1.2.5 / 1.1.14 release notes (#4835)

content/about/notes/1.1.14/index.md

@@ -0,0 +1,10 @@
+---
+title: Istio 1.1.14
+publishdate: 2019-08-26
+icon: notes
+release: 1.1.14
+---
+
+This release includes an important security update.  This release note describes what's different between Istio 1.1.13 and Istio 1.1.14.
+
+{{< relnote >}}

content/about/notes/1.2.5/index.md

@@ -0,0 +1,10 @@
+---
+title: Istio 1.2.5
+publishdate: 2019-08-26
+icon: notes
+release: 1.2.5
+---
+
+This release includes an important security update.  This release note describes what's different between Istio 1.2.4 and Istio 1.2.5.
+
+{{< relnote >}}

content/blog/2019/announcing-1.1.14/index.md

@@ -0,0 +1,11 @@
+---
+title: Announcing Istio 1.1.14
+description: Istio 1.1.14 patch release.
+publishdate: 2019-08-26
+attribution: The Istio Team
+release: 1.1.14
+---
+
+We're pleased to announce the availability of Istio 1.1.14. Please see below for what's changed.
+
+{{< relnote >}}

content/blog/2019/announcing-1.2.5/index.md

@@ -0,0 +1,11 @@
+---
+title: Announcing Istio 1.2.5
+description: Istio 1.2.5 patch release.
+publishdate: 2019-08-26
+attribution: The Istio Team
+release: 1.2.5
+---
+
+We're pleased to announce the availability of Istio 1.2.5. Please see below for what's changed.
+
+{{< relnote >}}

content/boilerplates/notes/1.1.14.md

@@ -0,0 +1,10 @@
+## Security update
+
+Following the previous fixes for the security vulnerabilities described in [our August 13th, 2019 blog post](/blog/2019/istio-security-003-004/), we are now addressing the internal control plane communication surface. These security fixes were not available at the time of our previous security release, and we considered the control plane gRPC surface to be harder to exploit.
+
+You can find the gRPC vulnerability fix description on their mailing list (c.f.
+[HTTP/2 Security Vulnerabilities](https://groups.google.com/forum/#!topic/grpc-io/w5jPamxdda4)).
+
+## Bug fix
+
+This release fixes a bug which was introduced during the security vulnerability fix of 1.1.13: 503 HTTP errors were returned on HTTP requests attempting to upgrade to HTTP2.

content/boilerplates/notes/1.2.5.md

@@ -0,0 +1,11 @@
+## Security update
+
+Following the previous fixes for the security vulnerabilities described in [our August 13th, 2019 blog post](/blog/2019/istio-security-003-004/), we are now addressing the internal control plane communication surface. These security fixes were not available at the time of our previous security release, and we considered the control plane gRPC surface to be harder to exploit.
+
+You can find the gRPC vulnerability fix description on their mailing list (c.f.
+[HTTP/2 Security Vulnerabilities](https://groups.google.com/forum/#!topic/grpc-io/w5jPamxdda4)).
+
+## Bug fixes
+
+- This release fixes a bug which was introduced during the security vulnerability fix of 1.2.4: 503 HTTP errors were returned on HTTP requests attempting to upgrade to HTTP2.
+- Fix a goroutine leak on send timeout ([Issue 15876](https://github.com/istio/istio/issues/15876))

data/args.yml

@@ -2,7 +2,7 @@
 version: "1.2"
 
 # The full Istio version identifier the docs describe
-full_version: "1.2.4"
+full_version: "1.2.5"
 
 # The year to display in copyright notices
 copyright_year: 2019