Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

release/1.16.x - Update supported Envoy versions #19273

Merged
merged 2 commits into from
Oct 19, 2023

Conversation

cthain
Copy link
Contributor

@cthain cthain commented Oct 18, 2023

Description

This PR updates the supported versions of Envoy to the latest patch releases to address CVE-2023-44487.

Note: Versions of Envoy < 1.24.x are not maintained and do not provide patched versions that address CVE-2023-44487.

PR Checklist

  • updated test coverage
  • external facing docs updated
  • appropriate backport labels added
  • not a security concern

@cthain cthain requested a review from a team as a code owner October 18, 2023 18:20
@cthain cthain self-assigned this Oct 18, 2023
@github-actions github-actions bot added type/docs Documentation needs to be created/updated/clarified type/ci Relating to continuous integration (CI) tooling for testing or releases theme/contributing Additions and enhancements to community contributing materials labels Oct 18, 2023
@cthain cthain mentioned this pull request Oct 19, 2023
4 tasks
@cthain cthain merged commit eb75ac2 into release/1.16.x Oct 19, 2023
83 checks passed
@cthain cthain deleted the cthain/net-5945/release/1.16.x branch October 19, 2023 21:45
@karlhungus
Copy link

karlhungus commented Nov 3, 2023

@cthain seems like this doc got missed: https://developer.hashicorp.com/consul/docs/connect/proxies/envoy#envoy-and-consul-client-agent (indicates 1.23.12 is still supported).

edit: At least the release notes conflict with this https://github.com/hashicorp/consul/releases/tag/v1.16.3

@david-yu
Copy link
Contributor

david-yu commented Nov 4, 2023

@karlhungus The versions are correct on the docs, 1.23.12 is no longer maintained but still compatible with 1.1.6.x hence it was not updated with this PR.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
pr/no-backport theme/contributing Additions and enhancements to community contributing materials type/ci Relating to continuous integration (CI) tooling for testing or releases type/docs Documentation needs to be created/updated/clarified
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants