pomerium/ingress-controller v0.33.4

on GitHub

Security

• This release includes an update to Envoy v1.38.5 (from v1.38.2). Please see the following Envoy release notes for a full list of security fixes:
  • https://www.envoyproxy.io/docs/envoy/v1.38.5/version_history/v1.38/v1.38.3
  • https://www.envoyproxy.io/docs/envoy/v1.38.5/version_history/v1.38/v1.38.4
  • https://www.envoyproxy.io/docs/envoy/v1.38.5/version_history/v1.38/v1.38.5
• Fixes a bug that could cause performance issues or denial-of-service in deployments receiving connections from many unique downstream clients (such as internet-facing deployments that see a lot of bot traffic). For details see GHSA-pj2c-mjp8-p2m9
• Several dependencies were updated to address additional vulnerabilities.

What's Changed

Changed

• prepare for v0.33.4 release by @kenjenkins in #1531

Full Changelog: v0.33.3...v0.33.4