The only issue I see is not a blocker, but should probably be fixed:
I: libnghttp2-14: hardening-no-bindnow
usr/lib/x86_64-linux-gnu/libnghttp2.so.14.13.3
Otherwise, since this is meant to support a reverse proxy, it should get
a review by the Security Team. Reverse proxies are often security-
sensitive, even if there is no CVE I could find in mitre.
** Changed in: nghttp2 (Ubuntu)
Status: Confirmed => In Progress
** Changed in: nghttp2 (Ubuntu)
Assignee: (unassigned) => Mathieu Trudel-Lapierre (cyphermox)
** Changed in: nghttp2 (Ubuntu)
Status: In Progress => New
** Changed in: nghttp2 (Ubuntu)
Assignee: Mathieu Trudel-Lapierre (cyphermox) => Ubuntu Security Team
(ubuntu-security)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1687454
Title:
[MIR] nghttp2
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/nghttp2/+bug/1687454/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
