Skip to content

Commit f204d4a

Browse files
authored
Upgrade h2 and hyper versions to prevent exploit (#4339)
## Motivation HTTP/2 implementations are vulnerable to "MadeYouReset" DoS attack through HTTP/2 control frames. More information here: https://www.kb.cert.org/vuls/id/767506 Some `h2` versions that we're indirectly using are vulnerable to that attack. ## Proposal Upgrading the necessary crates, so that they use `h2` versions that have the vulnerability patched, as suggested in this article: https://seanmonstar.com/blog/hyper-http2-didnt-madeyoureset/ ## Test Plan CI ## Release Plan - Nothing to do / These changes follow the usual release cycle.
1 parent a03ad48 commit f204d4a

File tree

3 files changed

+868
-822
lines changed

3 files changed

+868
-822
lines changed

0 commit comments

Comments
 (0)