Emissary-Ingress - v3.8.2

Security

:tada: Emissary Ingress 3.8.2 :tada:

Emissary Ingress is an open source, Kubernetes-native microservices API gateway built on the Envoy Proxy.

Upgrade Emissary - https://www.getambassador.io/reference/upgrading.html
View changelog - https://github.com/emissary-ingress/emissary/blob/v3.8.2/CHANGELOG.md
Get started with Emissary on Kubernetes - https://www.getambassador.io/user-guide/getting-started

  • Security: This release includes security patches to the current Envoy proxy version to address CVE
    2023-44487 and includes a fix to determine if a client is making too many requests with premature
    resets. The connection is disconnected if more than 50% of resets are considered premature.
    Another fix is also included which exposes a runtime setting to control the limit on the number of
    HTTP requests processed from a single connection in a single I/O cycle to mitigate CPU starvation.

  • Security: Upgrading to the latest release of Golang as part of our general dependency upgrade
    process. This update resolves CVE-2023-39323 and CVE-2023-39325.


Details

date
Oct. 11, 2023, 2:11 p.m.
name
Emissary Ingress 3.8.2
type
Patch
👇
Register or login to:
  • 🔍View and search all Emissary-Ingress releases.
  • 🛠️Create and share lists to track your tools.
  • 🚨Setup notifications for major, security, feature or patch updates.
  • 🚀Much more coming soon!
Continue with GitHub
Continue with Google
or