Skip to content

build: bump nghttp2 to 1.41.0. #11412

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Jun 3, 2020
Merged

build: bump nghttp2 to 1.41.0. #11412

merged 1 commit into from
Jun 3, 2020

Conversation

htuch
Copy link
Member

@htuch htuch commented Jun 2, 2020

See release notes at
https://github.com/nghttp2/nghttp2/releases/tag/v1.41.0.

This addresses
GHSA-q5wr-xfw9-q7xr.

Signed-off-by: Harvey Tuch htuch@google.com

@htuch
build: bump nghttp2 to 1.41.0.
bbb6855 
See release notes at
https://github.com/nghttp2/nghttp2/releases/tag/v1.41.0.

This addresses
GHSA-q5wr-xfw9-q7xr.

Signed-off-by: Harvey Tuch <htuch@google.com>
@htuch htuch requested review from yanavlasov and moderation June 2, 2020 23:55
moderation
moderation approved these changes Jun 3, 2020
View reviewed changes
Copy link
Contributor

@moderation moderation left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@htuch
Copy link
Member Author

htuch commented Jun 3, 2020

/azp run

@azure-pipelines
Copy link

Azure Pipelines successfully started running 1 pipeline(s), but failed to run 2 pipeline(s).

@htuch htuch merged commit 8b6ea4e into envoyproxy:master Jun 3, 2020
@htuch htuch deleted the nghttp2-1-41 branch June 3, 2020 23:02
@PiotrSikora
Copy link
Contributor

/backport

@repokitteh-read-only repokitteh-read-only bot added the backport/review Request to backport to stable releases label Jun 5, 2020
@PiotrSikora PiotrSikora added backport/approved Approved backports to stable releases and removed backport/review Request to backport to stable releases labels Jun 5, 2020
PiotrSikora pushed a commit to PiotrSikora/envoy that referenced this pull request Jun 5, 2020
@htuch @PiotrSikora
build: bump nghttp2 to 1.41.0. (envoyproxy#11412)
ca87423 
See release notes at
https://github.com/nghttp2/nghttp2/releases/tag/v1.41.0.

This addresses
GHSA-q5wr-xfw9-q7xr.

Signed-off-by: Harvey Tuch <htuch@google.com>
Signed-off-by: Piotr Sikora <piotrsikora@google.com>
PiotrSikora pushed a commit to PiotrSikora/envoy that referenced this pull request Jun 5, 2020
@htuch @PiotrSikora
build: bump nghttp2 to 1.41.0. (envoyproxy#11412)
c9a8ccc 
See release notes at
https://github.com/nghttp2/nghttp2/releases/tag/v1.41.0.

This addresses
GHSA-q5wr-xfw9-q7xr.

Signed-off-by: Harvey Tuch <htuch@google.com>
Signed-off-by: Piotr Sikora <piotrsikora@google.com>
PiotrSikora pushed a commit to PiotrSikora/envoy that referenced this pull request Jun 5, 2020
@htuch @PiotrSikora
build: bump nghttp2 to 1.41.0. (envoyproxy#11412)
42fee1a 
See release notes at
https://github.com/nghttp2/nghttp2/releases/tag/v1.41.0.

This addresses
GHSA-q5wr-xfw9-q7xr.

Set nghttp2 internal flood mitigation threshold back to 10K to avoid any
changes in Envoy's codec behavior.

Signed-off-by: Harvey Tuch <htuch@google.com>
Signed-off-by: Yan Avlasov <yavlasov@google.com>
Signed-off-by: Piotr Sikora <piotrsikora@google.com>
PiotrSikora added a commit that referenced this pull request Jun 6, 2020
@PiotrSikora
build: bump nghttp2 to 1.41.0. (#11412) (#11468)
c152887 
See release notes at
https://github.com/nghttp2/nghttp2/releases/tag/v1.41.0.

This addresses
GHSA-q5wr-xfw9-q7xr.

Set nghttp2 internal flood mitigation threshold back to 10K to avoid any
changes in Envoy's codec behavior.

