summaryrefslogtreecommitdiffstats
path: root/.gitlab-ci.yml
diff options
context:
space:
mode:
authorNora Widdecke <nora@sequoia-pgp.org>2021-09-28 12:18:38 +0200
committerNora Widdecke <nora@sequoia-pgp.org>2021-10-25 18:25:05 +0200
commit463b8702ab672e1f528968f46f81b8cfdf2005c8 (patch)
tree52be0e0741130c9507a26d6865ef34562baf6b85 /.gitlab-ci.yml
parent6257a2e0197190f5f2951693256d05d32437bd55 (diff)
ffi, net, sq: Update to tokio 1.0.
- net: hyper has two vulnerabilities: - RUSTSEC-2021-0079: "Integer overflow in `hyper`'s parsing of the `Transfer-Encoding` header leads to data loss" (vulnerability) - RUSTSEC-2021-0078: "Lenient `hyper` header parsing of `Content-Length` could allow request smuggling" (vulnerability) Both are fixed in hyper 0.14.10., which depends on tokio 1. tokio 0.2 is incompatible to tokio 1, so we need to update that too, also in the dependents sq and ffi. hyper-tls 0.4 is incompatible to hyper 0.14., update to hyper-tls 0.5.
Diffstat (limited to '.gitlab-ci.yml')
0 files changed, 0 insertions, 0 deletions