Istio 1.30.2 is a patch release containing bug fixes and security updates. Key improvements include better logging for Gateway API CRD version mismatches, new trustDomains fields in AuthorizationPolicy, and a new environment variable to control Envoy stats merging. Bug fixes address traffic outages during Gateway label changes, duplicate WasmPlugin pushes, ambient mode probe ipset issues after node restarts, a memory leak in the krt controller framework, and incorrect metric merging with protobuf content types. The release also patches 14 Envoy CVEs covering denial-of-service vulnerabilities in HTTP/3 QPACK decoding, memory exhaustion in Zstd decompression, use-after-free crashes in ext_authz and OAuth2 filters, SAN validation bypass via NUL bytes, and several other crash and buffer overflow issues.
