1.16.3 (April 15, 2021)

Minor Behavior Changes

Changes that may cause incompatibilities for some users, but should not for most

Changes expected to improve the state of the world and are unlikely to have negative effects

• aggregate cluster: fixed a crash due to a TLS initialization issue.

• http: fixed a remotely exploitable integer overflow via a very large grpc-timeout value causes undefined behavior.

• lua: fixed crash when Lua script contains streamInfo():downstreamSslConnection().

• tls: fix a crash when peer sends a TLS Alert with an unknown code.

• tls: fix detection of the upstream connection close event.

Removed Config or Runtime

Normally occurs at the end of the deprecation period

Deprecated