v2.0.28

ChangeLog

@@ -1,7 +1,11 @@
- * On 2.5.x HTTPD versions, when flow control to the client blocks, needing
-   a WINDOW_UPDATE to make further progress, HTTP/2 connection processing
-   returns to the MPM. This improves parallel connection handling with
-   "slow" clients in the event MPM.
+v2.0.28
+--------------------------------------------------------------------------------
+ * When HTTP/2 flow controls blocks further writes, return processing to an
+   async mpm to free a worker thread. The connection needs window updates from
+   the client in such a case and can leave monitoring the socket to the mpm.
+   So far, only effective on Apache httpd 2.5.0 (trunk).
+   [ylavic, icing]
+ * Backport fix of CVE-2024-36387 from Apache 2.4.60.
 
 v2.0.27
 --------------------------------------------------------------------------------

configure.ac

@@ -12,7 +12,7 @@
 #
 
 AC_PREREQ([2.69])
-AC_INIT([mod_http2], [2.0.27], [[email protected]])
+AC_INIT([mod_http2], [2.0.28], [[email protected]])
 
 LT_PREREQ([2.2.6])
 LT_INIT()

mod_http2/h2_version.h

@@ -27,15 +27,15 @@
  * @macro
  * Version number of the http2 module as c string
  */
-#define MOD_HTTP2_VERSION "2.0.27-git"
+#define MOD_HTTP2_VERSION "2.0.28-git"
 
 /**
  * @macro
  * Numerical representation of the version number of the http2 module
  * release. This is a 24 bit number with 8 bits for major number, 8 bits
  * for minor and 8 bits for patch. Version 1.2.3 becomes 0x010203.
  */
-#define MOD_HTTP2_VERSION_NUM 0x02001b
+#define MOD_HTTP2_VERSION_NUM 0x02001c
 
 
 #endif /* mod_h2_h2_version_h */