Update H2O from 2.2.2 to 2.2.4 #637
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Version 2.2.4 was released in December 2017, and contains some security fixes, and improvements [1]. H2O version 2.2.3 ----------------- This is a bug-fix release of the 2.2 series, including two vulnerability fixes. * [security fix][http1] fix crash when receiving request with invalid framing CVE-2017-10868 #1459 (Frederik Deweerdt) * [security fix][proxy] fix stack overflow when sending huge request body to upstream CVE-2017-10869 #1460 (Frederik Deweerdt) * [core] disable buffering of stdout, stderr #1347 (Yannick Koechlin) * [expires] fix incorrect header emitted when units: month or year were used #1406 (Frederik Deweerdt) * [fastcgi] never return 304 if the file is a dynamic handler #1385 (Kazuho Oku) * [mime] flush all existing mapping when file.mime.settypes is used #1416 (Ichito Nagata) * [mruby] update mruby and modules #1320 #1338 #1413 * [mruby] expose SERVER_PROTOCOL #1353 (Frederik Deweerdt) * [mruby] properly handle content-less response #1430 (Ichito Nagata) * [proxy] do not drop the Date request header #1408 (Ichito Nagata) * [ssl] fix deadlock during lazy initialzation #1425 (Apollon Oikonomopoulos) * [ssl] fix epoll-related crashes on OSCP updates #1427 (Apollon Oikonomopoulos) * [ssl] avoid spurious session ticket renewals #1444 (Apollon Oikonomopoulos) * [websocket] fix bug that might drop the first websocket frame #1276 (wuhanck) * [libh2o] clear OpenSSL's error queue before using it #1448 (Apollon Oikonomopoulos) * [doc] add documentation of duration-stats #1306 (Frederik Deweerdt) * [misc] fix build issues on OpenIndiana #1300 (David Carlier) * [misc] build on platforms without 64-bit atomics #1433 (Apollon Oikonomopoulos) H2O version 2.2.4 ----------------- This is a bug-fix release of the 2.2 series, including two vulnerability fixes. * [security fix][access-log][ssl] fix crash when logging TLS 1.3 properties CVE-2017-10872 #1543 (MITSUNARI Shigeo) * [security fix][http2] fix crash when handling malformed HTTP/2 request CVE-2017-10908 #1544 (Kazuho Oku) * [access-log][compress] %b should log the amount of data sent after compression #1478 (Ichito Nagata) * [fastcgi][misc] respect H2O_PERL environment variable in share/h2o/setuidgid #1518 (Kazuho Oku) * [mime] fix Opus mimetype #1522 (Alex) * [mruby] fix runtime issue that prevents a closed variable from getting updated #1464 (Tatsushi Demachi) * [mruby] keep PATH_INFO undecoded #1480 (Ichito Nagata) * [mruby] fix keepalive not being used when the response to http_request is directly returned #1489 (Ichito Nagata) * [mruby] fix offset overflow of SCRIPT_INFO and PATH_INFO #1502 (Ichito Nagata) * [proxy][ssl] fix pointer corruption when connecting to origin via https (big-endian only) #1475 (Kazuho Oku) * [proxy] omit network I/O when handling internal redirect between hosts mapped to different ports #1498 (Ichito Nagata) * [ssl] fix crash on s390 (and possibly on other big-endian machines) #1474 (Apollon Oikonomopoulos) * [websocket] do not send upgrade header twice #1463 (Yamagishi Kazutoshi) [1] https://github.com/h2o/h2o/releases
pmenzel
force-pushed
the
update-h2o-from-2.2.2-to-2.2.4
branch
from
9b90a8d
to
5d90bc8
Compare
wwwutz
approved these changes
Feb 22, 2018
Sign in
to join this conversation on GitHub.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
No description provided.