From c493d44897259514ba4e4e9127482ae5c2be4857 Mon Sep 17 00:00:00 2001 From: Piotr Sikora Date: Sat, 6 Jun 2020 20:37:13 +0000 Subject: [PATCH 1/2] docs: 1.12.4 release notes. Signed-off-by: Piotr Sikora --- VERSION | 2 +- docs/root/intro/version_history.rst | 5 +++-- 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/VERSION b/VERSION index ab8d21c0ecab0..89c881bc9cb92 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -1.12.4-dev +1.12.4 diff --git a/docs/root/intro/version_history.rst b/docs/root/intro/version_history.rst index d7e659c20a320..ea176e6692413 100644 --- a/docs/root/intro/version_history.rst +++ b/docs/root/intro/version_history.rst @@ -1,9 +1,10 @@ Version history --------------- -1.12.4 (Pending) -================ +1.12.4 (June 6, 2020) +===================== * http: added :ref:`headers_with_underscores_action setting ` to control how client requests with header names containing underscore characters are handled. The options are to allow such headers, reject request or drop headers. The default is to allow headers, preserving existing behavior. +* http: fixed CVE-2020-11080 by rejecting HTTP/2 SETTINGS frames with too many parameters. 1.12.3 (March 3, 2020) ====================== From e6c4eef164b039262d78d0b0e0e469311ac7a2dd Mon Sep 17 00:00:00 2001 From: Piotr Sikora Date: Mon, 8 Jun 2020 11:25:15 +0000 Subject: [PATCH 2/2] review: update release date. Signed-off-by: Piotr Sikora --- docs/root/intro/version_history.rst | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/root/intro/version_history.rst b/docs/root/intro/version_history.rst index ea176e6692413..1ac4a5c91b549 100644 --- a/docs/root/intro/version_history.rst +++ b/docs/root/intro/version_history.rst @@ -1,7 +1,7 @@ Version history --------------- -1.12.4 (June 6, 2020) +1.12.4 (June 8, 2020) ===================== * http: added :ref:`headers_with_underscores_action setting ` to control how client requests with header names containing underscore characters are handled. The options are to allow such headers, reject request or drop headers. The default is to allow headers, preserving existing behavior. * http: fixed CVE-2020-11080 by rejecting HTTP/2 SETTINGS frames with too many parameters.