rustls/rustls v/0.22.4

0.22.4

on GitHub

This release corrects a denial-of-service condition in rustls::ConnectionCommon::complete_io, reachable via network input. If a close_notify alert is received during a handshake, complete_io did not terminate. Callers which do not call complete_io are not affected.

What's Changed

• Correct complete_io behaviour when close_notify alert is received (0.22 edition) by @ctz in #1906

Full Changelog: v/0.22.3...v/0.22.4