Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Cargo: update h2 to 0.3.26 to fix HTTP/2 CONTINUATION flood #54

Merged
merged 2 commits into from
Apr 5, 2024
Merged

Cargo: update h2 to 0.3.26 to fix HTTP/2 CONTINUATION flood #54

merged 2 commits into from
Apr 5, 2024

Commits on Apr 5, 2024

  1. Cargo: update h2 to v0.3.26 to fix HTTP/2 CONTINUATION flood 

    Update h2 to v0.3.26, to address HTTP/2 CONTINUATION flood issues.
Update related crates as well, reqwest to 0.11.26, hyper to 0.14.28,
which are only patchlevel updates.

See also https://rustsec.org/advisories/RUSTSEC-2024-0332.html,
https://nowotarski.info/http2-continuation-flood/,
https://seanmonstar.com/blog/hyper-http2-continuation-flood/.
    @dongsupark
    dongsupark committed Apr 5, 2024
    Configuration menu
    Copy the full SHA
    5f98253 View commit details
    Browse the repository at this point in the history

  2. Cargo: update uuid to 1.8 to fix clippy failures 

    Clippy of Rust 1.77 or newer started checking out of bounds strictly,
so clippy started failing with uuid 1.6 or older. Update clippy to
the latest version to fix that.

See also uuid-rs/uuid#721.

Debugged-by @pothos.
    @dongsupark
    dongsupark committed Apr 5, 2024
    Configuration menu
    Copy the full SHA
    5452456 View commit details
    Browse the repository at this point in the history