Announcing Istio 1.2.5

Patch Release

26 de janeiro de 2019

We’re pleased to announce the availability of Istio 1.2.5. Please see below for what’s changed.

ANTES DE ATUALIZAR

Coisas para saber e preparar antes da atualização.

BAIXAR

Baixe e instale esta versão.

ALTERAÇÕES NO SOURCE

Inspecione o conjunto completo de alterações no código fonte.

Security update

Following the previous fixes for the security vulnerabilities described in ISTIO-SECURITY-2019-003 and ISTIO-SECURITY-2019-004, we are now addressing the internal control plane communication surface. These security fixes were not available at the time of our previous security release, and we considered the control plane gRPC surface to be harder to exploit.

You can find the gRPC vulnerability fix description on their mailing list (c.f. HTTP/2 Security Vulnerabilities).

Bug fixes

Fix an Envoy bug that breaks java.net.http.HttpClient and other clients that attempt to upgrade from HTTP/1.1 to HTTP/2 using the Upgrade: h2c header (Issue 16391).
Fix a memory leak on send timeout (Issue 15876).

Esta informação foi útil?

Você tem alguma sugestão de melhoria?

Obrigado pelo seu feedback!