [mruby] properly handle content-less response #1430 (Ichito Nagata)
*   [proxy] do not drop the Date request header #1408 (Ichito Nagata)
*   [ssl] fix deadlock during lazy initialzation #1425 (Apollon Oikonomopoulos)
*   [ssl] fix epoll-related crashes on OSCP updates #1427 (Apollon Oikonomopoulos)
*   [ssl] avoid spurious session ticket renewals #1444 (Apollon Oikonomopoulos)
*   [websocket] fix bug that might drop the first websocket frame #1276 (wuhanck)
*   [libh2o] clear OpenSSL's error queue before using it #1448 (Apollon Oikonomopoulos)
*   [doc] add documentation of duration-stats #1306 (Frederik Deweerdt)
*   [misc] fix build issues on OpenIndiana #1300 (David Carlier)
*   [misc] build on platforms without 64-bit atomics #1433 (Apollon Oikonomopoulos)

H2O version 2.2.4
-----------------

This is a bug-fix release of the 2.2 series, including two vulnerability
fixes.

*   [security fix][access-log][ssl] fix crash when logging TLS 1.3 properties CVE-2017-10872 #1543 (MITSUNARI Shigeo)
*   [security fix][http2] fix crash when handling malformed HTTP/2 request CVE-2017-10908 #1544 (Kazuho Oku)
*   [access-log][compress] %b should log the amount of data sent after compression #1478 (Ichito Nagata)
*   [fastcgi][misc] respect H2O_PERL environment variable in share/h2o/setuidgid #1518 (Kazuho Oku)
*   [mime] fix Opus mimetype #1522 (Alex)
*   [mruby] fix runtime issue that prevents a closed variable from getting updated #1464 (Tatsushi Demachi)
*   [mruby] keep PATH_INFO undecoded #1480 (Ichito Nagata)
*   [mruby] fix keepalive not being used when the response to http_request is directly returned #1489 (Ichito Nagata)
*   [mruby] fix offset overflow of SCRIPT_INFO and PATH_INFO #1502 (Ichito Nagata)
*   [proxy][ssl] fix pointer corruption when connecting to origin via https (big-endian only) #1475 (Kazuho Oku)
*   [proxy] omit network I/O when handling internal redirect between hosts mapped to different ports #1498 (Ichito Nagata)
*   [ssl] fix crash on s390 (and possibly on other big-endian machines) #1474 (Apollon Oikonomopoulos)
*   [websocket] do not send upgrade header twice #1463 (Yamagishi Kazutoshi)

[1] https://github.com/h2o/h2o/releases
  • Loading branch information
pmenzel committed Feb 22, 2018
1 parent 9370673 commit 5d90bc8
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion h2o.be0
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
#!/usr/bin/env beesh

# BEE_VERSION h2o-2.2.2-0
# BEE_VERSION h2o-2.2.4-0

## this file was created by bee init and should be executed to build a
## bee-package. (Additional hints are located at the end of this file.)
Expand Down

0 comments on commit 5d90bc8

Please sign in to comment.