update to the latest upstream release (1.40.0)

Resolves: CVE-2019-9511
Resolves: CVE-2019-9513

nghttp2.spec

@@ -1,6 +1,6 @@
 Summary: Experimental HTTP/2 client, server and proxy
 Name: nghttp2
-Version: 1.38.0
+Version: 1.40.0
 Release: 1%{?dist}
 License: MIT
 URL: https://nghttp2.org/
@@ -10,6 +10,7 @@ BuildRequires: CUnit-devel
 BuildRequires: c-ares-devel
 BuildRequires: gcc-c++
 BuildRequires: libev-devel
+BuildRequires: libxml2-devel
 BuildRequires: openssl-devel
 BuildRequires: python3-devel
 BuildRequires: systemd-devel
@@ -51,7 +52,7 @@ sed -e '1 s|^#!/.*python|&3|' -i script/fetch-ocsp-response
     --disable-hpack-tools                   \
     --disable-python-bindings               \
     --disable-static                        \
-    --without-libxml2                       \
+    --with-libxml2                          \
     --without-spdylay
 
 # avoid using rpath
@@ -113,6 +114,15 @@ make %{?_smp_mflags} check
 
 
 %changelog
+* Fri Nov 15 2019 Kamil Dudka <kdudka@redhat.com> 1.40.0-1
+- update to the latest upstream release
+
+* Thu Nov 14 2019 Kamil Dudka <kdudka@redhat.com> 1.39.2-2
+- enable use of libxml2 to make `nghttp --get-assets` work (#1772462)
+
+* Wed Aug 14 2019 Kamil Dudka <kdudka@redhat.com> 1.39.2-1
+- update to the latest upstream release (fixes CVE-2019-9511 and CVE-2019-9513)
+
 * Thu Apr 18 2019 Kamil Dudka <kdudka@redhat.com> 1.38.0-1
 - update to the latest upstream release
 

sources

@@ -1 +1 @@
-SHA512 (nghttp2-1.38.0.tar.xz) = e432d52bcf77379ed5c10ceafb587ec8d66c56bb728cda56487b237cbab1d0073689624419ed306162dab3a51b91cfe0f59cb173b5d81346e2b6d0abd56635bc
+SHA512 (nghttp2-1.40.0.tar.xz) = 3f9b989c4bd9571b11bb9d59fe2dfd5596ba3962babfc836587d5047e780400a6cf46e43c602caa25ca83c03b84a1629953140d45223099b193df54a719745ce