Signed-off-by: Harvey Tuch <htuch@google.com>
Signed-off-by: Yan Avlasov <yavlasov@google.com>
Signed-off-by: Piotr Sikora <piotrsikora@google.com>
PiotrSikora added a commit that referenced this pull request Jun 6, 2020
@PiotrSikora
build: bump nghttp2 to 1.41.0. (#11412) (#11469)
e8ad378 
See release notes at
https://github.com/nghttp2/nghttp2/releases/tag/v1.41.0.

This addresses
GHSA-q5wr-xfw9-q7xr.

Signed-off-by: Harvey Tuch <htuch@google.com>
Signed-off-by: Piotr Sikora <piotrsikora@google.com>
PiotrSikora added a commit that referenced this pull request Jun 6, 2020
@PiotrSikora
build: bump nghttp2 to 1.41.0. (#11412) (#11470)
d4c0a82 
See release notes at
https://github.com/nghttp2/nghttp2/releases/tag/v1.41.0.

This addresses
GHSA-q5wr-xfw9-q7xr.

Signed-off-by: Harvey Tuch <htuch@google.com>
Signed-off-by: Piotr Sikora <piotrsikora@google.com>
fpesce pushed a commit to istio/envoy that referenced this pull request Jun 11, 2020
@lambdai @htuch
build: bump nghttp2 to 1.41.0. (envoyproxy#11412) (#29)
a6be43c 
See release notes at
https://github.com/nghttp2/nghttp2/releases/tag/v1.41.0.

This addresses
GHSA-q5wr-xfw9-q7xr.

Signed-off-by: Harvey Tuch <htuch@google.com>
Signed-off-by: Yuchen Dai <silentdai@gmail.com>

Co-authored-by: htuch <htuch@users.noreply.github.com>
brian-avery pushed a commit to istio/envoy that referenced this pull request Jun 11, 2020
@lambdai @htuch
build: bump nghttp2 to 1.41.0. (envoyproxy#11412) (#28)
8f74aa3 
See release notes at
https://github.com/nghttp2/nghttp2/releases/tag/v1.41.0.

This addresses
GHSA-q5wr-xfw9-q7xr.

Signed-off-by: Harvey Tuch <htuch@google.com>
Signed-off-by: Yuchen Dai <silentdai@gmail.com>

Co-authored-by: htuch <htuch@users.noreply.github.com>
cbron pushed a commit to cbron/envoy that referenced this pull request Jun 11, 2020
@lambdai @htuch @cbron
build: bump nghttp2 to 1.41.0. (envoyproxy#11412) (istio#29)
17ce9ef 
See release notes at
https://github.com/nghttp2/nghttp2/releases/tag/v1.41.0.

This addresses
GHSA-q5wr-xfw9-q7xr.

Signed-off-by: Harvey Tuch <htuch@google.com>
Signed-off-by: Yuchen Dai <silentdai@gmail.com>

Co-authored-by: htuch <htuch@users.noreply.github.com>
lambdai added a commit to lambdai/envoy-dai that referenced this pull request Jun 11, 2020
@lambdai @htuch
build: bump nghttp2 to 1.41.0. (envoyproxy#11412) (envoyproxy#28)
91809ce 
See release notes at
https://github.com/nghttp2/nghttp2/releases/tag/v1.41.0.

This addresses
GHSA-q5wr-xfw9-q7xr.

Signed-off-by: Harvey Tuch <htuch@google.com>
Signed-off-by: Yuchen Dai <silentdai@gmail.com>

Co-authored-by: htuch <htuch@users.noreply.github.com>
istio-testing pushed a commit to istio/envoy that referenced this pull request Jun 12, 2020
@jacob-delgado @lambdai @htuch
build: bump nghttp2 to 1.41.0. (envoyproxy#11412) (#28) (#221)
71de2b0 
See release notes at
https://github.com/nghttp2/nghttp2/releases/tag/v1.41.0.

This addresses
GHSA-q5wr-xfw9-q7xr.

Signed-off-by: Harvey Tuch <htuch@google.com>
Signed-off-by: Yuchen Dai <silentdai@gmail.com>

Co-authored-by: htuch <htuch@users.noreply.github.com>

Co-authored-by: Yuchen Dai <silentdai@gmail.com>
Co-authored-by: htuch <htuch@users.noreply.github.com>
istio-testing pushed a commit to istio/envoy that referenced this pull request Jun 12, 2020
@lambdai @htuch
build: bump nghttp2 to 1.41.0. (envoyproxy#11412) (#29) (#225)
56b2f14 
See release notes at
https://github.com/nghttp2/nghttp2/releases/tag/v1.41.0.

