nixpkgs/pkgs/servers/http/envoy
Thomas Gerbet bc4dc452fa envoy: flag as vulnerable to CVE-2024-30255
Envoy 1.27.4 [0] contains the fix but upgrading it is
not straightforward as the build of the current version
is already broken and only thanks to the caching of the deps
(seems to be the case since the removal of Go 1.20).

Fixing the build seems to require more Bazel knownledge than I have
and the the usual maintainer is currently not available.

[0] https://github.com/envoyproxy/envoy/releases/tag/v1.27.4
2024-04-10 22:43:57 +02:00
..
0001-nixpkgs-use-system-Python.patch envoy: 1.26.4 -> 1.27.1 2023-10-13 23:17:11 +00:00
0002-nixpkgs-use-system-Go.patch envoy: 1.26.4 -> 1.27.1 2023-10-13 23:17:11 +00:00
0003-nixpkgs-use-system-C-C-toolchains.patch envoy: 1.26.4 -> 1.27.1 2023-10-13 23:17:11 +00:00
default.nix envoy: flag as vulnerable to CVE-2024-30255 2024-04-10 22:43:57 +02:00
protobuf.patch envoy: 1.26.4 -> 1.27.1 2023-10-13 23:17:11 +00:00