Announcing Istio 1.1.14
We’re pleased to announce the availability of Istio 1.1.14. Please see below for what’s changed.
ANTES DE ATUALIZAR
Coisas para saber e preparar antes da atualização.
Baixe e instale esta versão.
Visite a documentação para esta versão.
ALTERAÇÕES NO SOURCE
Inspecione o conjunto completo de alterações no código fonte.
Following the previous fixes for the security vulnerabilities described in ISTIO-SECURITY-2019-003 and ISTIO-SECURITY-2019-004, we are now addressing the internal control plane communication surface. These security fixes were not available at the time of our previous security release, and we considered the control plane gRPC surface to be harder to exploit.
You can find the gRPC vulnerability fix description on their mailing list (c.f. HTTP/2 Security Vulnerabilities).
- Fix an Envoy bug that breaks
java.net.http.HttpClientand other clients that attempt to upgrade from
Upgrade: h2cheader (Issue 16391).