aleph

Matthew Davidson 2023-11-17T09:39:36.719409Z

Aleph 0.6.4 is out. This is a minor release that changes nothing from 0.6.3, but bumps up the Netty dep to 4.1.100 for https://nvd.nist.gov/vuln/detail/CVE-2023-44487. It'll probably be the last release that doesn't support HTTP/2. https://clojars.org/aleph/versions/0.6.4

Matthew Davidson 2023-11-17T09:52:34.387899Z

(This is more for people with CVE compliance issues, btw. Aleph <0.7 is immune to the HTTP/2 stream cancellation attack, because it doesn't support HTTP/2.)