c48da13
\r\nhttp2: fix TestServerContinuationFlood flakes762b58d
\r\nhttp2: fix tipos in commentba87210
\r\nhttp2: close connections when receiving too many headersebc8168
\r\nall: fix some typos3678185
\r\nhttp2: make TestCanonicalHeaderCacheGrowth faster448c44f
\r\nhttp2: remove clientTesterc7877ac
\r\nhttp2: convert the remaining clientTester tests to testClientConnd8870b0
\r\nhttp2: use synthetic time in TestIdleConnTimeoutd73acff
\r\nhttp2: only set up deadline when Server.IdleTimeout is positive89f602b
\r\nhttp2: validate client/outgoing trailersSourced from github.com/quic-go/quic-go's\r\nreleases.
\r\n\r\n\r\nv0.37.7
\r\nThis release contains fixes for the Honeybadger vulnerability\r\n(CVE-2023-49295):
\r\n\r\n
\r\n- limit the number of queued PATH_RESPONSE frames to 256 (#4199)
\r\n- don't retransmit PATH_CHALLENGE and PATH_RESPONSE frames (#4200)
\r\nFull Changelog: https://github.com/quic-go/quic-go/compare/v0.37.6...v0.37.7
\r\nv0.37.6
\r\nThis patch release contains a backport of quic-go/quic-go#4038.
\r\nFull Changelog: https://github.com/quic-go/quic-go/compare/v0.37.5...v0.37.6
\r\n
9d2ee97
\r\nssh: implement strict KEX protocol changes4e5a261
\r\nssh: close net.Conn on all NewServerConn errors152cdb1
\r\nx509roots/fallback: update bundlefdfe1f8
\r\nssh: defer channel window adjustmentb8ffc16
\r\nblake2b: drop Go 1.6, Go 1.8 compatibility7e6fbd8
\r\nssh: wrap errors from client handshakebda2f3f
\r\nargon2: avoid clobbering BP325b735
\r\nssh/test: skip TestSSHCLIAuth on Windows1eadac5
\r\ngo.mod: update golang.org/x dependenciesb2d7c26
\r\nssh: add (*Client).DialContext methodb225e7c
\r\nhttp2: limit maximum handler goroutines to MaxConcurrentStreams88194ad
\r\ngo.mod: update golang.org/x dependencies2b60a61
\r\nquic: fix several bugs in flow control accounting73d82ef
\r\nquic: handle DATA_BLOCKED frames5d5a036
\r\nquic: handle streams moving from the data queue to the meta queue350aad2
\r\nquic: correctly extend peer's flow control window after MAX_DATA21814e7
\r\nquic: validate connection id transport parametersa600b35
\r\nquic: avoid redundant MAX_DATA updatesea63359
\r\nhttp2: check stream body is present on read timeoutddd8598
\r\nquic: version negotiation