message: docs: fix version history
diff: @@ -36,6 +36,18 @@ Version history
  * tracing: added upstream_address tag.
  * udp: added initial support for :ref:`UDP proxy <config_udp_listener_filters_udp_proxy>`
  +1.12.2 (December 10, 2019)
  +==========================
  +* http: fixed CVE-2019-18801 by allocating sufficient memory for request headers.
  +* http: fixed CVE-2019-18802 by implementing stricter validation of HTTP/1 headers.
  +* http: trim LWS at the end of header keys, for correct HTTP/1.1 header parsing.
  +* http: added strict authority checking. This can be reversed temporarily by setting the runtime feature `envoy.reloadable_features.strict_authority_validation` to false.
  +* route config: fixed CVE-2019-18838 by checking for presence of host/path headers.
  +
  +1.12.1 (November 8, 2019)
  +=========================
  +* listener: fixed CVE-2019-18836 by clearing accept filters before connection creation.
  +
  1.12.0 (October 31, 2019)
  =========================
  * access log: added a new flag for :ref:`downstream protocol error <envoy_api_field_data.accesslog.v2.ResponseFlags.downstream_protocol_error>`.
  @@ -84,11 +96,9 @@ Version history
  * http: :ref:`AUTO <envoy_api_enum_value_config.filter.network.http_connection_manager.v2.HttpConnectionManager.CodecType.AUTO>` codec protocol inference now requires the H2 magic bytes to be the first bytes transmitted by a downstream client.
  * http: remove h2c upgrade headers for HTTP/1 as h2c upgrades are currently not supported.
  * http: absolute URL support is now on by default. The prior behavior can be reinstated by setting :ref:`allow_absolute_url <envoy_api_field_core.Http1ProtocolOptions.allow_absolute_url>` to false.
  -* http: added strict authority checking. This can be reversed temporarily by setting the runtime feature `envoy.reloadable_features.strict_authority_validation` to false.
  * http: support :ref:`host rewrite <envoy_api_msg_config.filter.http.dynamic_forward_proxy.v2alpha.PerRouteConfig>` in the dynamic forward proxy.
  * http: support :ref:`disabling the filter per route <envoy_api_msg_config.filter.http.grpc_http1_reverse_bridge.v2alpha1.FilterConfigPerRoute>` in the grpc http1 reverse bridge filter.
  * http: added the ability to :ref:`configure max connection duration <envoy_api_field_core.HttpProtocolOptions.max_connection_duration>` for downstream connections.
  -* http: trim LWS at the end of header keys, for correct HTTP/1.1 header parsing.
  * listeners: added :ref:`continue_on_listener_filters_timeout <envoy_api_field_Listener.continue_on_listener_filters_timeout>` to configure whether a listener will still create a connection when listener filters time out.
  * listeners: added :ref:`HTTP inspector listener filter <config_listener_filters_http_inspector>`.
  * listeners: added :ref:`connection balancer <envoy_api_field_Listener.connection_balance_config>`
  