CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

www/nghttp2 1.70.0

HTTP/2 tools

0
unaddressed
0
VuXML only
6
fixed
0
open problem reports

Port info

Maintainer
sunpoet@FreeBSD.org
Packages
latest: 1.70.0
Upstream
up to date
Last update
to 1.70.0 · 3e581f4724
Quarterly
2026Q4: 1.70.0
WWW
https://nghttp2.org/
Links
cgit · VuXML

Install

Package
# pkg install nghttp2
installs 1.70.0 from latest; from quarterly (2026Q4) 1.70.0
Port
# cd /usr/ports/www/nghttp2 && make install clean
# make -C /usr/ports/www/nghttp2 config  # change options first
Size
687 KiB download · 2.8 MiB installed
Depends on
archivers/brotli 1.2.1,1, devel/jansson 2.15.1_1, devel/libev 4.33_1,1, devel/libevent 2.1.13, dns/c-ares 1.34.9, textproc/libxml2 2.15.4, www/libnghttp2 1.70.0
License
MIT
Options
4 of 4 on in the package: APP DOCS EXAMPLES HPACK

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.70.01.70.0–
FreeBSD 151.70.01.70.0–
FreeBSD 141.70.01.70.01.70.0

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.70.01.70.0–
FreeBSD 141.70.01.70.01.70.0

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.70.0.

Fixed (6)

Show 6 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (191)

Bernhard Froehlich (decke) · 1.44.0
www/nghttp2: Add CPE information

Approved by:    portmgr (blanket)
c740a92a29
Po-Chuan Hsieh (sunpoet) · 1.44.0
www/nghttp2: Update to 1.44.0

Changes:	https://github.com/nghttp2/nghttp2/releases
ee87c81a15
Mathieu Arnold (mat) · 1.43.0
all: Remove all other $FreeBSD keywords.
135fdeebb9
Mathieu Arnold (mat) · 1.43.0
Remove # $FreeBSD$ from Makefiles.
305f148f48
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.43.0
Remoce USES=autoreconf

It is not needed after switching to upstream release tarball (r547037).
817ec5bcf3
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.43.0
Update to 1.43.0

Changes:	https://github.com/nghttp2/nghttp2/releases
e2841c7ea5
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.42.0
Update to 1.42.0

Changes:	https://github.com/nghttp2/nghttp2/releases
3d62335431
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.41.0
Use upstream release tarball

PR:		248937
Submitted by:	Daniel Engberg <daniel.engberg.lists@pyret.net>
2011a12391
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.41.0
Update to 1.41.0

Changes:	https://github.com/nghttp2/nghttp2/releases
Security:	4bb56d2f-a5b0-11ea-a860-08002728f74c
MFH:		2020Q2
f74ba913a3
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.40.0_1
USE_LDCONFIG is required when ASIO is enabled
5e8359b9ce
Jan Beich (jbeich) · 1.40.0_1
devel/boost-*: update to 1.72.0

Changes:	http://www.boost.org/users/history/version_1_72_0.html
PR:		241449
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D22136
701aa3bcf8
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.40.0
Update to 1.40.0

Changes:	https://github.com/nghttp2/nghttp2/releases
8a63f6928c
Jan Beich (jbeich) · 1.39.2_1
devel/boost-*: update to 1.71.0

Changes:	http://www.boost.org/users/history/version_1_71_0.html
PR:		238827
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D20774
befa71e0f3
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.39.2
Update to 1.39.2

Changes:	https://github.com/nghttp2/nghttp2/releases
41f38b2500
Jan Beich (jbeich) · 1.39.1_2
devel/libevent2: update to 2.1.11

Changes:	https://github.com/libevent/libevent/releases/tag/release-2.1.11-stable
ABI:		https://abi-laboratory.pro/tracker/timeline/libevent/
PR:		239599
Reported by:	GitHub (watch releases)
Approved by:	zeising (maintainer)
MFH:		2019Q3 (maybe security, partially restores 2.1.8 ABI)
Differential Revision:	https://reviews.freebsd.org/D21133
f18538b989
Gerald Pfeifer (gerald) · 1.39.1_1
Bump PORTREVISION for ports depending on the canonical version of GCC as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3 to GCC 9.1 under most circumstances now after revision 507371.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.

PR:		238330
ea8c8ec7da
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.39.1
Update to 1.39.1

Changes:	https://github.com/nghttp2/nghttp2/releases
41ab376cb0
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.38.0
Move upstream patch to files directory

Obtained from:	https://github.com/nghttp2/nghttp2/commit/cbba1ebf8fcecb24392f0cc07b1235b17d0de9d8
c8f0ff3bed
Jan Beich (jbeich) · 1.38.0
www/nghttp2: unbreak

PR:		236666
Obtained from:	upstream
156ffc3d96
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.38.0
Update to 1.38.0

Changes:	https://github.com/nghttp2/nghttp2/releases
296dae7bff
Jan Beich (jbeich) · 1.37.0_1
devel/boost-*: update to 1.70.0

Changes:	http://www.boost.org/users/history/version_1_70_0.html
PR:		235956
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D19303
9b21a3a084
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.37.0
Update to 1.37.0

Changes:	https://github.com/nghttp2/nghttp2/releases
e40f147205
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.36.0
Update to 1.36.0

Changes:	https://github.com/nghttp2/nghttp2/releases
a44641cfa2
Li-Wen Hsu (lwhsu) · 1.35.1
- Update to 1.35.1

Approved by:	sunpoet
Sponsored by:	The FreeBSD Foundation
51e1e7e02a
Gerald Pfeifer (gerald) · 1.35.0_2
Bump PORTREVISION for ports depending on the canonical version of GCC defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t GCC 8.2 under most circumstances.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, as a double check, everything INDEX-11 showed depending on lang/gcc7.

PR:		231590
a9f015d155
Jan Beich (jbeich) · 1.35.0_1
devel/boost-*: update to 1.69.0

Changes:	http://www.boost.org/users/history/version_1_69_0.html
PR:		232525
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D17645
7c879267dc
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.35.0
Update to 1.35.0

Changes:	https://github.com/nghttp2/nghttp2/releases
5f0edb0dee
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.34.0
Remove outdated BROKEN_SSL

PR:		232951
Submitted by:	brnrd
f851ef9638
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.34.0
Update to 1.34.0

Changes:	https://github.com/nghttp2/nghttp2/releases
4cb26273fa
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.33.0
Update to 1.33.0

Changes:	https://github.com/nghttp2/nghttp2/releases
7d28b5735e
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.32.1
Update to 1.32.1

Changes:	https://github.com/nghttp2/nghttp2/releases
213a4f3e16
Jan Beich (jbeich) · 1.32.0_2
devel/boost-*: update to 1.68.0

- Switch to C++14 for libboost_system to support C++14 consumers

Changes:	http://www.boost.org/users/history/version_1_68_0.html
PR:		229569
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D16165
0b055d47f2
Gerald Pfeifer (gerald) · 1.32.0_1
Bump PORTREVISION for ports depending on the canonical version of GCC in the ports tree (via Mk/bsd.default-versions.mk and lang/gcc) which has now moved from GCC 6 to GCC 7 by default.

This includes ports
 - featuring USE_GCC=yes or USE_GCC=any,
 - featuring USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and those
 - with USES=compiler specifying one of openmp, nestedfct, c11, c++0x,
   c++11-lib, c++11-lang, c++14-lang, c++17-lang, or gcc-c++11-lib.

PR:		222542
09f9633cb6
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.32.0
Update to 1.32.0

Changes:	https://github.com/nghttp2/nghttp2/releases
20a512e51d
Jan Beich (jbeich) · 1.31.1_1
Drop FreeBSD 10.3 support

Reviewed by:	yuri (SoPlex), sunpoet (nghttp2), cpm (chromium), brooks (llvm*)
Approved by:	portmgr (rene)
Differential Revision:	https://reviews.freebsd.org/D15238
67a9073255
Jan Beich (jbeich) · 1.31.1_1
Adjust PORTREVISION order to pet portlint after r467711

Tools/scripts/bump-revision.sh adds PORTREVISION in the wrong place
when DISTVERSION*FIX is used.
1e53503986
Jan Beich (jbeich) · 1.31.1_1
devel/boost-*: update to 1.67.0

Changes:	http://www.boost.org/users/history/version_1_67_0.html
PR:		227427
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D15030
cc95712fbe
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.31.1
Update to 1.31.1

Changes:	https://github.com/nghttp2/nghttp2/releases
Security:	1fccb25e-8451-438c-a2b9-6a021e4d7a31
MFH:		2018Q2
3ab6e6c006
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.31.0
Fix build with LibreSSL 2.7

PR:		226922
Submitted by:	brnrd
b70591e4b6
Mathieu Arnold (mat) · 1.31.0
Mark some ports broken with openssl-devel.

Sponsored by:	Absolight
9215977220
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.31.0
Update to 1.31.0

Changes:	https://github.com/nghttp2/nghttp2/releases
a0b883cadc
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.30.0
Update to 1.30.0

Changes:	https://github.com/nghttp2/nghttp2/releases
8d7f89e7d2
Jan Beich (jbeich) · 1.29.0_1
devel/boost-*: update to 1.66.0

Changes:	http://www.boost.org/users/history/version_1_66_0.html
PR:		223922
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D13279
25beeff079
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.29.0
Update to 1.29.0

- Remove SPDY option

Changes:	https://github.com/nghttp2/nghttp2/releases
43caa14f50
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.28.0_1
Disable SPDY option by default

- Bump PORTREVISION for dependency and package change

Upstrem no longer recommend to build nghttp2 with SPDY protocol support
enabled. SPDY support will be removed soon.

Reference:	https://github.com/nghttp2/nghttp2/commit/6b286e0d94a3c9e446921312e9072d6ee94d78fb#diff-88b99bb28683bd5b7e3a204826ead112
7bfaf7ebf7
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.28.0
Update to 1.28.0

Changes:	https://github.com/nghttp2/nghttp2/releases
43add63cc2
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.27.0
Update to 1.27.0

Changes:	https://github.com/nghttp2/nghttp2/releases
cae72e2b43
Jan Beich (jbeich) · 1.26.0_2
devel/boost-*: update to 1.65.1

Changes:	http://www.boost.org/users/history/version_1_65_1.html
PR:		218835
Approved by:	maintainer timeout (1.65.1: 2 weeks; 1.65.0: 1 month)
Tested by:	jhibbits (on powerpc64, earlier version)
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D11582
98eb11b2f0
Jan Beich (jbeich) · 1.26.0_1
devel/boost-*: enable C++11 features

PR:		218835
Obtained from:	https://github.com/DragonFlyBSD/DeltaPorts/pull/690
Approved by:	maintainer timeout (2 months)
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D11582
7e21a6476a
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.26.0
Update to 1.26.0

Changes:	https://github.com/nghttp2/nghttp2/releases
75f421a614
« newest← newerpage 2 of 4older →oldest »