by @mweinelt Activity log
- Created automatic suggestion
-
@mweinelt
removed
11 packages
- opa-envoy-plugin
- python312Packages.envoy-utils
- python313Packages.envoy-utils
- python314Packages.envoy-utils
- python312Packages.envoy-reader
- python313Packages.envoy-reader
- python314Packages.envoy-reader
- python313Packages.envoy-data-plane
- python314Packages.envoy-data-plane
- home-assistant-component-tests.enphase_envoy
- tests.home-assistant-component-tests.enphase_envoy
- @mweinelt accepted
- @mweinelt published on GitHub
Crash for scoped ip address in Envoy during DNS
Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, calling Utility::getAddressWithPort with a scoped IPv6 addresses causes a crash. This utility is called in the data plane from the original_src filter and the dns filter. This vulnerability is fixed in 1.37.1, 1.36.5, 1.35.8, and 1.34.13.
References
-
https://github.com/envoyproxy/envoy/security/advisories/GHSA-3cw6-2j68-868p x_refsource_CONFIRM
Affected products
- ==>= 1.35.0, < 1.35.9
- ==>= 1.36.0, < 1.36.5
- ==>= 1.37.0, < 1.37.1
- ==< 1.34.13
Matching in nixpkgs
pkgs.envoy
Cloud-native edge and service proxy
Ignored packages (11)
pkgs.opa-envoy-plugin
A plugin to enforce OPA policies with Envoy
-
nixos-unstable 1.13.2-envoy-2
- nixpkgs-unstable 1.13.2-envoy-2
- nixos-unstable-small 1.13.2-envoy-2
-
nixos-25.11 1.10.0-envoy
- nixos-25.11-small 1.10.0-envoy
- nixpkgs-25.11-darwin 1.10.0-envoy
pkgs.python312Packages.envoy-utils
Python utilities for the Enphase Envoy
pkgs.python313Packages.envoy-utils
Python utilities for the Enphase Envoy
pkgs.python314Packages.envoy-utils
Python utilities for the Enphase Envoy
pkgs.python312Packages.envoy-reader
Python module to read from Enphase Envoy units
pkgs.python313Packages.envoy-reader
Python module to read from Enphase Envoy units
pkgs.python314Packages.envoy-reader
Python module to read from Enphase Envoy units
pkgs.python313Packages.envoy-data-plane
Python dataclasses for the Envoy Data-Plane-API
pkgs.python314Packages.envoy-data-plane
Python dataclasses for the Envoy Data-Plane-API
pkgs.home-assistant-component-tests.enphase_envoy
Open source home automation that puts local control and privacy first
pkgs.tests.home-assistant-component-tests.enphase_envoy
Open source home automation that puts local control and privacy first
Package maintainers
-
@lukegb Luke Granger-Brown <nix@lukegb.com>
-
@adamcstephens Adam C. Stephens <happy.plan4249@valkor.net>
-
@katexochen Paul Meyer <katexochen0@gmail.com>