docs: 1.12.4 release notes. (#11489)

Signed-off-by: Piotr Sikora <piotrsikora@google.com>
envoyproxy · Jun 8, 2020 · 1580db3 · 1580db3
1 parent c152887
commit 1580db3
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 3 deletions.
diff --git a/VERSION b/VERSION
@@ -1 +1 @@
-1.12.4-dev
+1.12.4
diff --git a/docs/root/intro/version_history.rst b/docs/root/intro/version_history.rst
@@ -1,9 +1,10 @@
 Version history
 ---------------
 
-1.12.4 (Pending)
-================
+1.12.4 (June 8, 2020)
+=====================
 * http: added :ref:`headers_with_underscores_action setting <envoy_api_field_core.HttpProtocolOptions.headers_with_underscores_action>` to control how client requests with header names containing underscore characters are handled. The options are to allow such headers, reject request or drop headers. The default is to allow headers, preserving existing behavior.
+* http: fixed CVE-2020-11080 by rejecting HTTP/2 SETTINGS frames with too many parameters.
 
 1.12.3 (March 3, 2020)
 ======================