Skip to content

SwiftNIO 2.13.1

Compare
Choose a tag to compare
@Lukasa Lukasa released this 10 Feb 15:11

This version contains security related content: please apply the update as soon as possible.

Semver Minor

  • Updated http-parser to bring in the fix for Node.JS CVE-2019-15605, which also affected SwiftNIO. This allowed remote peers to launch request smuggling attacks on SwiftNIO. A SwiftNIO-specific CVE is forthcoming, but as this vulnerability is already public knowledge we judged it to be important to ship a patch before the CVE is ready. Reported by ZeddYu Lu. (df93900)