From 875df9600d4ebfd56a289bd2277e559d8f8e26b1 Mon Sep 17 00:00:00 2001 From: Tyera Date: Thu, 13 Apr 2023 15:56:59 -0600 Subject: [PATCH] Bump h2 to v0.3.17 (#31187) h2 below v0.3.17 has a denial of service alert: https://github.com/solana-labs/solana/security/dependabot/349 --- Cargo.lock | 6 +++--- programs/sbf/Cargo.lock | 6 +++--- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 7403ec2db..8a349d905 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -2116,9 +2116,9 @@ dependencies = [ [[package]] name = "h2" -version = "0.3.11" +version = "0.3.17" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "d9f1f717ddc7b2ba36df7e871fd88db79326551d3d6f1fc406fbfd28b582ff8e" +checksum = "66b91535aa35fea1523ad1b86cb6b53c28e0ae566ba4a460f4457e936cad7c6f" dependencies = [ "bytes", "fnv", @@ -2129,7 +2129,7 @@ dependencies = [ "indexmap", "slab", "tokio", - "tokio-util 0.6.9", + "tokio-util 0.7.1", "tracing", ] diff --git a/programs/sbf/Cargo.lock b/programs/sbf/Cargo.lock index a2d11fae6..19447f5fb 100644 --- a/programs/sbf/Cargo.lock +++ b/programs/sbf/Cargo.lock @@ -1871,9 +1871,9 @@ dependencies = [ [[package]] name = "h2" -version = "0.3.11" +version = "0.3.17" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "d9f1f717ddc7b2ba36df7e871fd88db79326551d3d6f1fc406fbfd28b582ff8e" +checksum = "66b91535aa35fea1523ad1b86cb6b53c28e0ae566ba4a460f4457e936cad7c6f" dependencies = [ "bytes", "fnv", @@ -1884,7 +1884,7 @@ dependencies = [ "indexmap", "slab", "tokio", - "tokio-util 0.6.9", + "tokio-util 0.7.1", "tracing", ]