Create advisory for h2 unbounded empty DATA frames

[seanmonstar]

GHSA-q83h-524g-xf6h

Affected crate(s)

• h2 (53,934,365 per month)

Links to upstream issue(s) or PR(s)

• GHSA-q83h-524g-xf6h

Severity

• Low. Potential CPU churn or DOS.

Checklist

• Advisory filename(s) starts with RUSTSEC-0000-0000 as the ID
• date field is set to the public disclosure date
• Contains a concise and descriptive title after advisory metadata
• Asked maintainer(s) if publishing an advisory is appropriate

[djc]

Thanks!

[seanmonstar]

I wasn't sure, is it useful to make these if there's a GHSA already? I didn't want to create extra work for you. 🙈

[djc]

I wasn't sure, is it useful to make these if there's a GHSA already? I didn't want to create extra work for you. 🙈

Yes, it is! We don't have GHSA > RustSec yet, only the other way around.