File server that accepts Lightning Network payments for downloads
Creative Commons Zero v1.0 Universal
185
stars
24
forks
source link
RUSTSEC-2024-0336: `rustls::ConnectionCommon::complete_io` could fall into an infinite loop based on network input #321
Closed
github-actions[bot] closed 4 months ago
rustls
0.19.1
>=0.23.5,>=0.22.4, <0.23.0,>=0.21.11, <0.22.0
If a
close_notify
alert is received during a handshake,complete_io
does not terminate.Callers which do not call
complete_io
are not affected.rustls-tokio
andrustls-ffi
do not callcomplete_io
and are not affected.rustls::Stream
andrustls::StreamOwned
types usecomplete_io
and are affected.See advisory page for additional details.