Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

deps: update h2 #2147

Merged
merged 1 commit into from
Apr 4, 2024
Merged

deps: update h2 #2147

merged 1 commit into from
Apr 4, 2024

Conversation

Frando
Copy link
Member

@Frando Frando commented Apr 4, 2024

Description

Update h2 to next patch release.
Fixes this cargo-deny warning:

ID: RUSTSEC-2024-0332
= Advisory: https://rustsec.org/advisories/RUSTSEC-2024-0332
= An attacker can send a flood of CONTINUATION frames, causing h2 to process them indefinitely.
This results in an increase in CPU usage.

@Frando Frando added this pull request to the merge queue Apr 4, 2024
Merged via the queue into main with commit c85bf3d Apr 4, 2024
21 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Archived in project
Development

Successfully merging this pull request may close these issues.

None yet

2 participants