Skip to content

Bump h2 to 0.4.16 for RUSTSEC-2026-0258 - #367

Merged
mheffner merged 1 commit into
rotel-dev:mainfrom
mheffner:fix-h2-RUSTSEC-2026-0258
Oct 26, 2026
Merged

mheffner merged 1 commit into
rotel-dev:mainfrom
mheffner:fix-h2-RUSTSEC-2026-0258

Conversation

@mheffner

Copy link
Copy Markdown
Member

Fixes RUSTSEC-2026-0258 / GHSA-q83h-524g-xf6h (h2: unbounded empty DATA frames; patched >= 0.4.16). Cargo.lock-only changes, no co-bumps.

  • Cargo.lock: h2 0.4.12 -> 0.4.16
  • examples/rust_processors/async_enrichment_processor/Cargo.lock: h2 0.4.15 -> 0.4.16
  • examples/rust_processors/trivial_processor/Cargo.lock: h2 0.4.15 -> 0.4.16
  • rotel_python_processor_sdk/Cargo.lock: h2 0.4.15 -> 0.4.16
  • rotel_rust_processor_sdk/Cargo.lock: h2 0.4.15 -> 0.4.16
  • utilities/Cargo.lock: h2 0.4.15 -> 0.4.16

Fixes RUSTSEC-2026-0258 / GHSA-q83h-524g-xf6h (h2: unbounded empty
DATA frames; patched >= 0.4.16). Cargo.lock-only changes, no co-bumps.

- Cargo.lock: h2 0.4.12 -> 0.4.16
- examples/rust_processors/async_enrichment_processor/Cargo.lock:
  h2 0.4.15 -> 0.4.16
- examples/rust_processors/trivial_processor/Cargo.lock:
  h2 0.4.15 -> 0.4.16
- rotel_python_processor_sdk/Cargo.lock: h2 0.4.15 -> 0.4.16
- rotel_rust_processor_sdk/Cargo.lock: h2 0.4.15 -> 0.4.16
- utilities/Cargo.lock: h2 0.4.15 -> 0.4.16

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@mheffner
mheffner merged commit 8a1d0c6 into rotel-dev:main Oct 26, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant