n our long-running release tests, we don&rsquo;t know whether this is a latent bug or a new regression. Considering SDS certificate rotation is in alpha, we have decided to release 1.1.3 with this issue and target a fix for the 1.1.4 release.</li></ul><h2 id=bug-fixes>Bug fixes</h2><ul><li><p>Istio-specific back-ports of Envoy patches for <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9900"><code>CVE-2019-9900</code></a> and
<a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-