Skip to content

Commit

Permalink
bazel: bump 1323 (#388)
Browse files Browse the repository at this point in the history
* bazel: bump 1323

* changelog fix

* Update changelog/v1.32.3-patch1/bumpenvoy.yaml
  • Loading branch information
nfuden authored Dec 19, 2024
1 parent 92909bc commit cf4a456
Show file tree
Hide file tree
Showing 2 changed files with 13 additions and 2 deletions.
4 changes: 2 additions & 2 deletions bazel/repository_locations.bzl
Original file line number Diff line number Diff line change
Expand Up @@ -2,8 +2,8 @@ REPOSITORY_LOCATIONS = dict(
# can't have more than one comment between envoy line and commit line in
# order to accommodate `check_extensions_build_config.sh`
envoy = dict(
# envoy v1.32.1
commit = "f7f0a80edac7e3fd6e37330b7307416c67f954ab",
# envoy v1.32.3
commit = "58bd599ebd5918d4d005de60954fcd2cb00abd95",
remote = "https://github.com/envoyproxy/envoy",
),
inja = dict(
Expand Down
11 changes: 11 additions & 0 deletions changelog/v1.32.3-patch1/bumpenvoy.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
changelog:
- type: DEPENDENCY_BUMP
issueLink: https://github.com/solo-io/envoy-gloo-ee/issues/868
dependencyOwner: envoyproxy
dependencyRepo: envoy
dependencyTag: 1.32.3
resolvesIssue: false
description: >-
CVE-2024-53269: Happy Eyeballs: Validate that additional_address are IP addresses instead of crashing when sorting.
CVE-2024-53270: HTTP/1: sending overload crashes when the request is reset beforehand
CVE-2024-53271: HTTP/1.1 multiple issues with envoy.reloadable_features.http1_balsa_delay_reset

0 comments on commit cf4a456

Please sign in to comment.