Skip to content

[release-1.11] August 2021 security patches#34863

Merged
istio-testing merged 4 commits intoistio:release-1.11from
jacob-delgado:merge-release-1.11.1-patch
Aug 25, 2021
Merged

[release-1.11] August 2021 security patches#34863
istio-testing merged 4 commits intoistio:release-1.11from
jacob-delgado:merge-release-1.11.1-patch

Conversation

@jacob-delgado
Copy link
Copy Markdown
Contributor

@jacob-delgado jacob-delgado commented Aug 25, 2021

Merge release 1.11.1 patch

Oliver Liu and others added 3 commits August 10, 2021 13:49
@yangminzhu
[1.11] Security fixes (#77)
90b00bd 
* release 1.11: use case-insensitive match for host field in authz (#73)

Same as https://github.com/istio-private/istio/pull/69

Signed-off-by: Yangmin Zhu <ymzhu@google.com>

* Strip # part in URL by default and offer a flag to opt-out

* Small fix.

* Small fix.

* Small fix.

* Small fix.

* Small fix.

Co-authored-by: Yangmin Zhu <ymzhu@google.com>
@yangminzhu
add test for request with # character (#81)
ce6205d
@jacob-delgado
Merge remote-tracking branch 'upstream/release-1.11.1-patch' into rel…
6c02290 
…ease-1.11
@jacob-delgado jacob-delgado requested a review from a team August 25, 2021 02:11
@google-cla google-cla bot added the cla: yes Set by the Google CLA bot to indicate the author of a PR has signed the Google CLA. label Aug 25, 2021
@istio-testing istio-testing added the size/L Denotes a PR that changes 100-499 lines, ignoring generated files. label Aug 25, 2021
@jacob-delgado jacob-delgado changed the title [1.11] Security fixes (#77) [release-1.11] August 2021 security patches Aug 25, 2021
@jacob-delgado
Copy link
Copy Markdown
Contributor Author

jacob-delgado commented Aug 25, 2021

cc @brian-avery @myidpt

Patch depends on istio/proxy#3466

@jwendell jwendell mentioned this pull request Aug 25, 2021
Closed
@google-cla
Copy link
Copy Markdown

google-cla bot commented Aug 25, 2021

All (the pull request submitter and all commit authors) CLAs are signed, but one or more commits were authored or co-authored by someone other than the pull request submitter.

We need to confirm that all authors are ok with their commits being contributed to this project. Please have them confirm that by leaving a comment that contains only @googlebot I consent. in this pull request.

Note to project maintainer: There may be cases where the author cannot leave a comment, or the comment is not properly detected as consent. In those cases, you can manually confirm consent of the commit author(s), and set the cla label to yes (if enabled on your project).

ℹ️ Googlers: Go here for more info.

@google-cla google-cla bot added cla: no Set by the Google CLA bot to indicate the author of a PR has not signed the Google CLA. and removed cla: yes Set by the Google CLA bot to indicate the author of a PR has signed the Google CLA. labels Aug 25, 2021
@jwendell
Copy link
Copy Markdown
Member

jwendell commented Aug 25, 2021

@googlebot I consent.

@google-cla google-cla bot added cla: yes Set by the Google CLA bot to indicate the author of a PR has signed the Google CLA. and removed cla: no Set by the Google CLA bot to indicate the author of a PR has not signed the Google CLA. labels Aug 25, 2021
@jwendell jwendell added the release-notes-none Indicates a PR that does not require release notes. label Aug 25, 2021
@jwendell
Copy link
Copy Markdown
Member

jwendell commented Aug 25, 2021

/retest

@istio-testing istio-testing merged commit 30d2d56 into istio:release-1.11 Aug 25, 2021
@yangminzhu yangminzhu mentioned this pull request Oct 11, 2021
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jwendell jwendell jwendell approved these changes

Assignees

No one assigned

Labels

cla: yes Set by the Google CLA bot to indicate the author of a PR has signed the Google CLA. release-notes-none Indicates a PR that does not require release notes. size/L Denotes a PR that changes 100-499 lines, ignoring generated files.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@jacob-delgado @jwendell @istio-testing @yangminzhu