Page MenuHomeVyOS Platform

Update vyos-http-api-tools for package h11 security advisory
Closed, ResolvedPublic

Description

A leniency in h11's parsing of line terminators in chunked-coding message bodies can lead to request smuggling vulnerabilities in the presence of a buggy reverse proxy.

Though the latter condition is not known to be present, we will upgrade to avoid the possibility.

Regenerate requirements to upgrade h11 to version >= 0.16.0.

Details

Version
-
Is it a breaking change?
Perfectly compatible
Issue type
Bug (incorrect behavior)

Related Objects

Mentioned In
1.4.3