Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
**Summary of changes:** - [CVE-2024-34362: Crash (use-after-free) in EnvoyQuicServerStream](GHSA-hww5-43gv-35jv) - [CVE-2024-34364: Envoy OOM vector from HTTP async client with unbounded response buffer for mirror response, and other components](GHSA-xcj3-h7vf-fw26) - [CVE-2024-32974: Crash in EnvoyQuicServerStream::OnInitialHeadersComplete()](GHSA-mgxp-7hhp-8299) - [CVE-2024-32975: Crash in QuicheDataReader::PeekVarInt62Length()](GHSA-g9mq-6v96-cpqc) - [CVE-2024-32976: Endless loop while decompressing Brotli data with extra input](GHSA-7wp5-c2vq-4f8m) - [CVE-2024-23326: Envoy incorrectly accepts HTTP 200 response for entering upgrade mode](GHSA-vcf8-7238-v74c) **Docker images**: https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.27.6 **Docs**: https://www.envoyproxy.io/docs/envoy/v1.27.6/ **Release notes**: https://www.envoyproxy.io/docs/envoy/v1.27.6/version_history/v1.27/v1.27.6 **Full changelog**: v1.27.5...v1.27.6 Signed-off-by: Ryan Northey <[email protected]>
- Loading branch information