v1.14.7 release

Signed-off-by: Tony Allen <[email protected]>
envoyproxy · Apr 15, 2021 · bc15868 · bc15868
1 parent 96e889d
commit bc15868
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 3 deletions.
diff --git a/VERSION b/VERSION
@@ -1 +1 @@
-1.14.7-dev
+1.14.7
diff --git a/docs/root/intro/version_history.rst b/docs/root/intro/version_history.rst
@@ -1,10 +1,12 @@
 Version history
 ---------------
 
-1.14.7 (Pending)
-================
+1.14.7 (April 15, 2020)
+=======================
 Changes
 -------
+* http: fixed a crash upon receiving empty HTTP/2 metadata frames. Received empty metadata frames are now counted in the HTTP/2 codec stat :ref:`metadata_empty_frames <config_http_conn_man_stats_per_codec>`.
+* http: fixed a remotely exploitable integer overflow via a very large grpc-timeout value causes undefined behavior.
 * http: fixed bugs in datadog and squash filter's handling of responses with no bodies.
 * http: fixed URL parsing for HTTP/1.1 fully qualified URLs and connect requests containing IPv6 addresses.
 * tls: fix detection of the upstream connection close event.