kumahq/kuma 2.3.7

on GitHub

This is a patch release that every user should upgrade to.

This release addresses 2 CVEs:

• HTTP/2 CONTINUATION flood in net/http
• Envoy: HTTP/2: CPU exhaustion due to CONTINUATION frame flood

Changelog

• Revert "feat(images/kuma-init): use iptables-wrapper to use correct iptables version (backport of #9701) (#9725)" #9758 @bartsmykla
• chore(deps): security update #9683 #9694 #9817 @kumahq
• chore(deps): update Envoy to v1.26.8 #9842 @michaelbeaumont