CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

www/nghttp2 1.70.0

HTTP/2 tools

Port info

Maintainer
sunpoet@FreeBSD.org
Packages
latest: 1.70.0
Upstream
up to date
Last update
to 1.70.0 · 3e581f4724
Quarterly
2026Q4: 1.70.0
WWW
https://nghttp2.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install nghttp2
installs 1.70.0 from latest; from quarterly (2026Q4) 1.70.0
Port
# cd /usr/ports/www/nghttp2 && make install clean
# make -C /usr/ports/www/nghttp2 config  # change options first
Size
687 KiB download · 2.8 MiB installed
Depends on
archivers/brotli 1.2.1,1, devel/jansson 2.15.1_1, devel/libev 4.33_1,1, devel/libevent 2.1.13, dns/c-ares 1.34.9, textproc/libxml2 2.15.4, www/libnghttp2 1.70.0
License
MIT
Options
4 of 4 on in the package: APP DOCS EXAMPLES HPACK

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.70.01.70.0–
FreeBSD 151.70.01.70.0–
FreeBSD 141.70.01.70.01.70.0

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.70.01.70.0–
FreeBSD 141.70.01.70.01.70.0

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.70.0.

Fixed (6)

Show 6 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (191)

Sunpoet Po-Chuan Hsieh (sunpoet) · 1.3.2
- Update to 1.3.2

Changes:	https://github.com/tatsuhiro-t/nghttp2/releases
74da15791a
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.3.1
- Update to 1.3.1

Changes:	https://github.com/tatsuhiro-t/nghttp2/releases
Notified by:	brnrd
e4f25c4f20
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.3.0
- Update to 1.3.0

Changes:	https://github.com/tatsuhiro-t/nghttp2/releases
Notified by:	brnrd
577cfb6ab6
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.2.1
- Update to 1.2.1

Changes:	https://github.com/tatsuhiro-t/nghttp2/releases
1bcfa18f6b
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.2.0
- Update to 1.2.0

Changes:	https://github.com/tatsuhiro-t/nghttp2/releases
c266da9181
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1.2
- Update to 1.1.2

Changes:	https://github.com/tatsuhiro-t/nghttp2/releases
d47fc9c532
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.5
- Update to 1.0.5

Changes:	https://github.com/tatsuhiro-t/nghttp2/releases
e964da5a4a
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.4
- Update to 1.0.4

Changes:	https://github.com/tatsuhiro-t/nghttp2/releases
ce9c1ee436
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.2
- Update to 1.0.2

Changes:	https://github.com/tatsuhiro-t/nghttp2/releases
11794cecd1
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.7.15
- Update to 0.7.15 - Fix build on 9.x

Changes:	https://github.com/tatsuhiro-t/nghttp2/releases
0969c9677a
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.7.12
- Update to 0.7.12 - Add DOCS to OPTIONS_DEFINE

Changes:	https://github.com/tatsuhiro-t/nghttp2/releases
253012fac1
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.7.9
- Update to 0.7.9

Changes:	https://github.com/tatsuhiro-t/nghttp2/releases
PR:		198907
Submitted by:	mi
f771cf6003
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.7.8
- Update to 0.7.8

Changes:	https://github.com/tatsuhiro-t/nghttp2/releases
190453f593
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.7.7
- Fix PLIST

PR:		198795
Submitted by:	<matthew@reztek.cz>
60b25f9713
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.7.7
- Update to 0.7.7

Changes:	https://github.com/tatsuhiro-t/nghttp2/releases
a05ec4c2c4
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.7.5
- Update to 0.7.5

Changes:	https://github.com/tatsuhiro-t/nghttp2/releases
f05cb10863
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.7.4
- Update to 0.7.4

Changes:	https://github.com/tatsuhiro-t/nghttp2/releases
56f045cc4a
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.7.3
- Update to 0.7.3

Changes:	https://github.com/tatsuhiro-t/nghttp2/releases
PR:		197504
Submitted by:	mi
b65c10c36f
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.7.0
- Update to 0.7.0

Changes:	https://github.com/tatsuhiro-t/nghttp2/releases
c83630d567
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.6.7
- Fix OSVERSION and WITH_OPENSSL_PORT check

We have 4 cases:
1. OSVERSION >= 1000000 and WITH_OPENSSL_PORT undefined
2. OSVERSION >= 1000000 and WITH_OPENSSL_PORT defined
3. OSVERSION < 1000000 and WITH_OPENSSL_PORT undefined
4. OSVERSION < 1000000 and WITH_OPENSSL_PORT defined

nghttp2 builds fine in first 2 cases, and it fails in last 2 cases. The
".elif defined(WITH_OPENSSL_PORT)" in r347801 matches case 2 and 4, therefore
users of case 2 are affected. We simplify the check to OSVERSION only since
there is no need to check OpenSSL version.

