Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: scionproto/scion
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v0.9.0
Choose a base ref
...
head repository: scionproto/scion
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v0.9.1
Choose a head ref
  • 2 commits
  • 8 files changed
  • 2 contributors

Commits on Oct 20, 2023

  1. snet/metrics: use registry in snet metrics (#4423)

    The options were not correctly passed in to NewSCMPErrors in snet/metrics. This commit fixes that.
    shitz authored Oct 20, 2023
    Configuration menu
    Copy the full SHA
    bfa5fe2 View commit details
    Browse the repository at this point in the history

Commits on Oct 30, 2023

  1. deps: bump google.golang.org/grpc, set MaxConcurrentStreams (#4424)

    Bump google.golang.org/grpc from 1.57.0 to 1.57.2 due to a
    security patch.
    Skipping 1.57.1, because that contained a bug.
    
    From vulnerability alert "gRPC-Go HTTP/2 Rapid Reset vulnerability":
    
    > Impact
    >
    > In affected releases of gRPC-Go, it is possible for an attacker to send
    > HTTP/2 requests, cancel them, and send subsequent requests, which is
    > valid by the HTTP/2 protocol, but would cause the gRPC-Go server to
    > launch more concurrent method handlers than the configured maximum
    > stream limit. Patches
    >
    > This vulnerability was addressed by #6703 and has been included in patch
    > releases: 1.56.3, 1.57.1, 1.58.3. It is also included in the latest
    > release, 1.59.0.
    >
    > Along with applying the patch, users should also ensure they are using
    > the grpc.MaxConcurrentStreams server option to apply a limit to the
    > server's resources used for any single connection.
    matzf authored Oct 30, 2023
    Configuration menu
    Copy the full SHA
    a82e4fb View commit details
    Browse the repository at this point in the history
Loading