Skip to content

SwiftNIO 1.14.2

Compare
Choose a tag to compare
@Lukasa Lukasa released this 10 Feb 15:32
· 4 commits to nio-1.14 since this release
8da5c5a

This version contains security related content: please apply the update as soon as possible.

Semver Minor

  • Updated http-parser to bring in the fix for Node.JS CVE-2019-15605, which also affected SwiftNIO. This allowed remote peers to launch request smuggling attacks on SwiftNIO. A SwiftNIO-specific CVE is forthcoming, but as this vulnerability is already public knowledge we judged it to be important to ship a patch before the CVE is ready. Reported by ZeddYu Lu. (#1388)