Skip to content

Commit 0b7a2db

Browse files
committed
Update rust crates to avoid CVEs
Signed-off-by: Nick Hill <[email protected]>
1 parent 6b6eece commit 0b7a2db

File tree

2 files changed

+9
-7
lines changed

2 files changed

+9
-7
lines changed

Cargo.lock

Lines changed: 7 additions & 6 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

router/Cargo.toml

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,6 +27,7 @@ nohash-hasher = "^0.2.0"
2727
num = "^0.4.2"
2828
num_cpus = "^1.16.0"
2929
hyper = "^0.14.28" # Override to address CVE-2023-26964
30+
h2 = "^0.3.26 " # Override to address CVEs
3031
openssl = "^0.10.64" # Override to address WS-2023-0082, WS-2023-0083, WS-2023-0195
3132
openssl-sys = "^0.9.102" # Override to address WS-2023-0082, WS-2023-0083, WS-2023-0195
3233
rustls-webpki = "0.102.2" # Override to address WS-2023-0305, CVE-2018-16875
@@ -37,7 +38,7 @@ thiserror = "^1.0.57"
3738
tokenizers = "0.19.1"
3839
tokio = { version = "1.37.0", features = ["rt", "rt-multi-thread", "parking_lot", "signal", "sync", "fs"] }
3940
tokio-rustls = "^0.26.0"
40-
rustls = "0.22.3"
41+
rustls = "0.22.4"
4142
tracing = "^0.1.40"
4243
prost = "^0.12.4"
4344
tonic = { version = "^0.11.0", features = ["tls"] }

0 commit comments

Comments
 (0)