Comments (5)
Could someone please suggest how we can fix the http2 rapid-reset cve in Kong 2.0.4 ?
or how we can apply that patch from kong 3.4.2 to 2.0.4 version?
from kong.
The version 2.0.4 is too old to be supported, but i can help provide some hints. If you only use some kong 2.0 package or image, it could be patched with http2-cve patch to this package/image. Because we need to patch the patch file to openresty source core and build it to nginx binary file.
So the important thing is that you need to find out how to build openresty/nginx binary for kong 2.0, and then check the openresty version and examine how to patch the source patch to that openresty (nginx core), and modified the kong build script to intergrate the openresty patching process.
from kong.
The above comment I left is a general approach to modify the patch progress and note that I dont have some real experience on how to build kong version 2.0.
from kong.
This issue is marked as stale because it has been open for 14 days with no activity.
from kong.
Dear contributor,
We are automatically closing this issue because it has not seen any activity for three weeks.
We're sorry that your issue could not be resolved. If any new information comes up that could
help resolving it, please feel free to reopen it.
Your contribution is greatly appreciated!
Please have a look
our pledge to the community
for more information.
Sincerely,
Your Kong Gateway team
from kong.
Related Issues (20)
- Exceptions while trying to store secrets using environment variables option HOT 8
- kong lua-resty-lock lock timeout 500 error {"message":"An unexpected error occurred"} HOT 3
- custom proxy_access_log still not working in 3.4.* HOT 3
- Kong prometheus plugin does not record 404 response codes from proxy HOT 2
- Timeout when running migrations from 3.5 to 3.6 leading to corrupted data (migration ran twice) HOT 3
- Admin API address in "New Connnection" form only support IP, not DNS. HOT 3
- Upsert target is not an upsert HOT 4
- failed to set X-Kong-Upstream-Status header while sending to client HOT 2
- [PostgreSQL error] failed to retrieve PostgreSQL server_version_num: connection refused HOT 2
- DNS resolution failed: dns server error: 3 name error HOT 14
- Optional capture groups are broken with the request-transformer plugin and traditional_compatible router HOT 4
- Error in logs: failed to run timer HOT 2
- Database migration failed while using helm chart HOT 2
- JWT Plugin bypasses validation process occasionally on frequent requests HOT 3
- TLS SNI Route not work HOT 6
- Kong info, notice, inspect logs are all getting logged as error in GCP(google cloud platform) HOT 1
- Cannot use kong.db
- http-log plugin: Host header not including port
- Every time request localhost:8001/metrics, kong-cp-kong-pod will prompt a license-related error
- Dataplane not getting information from the ControlPlane in Hybrid mode
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from kong.