Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Upgrade h2 from 0.3.21 to 0.3.24, fix RUSTSEC-2024-0003 #4305

Merged
merged 1 commit into from
Jan 18, 2024
Merged

Upgrade h2 from 0.3.21 to 0.3.24, fix RUSTSEC-2024-0003 #4305

merged 1 commit into from
Jan 18, 2024

Conversation

eval-exec
Copy link
Collaborator

What problem does this PR solve?

Issue Number: close #4304

Problem Summary:

What's Changed:

  • Upgrade h2 from 0.3.21 to 0.3.24

Check List

Tests

  • Unit test
  • Integration test
  • Manual test (add detailed scripts or steps below)
  • No code ci-runs-only: [ quick_checks,linters ]

Side effects

  • Performance regression
  • Breaking backward compatibility

Release note 

None: Exclude this PR from the release note.

@eval-exec eval-exec requested a review from a team as a code owner January 18, 2024 01:34
@eval-exec eval-exec requested review from doitian and removed request for a team January 18, 2024 01:34
@eval-exec eval-exec added the t:ci Type: CI label Jan 18, 2024
@zhangsoledad zhangsoledad added this pull request to the merge queue Jan 18, 2024
Merged via the queue into nervosnetwork:develop with commit 54b3749 Jan 18, 2024
33 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@driftluo driftluo driftluo approved these changes

@zhangsoledad zhangsoledad zhangsoledad approved these changes

@doitian doitian Awaiting requested review from doitian doitian is a code owner automatically assigned from nervosnetwork/ckb-dev

Assignees
No one assigned
Labels
t:ci Type: CI
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

RUSTSEC-2024-0003: Resource exhaustion vulnerability in h2 may lead to Denial of Service (DoS)
3 participants
@eval-exec @zhangsoledad @driftluo