v1.3.4

mostynb released this 06 Jun 14:02

· 1 commit to release_1.3 since this release

This release contains an important security fix: Upgrade github.com/mostynb/go-grpc-compression to avoid decompression bomb DoS (#755)

This issue was uncovered during a security audit performed by 7ASecurity, facilitated by OSTIF, for the OpenTelemetry project.

https://opentelemetry.io/blog/2024/cve-2024-36129/
GHSA-c74f-6mfw-mm4v

Assets 4