[ol7_software_collections] httpd24-nghttp2-1.7.1-8.el7.1.x86_64

Name:	httpd24-nghttp2
Version:	1.7.1
Release:	8.el7.1
Architecture:	x86_64
Group:	Applications/Internet
Size:	0
License:	MIT
RPM:	httpd24-nghttp2-1.7.1-8.el7.1.x86_64.rpm
Source RPM:	httpd24-nghttp2-1.7.1-8.el7.1.src.rpm
Build Date:	Wed Jul 01 2020
Build Host:	x86-ol7-builder-02.us.oracle.com
Vendor:	Oracle America
URL:	https://nghttp2.org/
Summary:	Meta-package that only requires libnghttp2
Description:	This package installs no files. It only requires the httpd24-libnghttp2 package.

Changelog (Show File list) (Show related packages)

Thu Jun 25 2020 Lubos Uhliarik <luhliari@redhat.com> - 1.7.1-8.1

- Resolves: #1845302 - CVE-2020-11080 httpd24-nghttp2: nghttp2: overly large
  SETTINGS frames can lead to DoS

Tue Aug 27 2019 Lubos Uhliarik <luhliari@redhat.com> - 1.7.1-8

- Resolves: #1745692 - CVE-2019-9513 httpd24-nghttp2: HTTP/2: flood using
  PRIORITY frames resulting in excessive resource consumption
- Resolves: # 1744825 - CVE-2019-9511 httpd24-nghttp2: HTTP/2: large 
  amount of data request leads to denial of service

Thu Sep 13 2018 Luboš Uhliarik <luhliari@redhat.com> - 1.7.1-7
```
- Resolves: #1540167 - provides without httpd24 pre/in-fix
```
Wed May 24 2017 Luboš Uhliarik <luhliari@redhat.com> - 1.7.1-6
```
- rebuild
```

Wed Feb 17 2016 Jan Kaluza <jkaluza@redhat.com> 1.7.1-1

- fix CVE-2016-1544 (out of memory due to unlimited incoming HTTP header)

Tue Feb 09 2016 Jan Kaluza <jkaluza@redhat.com> 1.7.0-3
```
- make the package build on RHEL-6 (libnghttp2 only)
```
Mon Feb 08 2016 Jan Kaluza <jkaluza@redhat.com> 1.7.0-2
```
- enable tests
```
Mon Jan 25 2016 Kamil Dudka <kdudka@redhat.com> 1.7.0-1
```
- update to the latest upstream release
```

Fri Dec 25 2015 Kamil Dudka <kdudka@redhat.com> 1.6.0-1

- update to the latest upstream release (fixes CVE-2015-8659)

Thu Nov 26 2015 Kamil Dudka <kdudka@redhat.com> 1.5.0-1
```
- update to the latest upstream release
```