Skip to content

[release-1.11] August 2021 security patches#34863

Merged
istio-testing merged 4 commits intoistio:release-1.11from
jacob-delgado:merge-release-1.11.1-patch
Aug 25, 2021
Merged

[release-1.11] August 2021 security patches#34863
istio-testing merged 4 commits intoistio:release-1.11from
jacob-delgado:merge-release-1.11.1-patch

Conversation

@jacob-delgado
Copy link
Copy Markdown
Contributor

Merge release 1.11.1 patch

Oliver Liu and others added 3 commits August 10, 2021 13:49
* release 1.11: use case-insensitive match for host field in authz (#73)

Same as https://github.com/istio-private/istio/pull/69

Signed-off-by: Yangmin Zhu <[email protected]>

* Strip # part in URL by default and offer a flag to opt-out

* Small fix.

* Small fix.

* Small fix.

* Small fix.

* Small fix.

Co-authored-by: Yangmin Zhu <[email protected]>
@jacob-delgado jacob-delgado requested a review from a team August 25, 2021 02:11
@google-cla google-cla bot added the cla: yes Set by the Google CLA bot to indicate the author of a PR has signed the Google CLA. label Aug 25, 2021
@istio-testing istio-testing added the size/L Denotes a PR that changes 100-499 lines, ignoring generated files. label Aug 25, 2021
@jacob-delgado jacob-delgado changed the title [1.11] Security fixes (#77) [release-1.11] August 2021 security patches Aug 25, 2021
@jacob-delgado
Copy link
Copy Markdown
Contributor Author

cc @brian-avery @myidpt

Patch depends on istio/proxy#3466

@google-cla
Copy link
Copy Markdown

google-cla bot commented Aug 25, 2021

All (the pull request submitter and all commit authors) CLAs are signed, but one or more commits were authored or co-authored by someone other than the pull request submitter.

We need to confirm that all authors are ok with their commits being contributed to this project. Please have them confirm that by leaving a comment that contains only @googlebot I consent. in this pull request.

Note to project maintainer: There may be cases where the author cannot leave a comment, or the comment is not properly detected as consent. In those cases, you can manually confirm consent of the commit author(s), and set the cla label to yes (if enabled on your project).

ℹ️ Googlers: Go here for more info.

@google-cla google-cla bot added cla: no Set by the Google CLA bot to indicate the author of a PR has not signed the Google CLA. and removed cla: yes Set by the Google CLA bot to indicate the author of a PR has signed the Google CLA. labels Aug 25, 2021
@jwendell
Copy link
Copy Markdown
Member

@googlebot I consent.

@google-cla google-cla bot added cla: yes Set by the Google CLA bot to indicate the author of a PR has signed the Google CLA. and removed cla: no Set by the Google CLA bot to indicate the author of a PR has not signed the Google CLA. labels Aug 25, 2021
@jwendell jwendell added the release-notes-none Indicates a PR that does not require release notes. label Aug 25, 2021
@jwendell
Copy link
Copy Markdown
Member

/retest

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cla: yes Set by the Google CLA bot to indicate the author of a PR has signed the Google CLA. release-notes-none Indicates a PR that does not require release notes. size/L Denotes a PR that changes 100-499 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants