Istio 1.29.5 is a patch release addressing bug fixes and multiple security vulnerabilities. Bug fixes include resolving a brief traffic outage when changing the istio.io/rev label on a Kubernetes Gateway, fixing an ambient-enrolled pod health-probe ipset issue after node restarts, patching a memory leak in the krt controller framework, and fixing a panic in the multicluster secret controller. The release also addresses 14 Envoy CVEs covering denial-of-service vulnerabilities in HTTP/3 and Zstd decompression, use-after-free crashes in ext_authz and OAuth2 filters, a padding oracle in OAuth2 cookie decryption, buffer overflows, and SAN certificate validation bypass via NUL byte truncation.
1.2K Impressions