We released nghttp2 v0.7.14.
This release fixes global-buffer-overflow bug in HPACK compression code introduced in nghttp2 v0.7.12. We strongly recommend to upgrade the old installation to this latest release.
Previously, the example code in
documentation had a wrong code which could lead to segmentation fault,
due to incorrect return value if no protocol was selected. Now it is
Previously, when header decompression failed for incoming PUSH_PROMISE, RST_STREAM was sent to the associated stream, instead of the promised stream. Now it is corrected, and RST_STREAM is sent to the promised stream.
Zhuoyun Wei kindly offered systemd and upstart configuration file for nghttpx proxy. Zhuoyun Wei also offered a patch to improve logrotate configuration file for nghttpx.
We updated sphinx_rtd_theme to the latest, which includes even nicer UI.
h2load now shows 2 new metrics: time to connect and TTFB (time to first byte). Thank you to ericcarlschwartz for bringing this awesome feature.
nghttpd now has
-m option to specify its
nghttpx now logs absolute URI in access log if it is configured as
HTTP/2 or client proxy. It also gets
--max-header-fields options to specify maximum header field buffer
size it can be received. Previously, it was hardcoded as 32KiB.
We fixed the bug in nghttp that it aborted with assertion error if
very large value was given to