This release corrects a denial-of-service condition in rustls::ConnectionCommon::complete_io, reachable via network input. If a close_notify alert is received during a handshake, complete_io did not terminate. Callers which do not call complete_io are not affected.

What's Changed

• rel-0.21 branch housekeeping by @ctz in https://github.com/rustls/rustls/pull/1904
• Correct complete_io behaviour when close_notify alert is received (0.21 edition) by @ctz in https://github.com/rustls/rustls/pull/1907

Full Changelog: https://github.com/rustls/rustls/compare/v/0.21.10...v/0.21.11