Skip to content

Upgrading hyper 0.8 to 0.9

Breaking0.8.1 → 0.9.18Breaking1Security4New13Changed2Fixed10Other1

Full comparisonBack to hyper
BreakingUpgrade verdict

1 breaking change and 4 security fixes.

In plain terms
  • Code that uses the Url type re-exported by hyper may need updates because that type changed incompatibly.
  • headers containing newline characters can split messages
  • HTTPS connections made with OpenSSL now check that the server certificate matches the hostname you connected to, unless you turn it off.
  • OpenSSL connections now prefer strong cipher suites out of the box instead of weaker defaults.
Must act Top 4 of 5 that need code or config changes

What you must change

Breaking1
The re-exported Url type has breaking changes.
Url
0.9.0GitHub ReleaseSummarizedView source
Security4
headers containing newline characters can split messages
Medium · CVSS 5.3
0.9.18GitHub AdvisoryOriginalView source
Enables hostname verification by default for OpenSSL connections.
OpenSSL
0.9.4GitHub ReleaseSummarizedView source
Uses secure ciphers by default in OpenSSL.
OpenSSL
0.9.4GitHub ReleaseSummarizedView source
HTTPS MitM vulnerability due to lack of hostname verification
Medium · CVSS 4.8
0.9.4GitHub AdvisoryOriginalView source