Upgrade tonic + pin H2 (solana-labs#74)

jito-labs · Apr 18, 2023 · 1113113 · 1113113
1 parent 7c8c202
commit 1113113
Show file tree

Hide file tree

Showing 5 changed files with 128 additions and 41 deletions.
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/block_engine/Cargo.toml b/block_engine/Cargo.toml
@@ -19,4 +19,4 @@ solana-sdk = "=1.14.13"
 thiserror = "1.0.40"
 tokio = { version = "~1.14.1", features = ["rt-multi-thread"] }
 tokio-stream = "0.1.12"
-tonic = { version = "0.8.3", features = ["tls", "tls-roots", "tls-webpki-roots"] }
+tonic = { version = "0.9.2", features = ["tls", "tls-roots", "tls-webpki-roots"] }
diff --git a/jito-protos/Cargo.toml b/jito-protos/Cargo.toml
@@ -10,7 +10,7 @@ prost = "0.11.8"
 prost-types = "0.11.8"
 solana-perf = "=1.14.13"
 solana-sdk = "=1.14.13"
-tonic = "0.8.3"
+tonic = "0.9.2"
 
 [build-dependencies]
-tonic-build = "0.8.4"
+tonic-build = "0.9.2"
diff --git a/relayer/Cargo.toml b/relayer/Cargo.toml
@@ -29,4 +29,4 @@ solana-sdk = "=1.14.13"
 thiserror = "1.0.40"
 tokio = { version = "~1.14.1" }
 tokio-stream = "0.1.12"
-tonic = "0.8.3"
+tonic = "0.9.2"
diff --git a/transaction-relayer/Cargo.toml b/transaction-relayer/Cargo.toml
@@ -13,6 +13,7 @@ clap = { version = "4", features = ["derive", "env"] }
 crossbeam-channel = "0.5.7"
 dashmap = "5.4.0"
 env_logger = "0.9"
+h2 = "=0.3.18" # CVE-2023-26964
 hostname = "0.3"
 itertools = "0.10.5"
 jito-block-engine = { path = "../block_engine", version = "0.1.0" }
@@ -35,4 +36,4 @@ solana-program = "=1.14.13"
 solana-sdk = "=1.14.13"
 tokio = { version = "~1.14.1", features = ["rt-multi-thread"] }
 tokio-stream = "0.1.12"
-tonic = "0.8.3"
+tonic = "0.9.2"