Skip to content

Commit d79f6e8

Browse files
publish-envoy[bot]phlax
publish-envoy[bot]
authored and
phlax
committed
repo: Release v1.30.2
**Summary of changes:** - [CVE-2024-34362: Crash (use-after-free) in EnvoyQuicServerStream](GHSA-hww5-43gv-35jv) - [CVE-2024-34363: Crash due to uncaught nlohmann JSON exception](GHSA-g979-ph9j-5gg4) - [CVE-2024-34364: Envoy OOM vector from HTTP async client with unbounded response buffer for mirror response, and other components](GHSA-xcj3-h7vf-fw26) - [CVE-2024-32974: Crash in EnvoyQuicServerStream::OnInitialHeadersComplete()](GHSA-mgxp-7hhp-8299) - [CVE-2024-32975: Crash in QuicheDataReader::PeekVarInt62Length()](GHSA-g9mq-6v96-cpqc) - [CVE-2024-32976: Endless loop while decompressing Brotli data with extra input](GHSA-7wp5-c2vq-4f8m) - [CVE-2024-23326: Envoy incorrectly accepts HTTP 200 response for entering upgrade mode](GHSA-vcf8-7238-v74c) **Docker images**: https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.30.2 **Docs**: https://www.envoyproxy.io/docs/envoy/v1.30.2/ **Release notes**: https://www.envoyproxy.io/docs/envoy/v1.30.2/version_history/v1.30/v1.30.2 **Full changelog**: v1.30.1...v1.30.2 Signed-off-by: publish-envoy[bot] <140627008+publish-envoy[bot]@users.noreply.github.com> Signed-off-by: Ryan Northey <[email protected]> Signed-off-by: publish-envoy[bot] <140627008+publish-envoy[bot]@users.noreply.github.com>
1 parent 5c1dd22 commit d79f6e8

File tree

10 files changed

+91
-19
lines changed

10 files changed

+91
-19
lines changed

‎VERSION.txt

+1-1
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
1.30.2-dev
1+
1.30.2

‎changelogs/1.27.6.yaml

+33
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,33 @@
1+
date: June 4, 2024
2+
3+
bug_fixes:
4+
- area: router
5+
change: |
6+
Fix a timing issue when upstream requests are empty when decoding data and send local reply when that happends. This is
7+
controlled by ``envoy_reloadable_features_send_local_reply_when_no_buffer_and_upstream_request``.
8+
- area: quic
9+
change: |
10+
Applied 2 QUICHE patches for crash bugs in ``QuicSpdyStream`` ``OnDataAvailable()`` and ``OnInitialHeaderComplete()``.
11+
- area: quic
12+
change: |
13+
Fixed crash bug when QUIC downstream stream was read closed and then timed out.
14+
- area: decompression
15+
change: |
16+
Fixed a bug where Envoy will go into an endless loop when using the brotli decompressor. If the input stream has
17+
redundant data, the decompressor will loop forever.
18+
- area: websocket
19+
change: |
20+
Only 101 is considered a successful response for websocket handshake for HTTP/1.1, and Envoy as a proxy will proxy the response
21+
header from upstream to downstream and then close the request if other status is received. This behavior can be
22+
reverted by ``envoy_reloadable_features_check_switch_protocol_websocket_handshake``.
23+
- area: async http client
24+
change: |
25+
Added one option to disable the response body buffering for mirror request. Also introduced a 32MB cap for the response
26+
buffer, which can be changed by the runtime flag ``http.async_response_buffer_limit`` based on the product needs.
27+
28+
removed_config_or_runtime:
29+
# *Normally occurs at the end of the* :ref:`deprecation period <deprecated>`
30+
31+
new_features:
32+
33+
deprecated:

‎changelogs/1.28.4.yaml

+26
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,26 @@
1+
date: June 5, 2024
2+
3+
bug_fixes:
4+
- area: router
5+
change: |
6+
Fix a timing issue when upstream requests are empty when decoding data and send local reply when that happends. This is
7+
controlled by ``envoy_reloadable_features_send_local_reply_when_no_buffer_and_upstream_request``.
8+
- area: quic
9+
change: |
10+
Applied 2 QUICHE patches for crash bugs in ``QuicSpdyStream`` ``OnDataAvailable()`` and ``OnInitialHeaderComplete()``.
11+
- area: quic
12+
change: |
13+
Fixed crash bug when QUIC downstream stream was read closed and then timed out.
14+
- area: decompression
15+
change: |
16+
Fixed a bug where Envoy will go into an endless loop when using the brotli decompressor. If the input stream has
17+
redundant data, the decompressor will loop forever.
18+
- area: websocket
19+
change: |
20+
Only 101 is considered a successful response for websocket handshake for HTTP/1.1, and Envoy as a proxy will proxy the response
21+
header from upstream to downstream and then close the request if other status is received. This behavior can be
22+
reverted by ``envoy_reloadable_features_check_switch_protocol_websocket_handshake``.
23+
- area: async http client
24+
change: |
25+
Added one option to disable the response body buffering for mirror request. Also introduced a 32MB cap for the response
26+
buffer, which can be changed by the runtime flag ``http.async_response_buffer_limit`` based on the product needs.

‎changelogs/1.29.5.yaml

+26
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,26 @@
1+
date: June 5, 2024
2+
3+
bug_fixes:
4+
- area: router
5+
change: |
6+
Fix a timing issue when upstream requests are empty when decoding data and send local reply when that happends. This is
7+
controlled by ``envoy_reloadable_features_send_local_reply_when_no_buffer_and_upstream_request``.
8+
- area: quic
9+
change: |
10+
Applied 2 QUICHE patches for crash bugs in ``QuicSpdyStream`` ``OnDataAvailable()`` and ``OnInitialHeaderComplete()``.
11+
- area: quic
12+
change: |
13+
Fixed crash bug when QUIC downstream stream was read closed and then timed out.
14+
- area: decompression
15+
change: |
16+
Fixed a bug where Envoy will go into an endless loop when using the brotli decompressor. If the input stream has
17+
redundant data, the decompressor will loop forever.
18+
- area: websocket
19+
change: |
20+
Only 101 is considered a successful response for websocket handshake for HTTP/1.1, and Envoy as a proxy will proxy the response
21+
header from upstream to downstream and then close the request if other status is received. This behavior can be
22+
reverted by ``envoy_reloadable_features_check_switch_protocol_websocket_handshake``.
23+
- area: async http client
24+
change: |
25+
Added one option to disable the response body buffering for mirror request. Also introduced a 32MB cap for the response
26+
buffer, which can be changed by the runtime flag ``http.async_response_buffer_limit`` based on the product needs.

‎changelogs/current.yaml

+1-14
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,4 @@
1-
date: Pending
2-
3-
behavior_changes:
4-
# *Changes that are expected to cause an incompatibility if applicable; deployment changes are likely required*
5-
6-
minor_behavior_changes:
7-
# *Changes that may cause incompatibilities for some users, but should not for most*
1+
date: June 5, 2024
82

93
bug_fixes:
104
# *Changes expected to improve the state of the world and are unlikely to have negative effects*
@@ -27,10 +21,3 @@ bug_fixes:
2721
change: |
2822
Added one option to disable the response body buffering for mirror request. Also introduced a 32MB cap for the response
2923
buffer, which can be changed by the runtime flag ``http.async_response_buffer_limit`` based on the product needs.
30-
31-
removed_config_or_runtime:
32-
# *Normally occurs at the end of the* :ref:`deprecation period <deprecated>`
33-
34-
new_features:
35-
36-
deprecated:

‎docs/inventories/v1.27/objects.inv

22 Bytes
Binary file not shown.

‎docs/inventories/v1.28/objects.inv

46 Bytes
Binary file not shown.

‎docs/inventories/v1.29/objects.inv

72 Bytes
Binary file not shown.

‎docs/inventories/v1.30/objects.inv

91 Bytes
Binary file not shown.

‎docs/versions.yaml

+4-4
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@
2020
"1.24": 1.24.12
2121
"1.25": 1.25.11
2222
"1.26": 1.26.8
23-
"1.27": 1.27.5
24-
"1.28": 1.28.3
25-
"1.29": 1.29.4
26-
"1.30": 1.30.0
23+
"1.27": 1.27.6
24+
"1.28": 1.28.4
25+
"1.29": 1.29.5
26+
"1.30": 1.30.1

0 commit comments

Comments
 (0)