message: docs: merge 1.13.1 and 1.12.3 release note to master
diff: @@ -70,6 +70,14 @@ Version history
  circuit breaker behavior is described :ref:`here <arch_overview_circuit_break>`.
  * upstream: changed load distribution algorithm when all priorities enter :ref:`panic mode<arch_overview_load_balancing_panic_threshold>`.
  +1.13.1 (March 3, 2020)
  +======================
  +* buffer: force copy when appending small slices to OwnedImpl buffer to avoid fragmentation.
  +* http: added HTTP/1.1 flood protection. Can be temporarily disabled using the runtime feature `envoy.reloadable_features.http1_flood_protection`.
  +* listeners: fixed issue where :ref:`TLS inspector listener filter <config_listener_filters_tls_inspector>` could have been bypassed by a client using only TLS 1.3.
  +* rbac: added :ref:`url_path <envoy_api_field_config.rbac.v2.Permission.url_path>` for matching URL path without the query and fragment string.
  +* sds: fixed the SDS vulnerability that TLS validation context (e.g., subject alt name or hash) cannot be effectively validated in some cases.
  +
  1.13.0 (January 20, 2020)
  =========================
  * access log: added FILTER_STATE :ref:`access log formatters <config_access_log_format>` and gRPC access logger.
  @@ -133,6 +141,14 @@ Version history
  * tracing: added tags for gRPC request path, authority, content-type and timeout.
  * udp: added initial support for :ref:`UDP proxy <config_udp_listener_filters_udp_proxy>`
  +1.12.3 (March 3, 2020)
  +======================
  +* buffer: force copy when appending small slices to OwnedImpl buffer to avoid fragmentation.
  +* http: added HTTP/1.1 flood protection. Can be temporarily disabled using the runtime feature `envoy.reloadable_features.http1_flood_protection`.
  +* listeners: fixed issue where :ref:`TLS inspector listener filter <config_listener_filters_tls_inspector>` could have been bypassed by a client using only TLS 1.3.
  +* rbac: added :ref:`url_path <envoy_api_field_config.rbac.v2.Permission.url_path>` for matching URL path without the query and fragment string.
  +* sds: fixed the SDS vulnerability that TLS validation context (e.g., subject alt name or hash) cannot be effectively validated in some cases.
  +
  1.12.2 (December 10, 2019)
  ==========================
  * http: fixed CVE-2019-18801 by allocating sufficient memory for request headers.
  