v1.30.9

envoyproxy/envoyv1.30.9Dec 18, 2024by publish-envoy[bot]

AI Summary

This release focuses on stability and security by fixing crashes in Happy Eyeballs address sorting and HTTP/1 overload handling.

Key Highlights

Fix CVE-2024-53269: Happy Eyeballs address validation
Fix CVE-2024-53270: HTTP/1 overload crash

Full Release Notes

**Summary of changes**:

- [CVE-2024-53269](https://github.com/envoyproxy/envoy/security/advisories/GHSA-mfqp-7mmj-rm53): Happy Eyeballs: Validate that additional_address are IP addresses instead of crashing when sorting.
- [CVE-2024-53270](https://github.com/envoyproxy/envoy/security/advisories/GHSA-q9qv-8j52-77p3):  HTTP/1: sending overload crashes when the request is reset beforehand

**Docker images**:
    https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.30.9
**Docs**:
    https://www.envoyproxy.io/docs/envoy/v1.30.9/
**Release notes**:
    https://www.envoyproxy.io/docs/envoy/v1.30.9/version_history/v1.30/v1.30.9
**Full changelog**:
    https://github.com/envoyproxy/envoy/compare/v1.30.8...v1.30.9

Signed-off-by: Ryan Northey <ryan@synca.io>
Signed-off-by: Boteng Yao <boteng@google.com>