amazonlinux / amazon-linux-2023

Amazon Linux 2023
https://aws.amazon.com/linux/amazon-linux-2023/
Other
508 stars 38 forks source link

[Package Request] - NGHTTP2 #508

Closed GrahamCampbell closed 9 months ago

GrahamCampbell commented 9 months ago

What package is missing from Amazon Linux 2023? Please describe and include package name.

NGHTTP2 1.57.0

Is this an update to existing package or new package request?

Update. Current version is old.

Is this package available in Amazon Linux 2? If it is available via external sources such as EPEL, please specify.

N/A

Any additional information you'd like to include. (use-cases, etc)

Needed by bref: https://github.com/brefphp/aws-lambda-layers/pull/122/files#r1328636101.

GrahamCampbell commented 9 months ago

cc @stewartsmith

stewartsmith commented 9 months ago

We currently ship 1.55.1 and since there has been 1.56 and 1.57 released.

GrahamCampbell commented 9 months ago

Bref needs 1.57, and indeed the very latest, for when we want to build curl with http/3 enabled.

GrahamCampbell commented 9 months ago

There is also a zero-day security issue fixed in 1.57.

stewartsmith commented 9 months ago

FYI ALAS-2023-392 has been published, nghttp2-1.57.0-1.amzn2023.0.1 is now what AL2023 has, as of the 2023.2.20231016 release (so yes, I'm slow on the GitHub replies, or at least slower than we can get package updates out the door).

GrahamCampbell commented 9 months ago

Thanks for getting back. 🍻