BSD PortsVulnerable: version 2.2.6nb4 is affected by 9 known vulnerabilities. See below.
www/h2o 2.2.6nb4 NetBSD
Optimized HTTP server with support for HTTP/1.x and HTTP/2
- System
- NetBSD
- Repository
- pkgsrc
- Maintainer
- [email protected]
- License
- mit
- Categories
- www
- Package size
- 1564.0 KiB, 4202.7 KiB installed
Description
H2O is a very fast HTTP server written in C. It can also be used as a library.
Features
* HTTP/1.0, HTTP/1.1 * HTTP/2 * WebSocket * TLS * static file serving * reverse proxy * access-logging * graceful restart and self-upgrade
In the other systems
Install
Binary package:
pkgin install h2oFrom pkgsrc:
cd /usr/pkgsrc/www/h2o && make install cleanPackages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | Version |
|---|---|
| NetBSD 10.1 x86_64 | 2.2.6nb4 |
| NetBSD 10.1 aarch64 | 2.2.6nb4 |
| SmartOS / illumos x86_64 | 2.2.6nb4 |
| macOS 15 arm64 | 2.2.6nb4 |
Dependencies
Run dependencies 4
No port depends on this one.
Known vulnerabilities 9
- h2o: arbitrary-memory-access (CVE-2021-43848)
- h2o: sensitive-information-disclosure (CVE-2023-30847)
- h2o: weak-cryptography (CVE-2023-41337)
- h2o: denial-of-service (CVE-2023-44487)
- h2o: denial-of-service (CVE-2023-50247)
- h2o: unspecified (CVE-2024-25622)
- h2o: improper-access-control (CVE-2024-45397)
- h2o: denial-of-service (CVE-2024-45403)
- h2o: denial-of-service (CVE-2025-8671)