Skip to content

3.4.8

Latest
Latest

Choose a tag to compare

View all tags
@trowski trowski released this 01 Nov 16:25
v3.4.8
This tag was signed with the committer’s verified signature.
trowski Aaron Piotrowski
GPG key ID: 5B456E6AABA44A63
Verified
Learn about vigilant mode.
31b004b
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

  • Security: Fix HTTP/1 Malformed Chunk Delimiter Allows Request Smuggling by @trowski
  • Security: Fix HTTP/2 receive flow-control windows are not enforced on incoming DATA by @webpatser
  • Close the client when the HTTP/1.x driver finishes, unless upgraded by @lav45 in #397
  • Pass the configured header size limit to Http2Parser by @webpatser in #398

References

New Contributors

Full Changelog: v3.4.7...v3.4.8

Contributors

webpatser, lav45, and trowski
Assets 2
Loading