Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Backport 2.14 THREESCALE-10224 CVE-2023-44487 http/2 rapid reset #1422

Merged
merged 11 commits into from
Nov 2, 2023
Merged

Backport 2.14 THREESCALE-10224 CVE-2023-44487 http/2 rapid reset #1422

merged 11 commits into from
Nov 2, 2023

Commits on Nov 2, 2023

  1. THREESCALE-10224 CVE-2023-44487 http/2 rapid reset 

    Signed-off-by: Eguzki Astiz Lezaun <[email protected]>
    @eguzki
    eguzki committed Nov 2, 2023
    Configuration menu
    Copy the full SHA
    5c63dd3 View commit details
    Browse the repository at this point in the history

  2. update changelog with PR number

    @eguzki
    eguzki committed Nov 2, 2023
    Configuration menu
    Copy the full SHA
    4176662 View commit details
    Browse the repository at this point in the history

  3. codecov: 3% tolerance

    @eguzki
    eguzki committed Nov 2, 2023
    Configuration menu
    Copy the full SHA
    e732144 View commit details
    Browse the repository at this point in the history

  4. enable lua_check_client_abort 

    Makes HTTP2 reset streams to be accounted and handled by apicast. Ref CVE-2023-44487
    @eguzki
    eguzki committed Nov 2, 2023
    Configuration menu
    Copy the full SHA
    b52ccf0 View commit details
    Browse the repository at this point in the history

  5. remove unnecessary logs

    @eguzki
    eguzki committed Nov 2, 2023
    Configuration menu
    Copy the full SHA
    49dabd1 View commit details
    Browse the repository at this point in the history

  6. fix busted tests: spec/policy/apicast/apicast_spec.lua

    @eguzki
    eguzki committed Nov 2, 2023
    Configuration menu
    Copy the full SHA
    837f75e View commit details
    Browse the repository at this point in the history

  7. doc: fix outdated info and broken links

    @eguzki
    eguzki committed Nov 2, 2023
    Configuration menu
    Copy the full SHA
    459e688 View commit details
    Browse the repository at this point in the history

  8. Update doc/overview.md 

    Co-authored-by: Darren Fennessy <[email protected]>
    @eguzki @dfennessy
    eguzki and dfennessy committed Nov 2, 2023
    Configuration menu
    Copy the full SHA
    dc8995c View commit details
    Browse the repository at this point in the history

  9. Update doc/overview.md 

    Co-authored-by: Darren Fennessy <[email protected]>
    @eguzki @dfennessy
    eguzki and dfennessy committed Nov 2, 2023
    Configuration menu
    Copy the full SHA
    dde2f2e View commit details
    Browse the repository at this point in the history

  10. doc: remove outdated info

    @eguzki
    eguzki committed Nov 2, 2023
    Configuration menu
    Copy the full SHA
    22a5603 View commit details
    Browse the repository at this point in the history

  11. Update doc/overview.md 

    Co-authored-by: Darren Fennessy <[email protected]>
    @eguzki @dfennessy
    eguzki and dfennessy committed Nov 2, 2023
    Configuration menu
    Copy the full SHA
    bc5d063 View commit details
    Browse the repository at this point in the history