Skip to content

SwiftNIO HTTP/2 1.20.0

Compare
Choose a tag to compare
@Lukasa Lukasa released this 10 Mar 10:44
· 129 commits to main since this release
ac2a5af

Security Fixes

This version contains a fix for CVE-2022-0618: Denial of service via HTTP/2 HEADERS frames padding. This fix involves a substantial rewrite of the frame parser to address a number of related issues that all trigger crashes in swift-nio-http2. For more details see the advisory. We recommend updating to this release as soon as possible. (commit)

SemVer Minor

  • Make UnrepresentableInteger public (#325)

SemVer Patch

  • Remove a retain/release (#327)
  • Use unchecked math in encodeInteger (#328)

Other Changes

  • Update minimum dependency version in README (#326)