2.5.7

This is a patch release that every user should upgrade to.

This release addresses 2 CVEs:

• HTTP/2 CONTINUATION flood in net/http
• Envoy: HTTP/2: CPU exhaustion due to CONTINUATION frame flood

Changelog

• chore(deps): security update #9818 @kumahq
• chore(deps): update Envoy to v1.28.2 #9845 #9847 @michaelbeaumont

2.4.8

This is a patch release that every user should upgrade to.

This release addresses 2 CVEs:

• HTTP/2 CONTINUATION flood in net/http
• Envoy: HTTP/2: CPU exhaustion due to CONTINUATION frame flood

Changelog

• Revert "feat(images/kuma-init): use iptables-wrapper to use correct iptables version (backport of #9701) (#9726)" #9757 @bartsmykla
• chore(deps): security update #9684 #9696 #9815 @kumahq
• chore(deps): update Envoy to v1.27.4 #9844 @michaelbeaumont

2.3.7

This is a patch release that every user should upgrade to.

This release addresses 2 CVEs:

• HTTP/2 CONTINUATION flood in net/http
• Envoy: HTTP/2: CPU exhaustion due to CONTINUATION frame flood

Changelog

• Revert "feat(images/kuma-init): use iptables-wrapper to use correct iptables version (backport of #9701) (#9725)" #9758 @bartsmykla
• chore(deps): security update #9683 #9694 #9817 @kumahq
• chore(deps): update Envoy to v1.26.8 #9842 @michaelbeaumont

2.2.9

This is a patch release that every user should upgrade to.

This release addresses 2 CVEs:

• HTTP/2 CONTINUATION flood in net/http
• Envoy: HTTP/2: CPU exhaustion due to CONTINUATION frame flood

Changelog

• Revert "feat(images/kuma-init): use iptables-wrapper to use correct iptables version (backport of #9701) (#9727)" #9759 @bartsmykla
• chore(deps): security update #9680 #9695 #9816 @kumahq
• chore(deps): update Envoy to v1.26.8 #9841 @michaelbeaumont

2.6.4

This is a patch release that every user should upgrade to.

Changelog

• fix(transparent-proxy): make iptables mode detection more defensive (backport of #9776) #9785 @kumahq

2.5.6

This is a patch release that every user should upgrade to.

Changelog

• fix(transparent-proxy): make iptables mode detection more defensive (backport of #9776) #9788 @kumahq

2.6.3

This is a patch release that every user should upgrade to.

Changelog

• chore(deps): security update #9621 #9681 #9697 @kumahq
• feat(transparent-proxy): add automatic iptables type detection (backport of #9750) #9765 @kumahq
• fix(MeshHTTPRoute): fix response headers filter in gateway route generation (backport of #9652) #9660 @kumahq

2.5.5

This is a patch release that every user should upgrade to.

Changelog

• chore(deps): security update #9682 #9698 @kumahq
• feat(transparent-proxy): add automatic iptables type detection (backport of #9750) #9764 @kumahq

2.5.4

This is a patch release that every user should upgrade to.

Changelog

• chore(deps): security update #9366 #9512 #9619 @kumahq

2.4.7

This is a patch release that every user should upgrade to.

Changelog

• chore(deps): security update #9513 #9620 @kumahq
• chore(deps): use latest kumahq/kuma-gui #9409 @kumahq