1.12.3.yaml

date: March 3, 2020

changes:
- area: buffer
  change: |
    force copy when appending small slices to OwnedImpl buffer to avoid fragmentation.
- area: http
  change: |
    added HTTP/1.1 flood protection. Can be temporarily disabled using the runtime feature ``envoy.reloadable_features.http1_flood_protection``.
- area: listeners
  change: |
    fixed issue where :ref:`TLS inspector listener filter <config_listener_filters_tls_inspector>` could have been bypassed by a client using only TLS 1.3.
- area: rbac
  change: |
    added :ref:`url_path <envoy_api_field_config.rbac.v2.Permission.url_path>` for matching URL path without the query and fragment string.
- area: sds
  change: |
    fixed the SDS vulnerability that TLS validation context (e.g., subject alt name or hash) cannot be effectively validated in some cases.