Notified by:	Beeblebrox <zaphod@berentweb.com>
28677ad8d5
Mathieu Arnold (mat) · 0.6.7
Does not build < 10.0 even if WITH_OPENSSL_PORT:

First errors are:
  CXX      ssl.o
ssl.cc:29:10: fatal error: 'mutex' file not found
#include <mutex>
         ^
In file included from http2.cc:25:
./http2.h:43:19: error: no member named 'move' in namespace 'std'
      : name(std::move(name)), value(std::move(value)), no_index(no_index) {}
             ~~~~~^

Sponsored by:	Absolight
d590d282dd
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.6.7
- Make sure the include files from WRKSRC (current version) will be used instead of the installed ones

PR:		ports/195345
Submitted by:	Mikhail T <mi@ALDAN.algebra.com>
705f1cb447
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.6.7
- Update to 0.6.6 - Add ASIO option - Update WWW

Changes:	https://github.com/tatsuhiro-t/nghttp2/releases
ca28713b00
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.6.6
- Update to 0.6.6 - Add ASIO option - Update WWW

Changes:	https://github.com/tatsuhiro-t/nghttp2/releases
dd0c16807c
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.6.2
- Update to 0.6.2 - Cleanup PLIST

Changes:	https://github.com/tatsuhiro-t/nghttp2/releases
4db11c392d
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.6.1
- Update to 0.6.1 - Add BUILD_DEPENDS and RUN_DEPENDS to check version requirement

Changes:	https://github.com/tatsuhiro-t/nghttp2/releases
99f97bff00
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.6.0
- Update to 0.6.0

Changes:	https://github.com/tatsuhiro-t/nghttp2/releases
bbe4b23747
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.5.1_1
- Use INSTALL_TARGET=install-strip
0681c44c60
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.5.1_1
- Update to 0.5.1

Changes:	https://github.com/tatsuhiro-t/nghttp2/releases
3fb74cec5b
Baptiste Daroussin (bapt) · 0.5.0_1
Only use libevent2

Remove libevent as libevent2 is providing a good compatibility interface as well
as providing better performances.
Remove custom patches from libevent2 and install libevent2 the regular way
Mark ports abusing private fields of the libevent1 API as broken
Import a patch from fedora to have honeyd working with libevent2
Remove most of the patches necessary to find the custom installation we used to
have for libevent2

With hat:	portmgr
b564653452
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.5.0
- Update to 0.5.0

Changes:	https://github.com/tatsuhiro-t/nghttp2/releases
dad45fadcd
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.4.1
- Update to 0.4.1

Changes:	https://github.com/tatsuhiro-t/nghttp2/releases
597416687e
Dmitry Marakasov (amdmi3) · 0.4.0_2
- Switch devel/jansson to libtool, drop .la files - Bump dependent ports as .so version has changed

Approved by:	portmgr blanket
275c65d7c3
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.4.0_1
- Check OPSYS along with OSVERSION

Suggested by:	marino
3f64b58c6f
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.4.0_1
- Use jemalloc only on FreeBSD 10 and above - Strip shared library in post-install: - Bump PORTREVISION
da6925543d
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.4.0
- Update to 0.4.0 - Use USES=libtool

Changes:	https://github.com/tatsuhiro-t/nghttp2/releases
8b2701e277
Niclas Zeising (zeising) · 0.3.2_1
The FreeBSD x11@ and graphics team proudly presents a zeising, kwm production, with help from dumbbell, bdrewery:

NEW XORG ON FREEBSD 9-STABLE AND 10-STABLE

This update switches over to use the new xorg stack by default on FreeBSD 9
and 10 stable, on osversions where vt(9) is available.
It is still possible to use the old stack by specifying WITHOUT_NEW_XORG in
/etc/make.conf .
FreeBSD 8-STABLE and released versions of FreeBSD still use
the old version.
A package repository with binary packages for new xorg will
be available soon.

This patch also contains updates of libxcb and related ports, pixman, as well
as some drivers and utilities.

Bump portrevisions for xf86-* ports, as well as virtualbox-ose-additions due
to xserver version change.

Apart from these updates, the way shared libraries are handled has been
changed for all xorg ports, as well as libxml2 and freetype, which means
ltverhack is gone and as a consequence shared libraries have been bumped.
The plan is that this change will make library bumps less likely in the
future.
All affected ports have had their portrevisions bumped as a consequence of
this.

Fix some issues where WITH_NEW_XORG weren't detected properly on CURRENT.

Update instructions, hardware support, and more notes can be found on
https://wiki.freebsd.org/Graphics

Thanks to:	all testers, bdrewery and the FreeBSD x11@ team
exp-run by:	bdrewery [1]
PR:		ports/187602 [1]
Approved by:	portmgr (bdrewery), core (jhb)
39fc32e828
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.3.2
- Update to 0.3.2 - Add my LOCAL to MASTER_SITES - Use USES=tar:xz

Changes:	https://github.com/tatsuhiro-t/nghttp2/releases
7276445cfb
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.3.1
- Add HPACK option
474b429209
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.3.1
- Fix LIB_DEPENDS
e0613003c9
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.3.1
- Add nghttp2 0.3.1

nghttp2 - HTTP/2.0 C Library

This is an experimental implementation of Hypertext Transfer Protocol version
2.0.

WWW: http://tatsuhiro-t.github.io/nghttp2/
1cad5f411a