This addresses
GHSA-q5wr-xfw9-q7xr.

Signed-off-by: Harvey Tuch <htuch@google.com>
Signed-off-by: Yuchen Dai <silentdai@gmail.com>

Co-authored-by: htuch <htuch@users.noreply.github.com>

Co-authored-by: Yuchen Dai <silentdai@gmail.com>
Co-authored-by: htuch <htuch@users.noreply.github.com>
fpesce pushed a commit to istio/envoy that referenced this pull request Jun 12, 2020
@lambdai @htuch
[1.4] build: bump nghttp2 to 1.41.0. (envoyproxy#11412) (#30)
e804c0f 
* build: bump nghttp2 to 1.41.0. (envoyproxy#11412)

See release notes at
https://github.com/nghttp2/nghttp2/releases/tag/v1.41.0.

This addresses
GHSA-q5wr-xfw9-q7xr.

Signed-off-by: Harvey Tuch <htuch@google.com>
Signed-off-by: Yuchen Dai <silentdai@gmail.com>

* build: bump nghttp2 to 1.41.0. (envoyproxy#11412)

See release notes at
https://github.com/nghttp2/nghttp2/releases/tag/v1.41.0.

This addresses
GHSA-q5wr-xfw9-q7xr.

Set nghttp2 internal flood mitigation threshold back to 10K to avoid any
changes in Envoy's codec behavior.

Signed-off-by: Harvey Tuch <htuch@google.com>
Signed-off-by: Yan Avlasov <yavlasov@google.com>
Signed-off-by: Piotr Sikora <piotrsikora@google.com>

Co-authored-by: htuch <htuch@users.noreply.github.com>
@jacob-delgado jacob-delgado mentioned this pull request Jun 15, 2020
Merged
istio-testing pushed a commit to istio/envoy that referenced this pull request Jun 16, 2020
@jacob-delgado @lambdai @htuch
[1.4] build: bump nghttp2 to 1.41.0. (envoyproxy#11412) (#30) (#226)
2e62d8f 
* build: bump nghttp2 to 1.41.0. (envoyproxy#11412)

See release notes at
https://github.com/nghttp2/nghttp2/releases/tag/v1.41.0.

This addresses
GHSA-q5wr-xfw9-q7xr.

Signed-off-by: Harvey Tuch <htuch@google.com>
Signed-off-by: Yuchen Dai <silentdai@gmail.com>

* build: bump nghttp2 to 1.41.0. (envoyproxy#11412)

See release notes at
https://github.com/nghttp2/nghttp2/releases/tag/v1.41.0.

This addresses
GHSA-q5wr-xfw9-q7xr.

Set nghttp2 internal flood mitigation threshold back to 10K to avoid any
changes in Envoy's codec behavior.

Signed-off-by: Harvey Tuch <htuch@google.com>
Signed-off-by: Yan Avlasov <yavlasov@google.com>
Signed-off-by: Piotr Sikora <piotrsikora@google.com>

Co-authored-by: htuch <htuch@users.noreply.github.com>

Co-authored-by: Yuchen Dai <silentdai@gmail.com>
Co-authored-by: htuch <htuch@users.noreply.github.com>
yashwant121 pushed a commit to yashwant121/envoy that referenced this pull request Jul 24, 2020
@htuch @yashwant121
build: bump nghttp2 to 1.41.0. (envoyproxy#11412)
8b40eb0 
See release notes at
https://github.com/nghttp2/nghttp2/releases/tag/v1.41.0.

This addresses
GHSA-q5wr-xfw9-q7xr.

Signed-off-by: Harvey Tuch <htuch@google.com>
Signed-off-by: yashwant121 <yadavyashwant36@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@moderation moderation moderation approved these changes

@yanavlasov yanavlasov yanavlasov approved these changes

Assignees

@yanavlasov yanavlasov

Labels
backport/approved Approved backports to stable releases
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
4 participants
@htuch @PiotrSikora @moderation @yanavlasov