Announcing Istio 1.21.6

Istio 1.21.6 patch release.

Sep 23, 2024

This release fixes the security vulnerabilities described in our September 19th post, ISTIO-SECURITY-2024-006. This release note describes what’s different between Istio 1.21.5 and 1.21.6.

BEFORE YOU UPGRADE

Things to know and prepare before upgrading.

DOWNLOAD

Download and install this release.

DOCS

Visit the documentation for this release.

SOURCE CHANGES

Inspect the full set of source code changes.

Changes

Fixed PILOT_SIDECAR_USE_REMOTE_ADDRESS functionality on sidecars to support setting internal addresses to mesh network rather than localhost to prevent header sanitization if envoy.reloadable_features.explicit_internal_address_config is enabled.
Fixed VirtualMachine WorkloadEntry locality label missing during auto registration. (Issue #51800)