Pomerium v0.9.1 Release Notes
Release Date: 2020-06-16 // almost 4 years ago-
๐ Changes
- โ Remove unnecessary viper.New() @yegle GH-849
- authorize: reduce duplicate evaluations in opa policy @travisgroth GH-882
- envoy: bump envoy to 1.14.2 @desimone GH-894
- policy: Add consistent route identifier @travisgroth GH-905
๐ Fixed
- xds: use ipv4 address when ipv6 is disabled @calebdoxsey GH-823
- proxy: only set validation context if trusted_ca is used @calebdoxsey GH-863
- config: ensure viper ignores
certificates
config field @travisgroth GH-876 - controlplane: use previous preferred cipher suite @desimone GH-889
- controlplane: fix missing full cert chain @desimone GH-888
- internal/controlplane: make sure options.Headers are set for response @cuonglm GH-907
๐ Security
- ๐ envoy: fixes CVE-2020-11080 by rejecting HTTP/2 SETTINGS frames with too many parameters