Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

istio: Update to 1.5.4 #11530

Merged
merged 1 commit into from May 18, 2020
Merged

istio: Update to 1.5.4 #11530

merged 1 commit into from May 18, 2020

Conversation

jrajahalme
Copy link
Member

Update to Istio release 1.5.4 fixes:

  • CVE-2020-10739: By sending a specially crafted packet, an attacker could trigger a Null Pointer Exception resulting in a Denial of Service. This could be sent to the ingress gateway or a sidecar. This is conditional on Istio being configured with Istio telemetry V2 enabled.
Istio integration has been updated to Istio release 1.5.4

@jrajahalme jrajahalme added kind/bug This is a bug in the Cilium logic. area/proxy Impacts proxy components, including DNS, Kafka, Envoy and/or XDS servers. release-note/bug This PR fixes an issue in a previous release of Cilium. labels May 14, 2020
@jrajahalme jrajahalme requested review from a team as code owners May 14, 2020 09:22
@jrajahalme jrajahalme requested a review from a team May 14, 2020 09:22
@maintainer-s-little-helper maintainer-s-little-helper bot added this to In progress in 1.8.0 May 14, 2020
@jrajahalme jrajahalme marked this pull request as draft May 14, 2020 09:22
@jrajahalme
Copy link
Member Author

test-me-please

@coveralls
Copy link

coveralls commented May 14, 2020 •
edited

Coverage Status

Coverage decreased (-0.001%) to 36.992% when pulling 210c0d7 on pr/jrajahalme/istio-1.5.4 into 2141eca on master.

@jrajahalme
Copy link
Member Author

test-me-please

@jrajahalme
Copy link
Member Author

Hit by #11512

@jrajahalme
Copy link
Member Author

retest-4.9

@jrajahalme
Copy link
Member Author

retest-runtime

@jrajahalme
istio: Update to 1.5.4
210c0d7 
Signed-off-by: Jarno Rajahalme <jarno@covalent.io>
@jrajahalme
Copy link
Member Author

test-me-please

@jrajahalme
Copy link
Member Author

Hit by #11560

@jrajahalme
Copy link
Member Author

Hit by #10763

@jrajahalme
Copy link
Member Author

test-me-please

@jrajahalme
Copy link
Member Author

jrajahalme commented May 16, 2020 •
edited

Known flake on running the privileged unit tests in the runtime CI.

@jrajahalme jrajahalme marked this pull request as ready for review May 16, 2020 03:13
@maintainer-s-little-helper maintainer-s-little-helper bot added this to Needs backport from master in 1.7.4 May 16, 2020
@aanm aanm merged commit eaea136 into master May 18, 2020
1.8.0 automation moved this from In progress to Merged May 18, 2020
@aanm aanm deleted the pr/jrajahalme/istio-1.5.4 branch May 18, 2020 08:15
@jrajahalme jrajahalme mentioned this pull request May 20, 2020
Merged
@jrajahalme jrajahalme mentioned this pull request Jul 1, 2020
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@christarazi christarazi christarazi approved these changes

Assignees
No one assigned
Labels
area/proxy Impacts proxy components, including DNS, Kafka, Envoy and/or XDS servers. kind/bug This is a bug in the Cilium logic. release-note/bug This PR fixes an issue in a previous release of Cilium.
Projects
No open projects
1.7.4
Needs backport from master
1.7.5
Awaiting triage
1.8.0
  
Merged
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
5 participants
@jrajahalme @coveralls @christarazi @joestringer @aanm