tocsin

Alpine/go: critical 9.1

The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a

Action: Upgrade go to 1.26.9-r0 or later.

Affected

introducedfixedlast affected
01.26.9-r0-

Fixed versions

1.26.9-r0

Sources

published · modified · JSON