Skip to content

Commit

Permalink
repo: Release v1.31.5
Browse files Browse the repository at this point in the history
- [CVE-2024-53269](GHSA-mfqp-7mmj-rm53): Happy Eyeballs: Validate that additional_address are IP addresses instead of crashing when sorting.
- [CVE-2024-53270](GHSA-q9qv-8j52-77p3):  HTTP/1: sending overload crashes when the request is reset beforehand
- [CVE-2024-53271](GHSA-rmm5-h2wv-mg4f):  HTTP/1.1 multiple issues with envoy.reloadable_features.http1_balsa_delay_reset

**Docker images**:
    https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.31.5
**Docs**:
    https://www.envoyproxy.io/docs/envoy/v1.31.5/
**Release notes**:
    https://www.envoyproxy.io/docs/envoy/v1.31.5/version_history/v1.31/v1.31.5
**Full changelog**:
    v1.31.4...v1.31.5

Signed-off-by: Ryan Northey <[email protected]>
  • Loading branch information
phlax committed Dec 18, 2024
1 parent ee1635d commit 6f26749
Show file tree
Hide file tree
Showing 4 changed files with 3 additions and 17 deletions.
2 changes: 1 addition & 1 deletion VERSION.txt
Original file line number Diff line number Diff line change
@@ -1 +1 @@
1.31.5-dev
1.31.5
16 changes: 1 addition & 15 deletions changelogs/current.yaml
Original file line number Diff line number Diff line change
@@ -1,13 +1,6 @@
date: Pending

behavior_changes:
# *Changes that are expected to cause an incompatibility if applicable; deployment changes are likely required*

minor_behavior_changes:
# *Changes that may cause incompatibilities for some users, but should not for most*
date: December 18, 2024

bug_fixes:
# *Changes expected to improve the state of the world and are unlikely to have negative effects*
- area: http/1
change: |
Fixes sending overload crashes when HTTP/1 request is reset.
Expand All @@ -18,10 +11,3 @@ bug_fixes:
change: |
Fix incorrect handling of non-101 1xx responses. This fix can be temporarily reverted by setting runtime guard
``envoy.reloadable_features.wait_for_first_byte_before_balsa_msg_done`` to false.
removed_config_or_runtime:
# *Normally occurs at the end of the* :ref:`deprecation period <deprecated>`

new_features:

deprecated:
Binary file modified docs/inventories/v1.31/objects.inv
Binary file not shown.
2 changes: 1 addition & 1 deletion docs/versions.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -24,4 +24,4 @@
"1.28": 1.28.7
"1.29": 1.29.11
"1.30": 1.30.8
"1.31": 1.31.3
"1.31": 1.31.4

0 comments on commit 6f26749

Please sign in to comment.