hj/pleroma
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Sec: Update hackney to version 4.9.1

Browse source 
Hackney 4.9 enforces max_body while it reads and returns
{:error, {:closed, partial}} for a truncated body; the hackney
regression tests now pin that. The certifi override goes, as
hackney itself now asks for certifi ~> 2.18.0.
This commit is contained in:
Lain Soykaf 2026-10-26 21:52:03 +04:00
commit eabdde8a20
No known key found for this signature in database
5 changed files with 20 additions and 24 deletions
Download patch file Download diff file Expand all files Collapse all files

1
changelog.d/hackney-4.9.1.security Normal file
View file

@ -0,0 +1 @@
Update Hackney to version 4.9.1, which fixes unbounded response body buffering and decompression, CA pinning, redirect credential leaks and other vulnerabilities