You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Upgrade h2 and hyper versions to prevent exploit (#4339)
## Motivation
HTTP/2 implementations are vulnerable to "MadeYouReset" DoS attack
through HTTP/2 control frames. More information here:
https://www.kb.cert.org/vuls/id/767506
Some `h2` versions that we're indirectly using are vulnerable to that
attack.
## Proposal
Upgrading the necessary crates, so that they use `h2` versions that have
the vulnerability patched, as suggested in this article:
https://seanmonstar.com/blog/hyper-http2-didnt-madeyoureset/
## Test Plan
CI
## Release Plan
- Nothing to do / These changes follow the usual release cycle.
0 commit comments