jerry/buzz
1
0
Fork 0
mirror of https://github.com/block/buzz.git synced 2026-11-01 15:01:12 +00:00
Code Issues Packages Projects Releases Wiki Activity

chore(deps): update h2 to 0.4.16 for RUSTSEC-2026-0258

Browse Source 
h2 0.4.14 is affected by RUSTSEC-2026-0258: unbounded empty HTTP/2 DATA
frames can cause unbounded memory growth or a panic when streams are not
drained. 0.4.16 is the first patched release. Lockfile-only bump edited in
place to avoid unrelated resolver drift; cargo tree --locked and cargo deny
check advisories both pass.

Co-authored-by: Will Pfleger <pfleger.will@gmail.com>
Signed-off-by: Will Pfleger <pfleger.will@gmail.com>
This commit is contained in:
Duncan
2026-08-18 10:29:49 -04:00
parent 081910424a
commit 5cc77a8afe
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
Cargo.lock generated
View File

@@ -3338,9 +3338,9 @@ dependencies = [
[[package]]
name = "h2"
version = "0.4.14"
version = "0.4.16"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "171fefbc92fe4a4de27e0698d6a5b392d6a0e333506bc49133760b3bcf948733"
checksum = "a9f37a958b41b3b19ee2707c06439c0e9e547e847223eb791ecb0cb821c65e27"
dependencies = [
"atomic-waker",
"bytes",