]> Cypherpunks repositories - gostls13.git/commit
[release-branch.go1.16] net/http: update bundled golang.org/x/net/http2
authorFilippo Valsorda <filippo@golang.org>
Thu, 9 Dec 2021 11:13:31 +0000 (06:13 -0500)
committerAlex Rakoczy <alex@golang.org>
Thu, 9 Dec 2021 13:10:36 +0000 (13:10 +0000)
commitd0aebe3e74fe14799f97ddd3f01129697c6a290a
treeb98aa26533e9608973c6baf90a8f24a0172c5c9e
parent99950270f3cf52cccc6966d8668ff21b573bb6f5
[release-branch.go1.16] net/http: update bundled golang.org/x/net/http2

Pull in security fix

    a5309b3 http2: cap the size of the server's canonical header cache

Updates #50058
Fixes CVE-2021-44716

Change-Id: Ifdd13f97fce168de5fb4b2e74ef2060d059800b9
Reviewed-on: https://go-review.googlesource.com/c/go/+/370575
Trust: Filippo Valsorda <filippo@golang.org>
Run-TryBot: Filippo Valsorda <filippo@golang.org>
Reviewed-by: Alex Rakoczy <alex@golang.org>
TryBot-Result: Gopher Robot <gobot@golang.org>
src/go.mod
src/go.sum
src/net/http/h2_bundle.go
src/vendor/modules.txt