Announcing Istio 1.23.5

Istio 1.23.5 patch release.

Feb 13, 2025

This release contains bug fixes to improve robustness. This release note describes what’s different between Istio 1.23.4 and Istio 1.23.5

Things to know and prepare before upgrading.

Download and install this release.

Visit the documentation for this release.

Inspect the full set of source code changes.

Changes

Fixed a bug where mixed-case Hosts in Gateway and TLS redirect resulted in stale RDS. (Issue #49638)
Fixed an issue where ambient mode PeerAuthentication policies were overly strict. (Issue #53884)
Fixed a bug in where multiple STRICT port-level mTLS rules in an ambient mode PeerAuthentication policy would effectively result in a permissive policy due to incorrect evaluation logic (AND vs. OR). (Issue #54146)
Fixed non-default revisions controlling gateways lacking istio.io/rev labels. (Issue #54280)
Fixed an issue where access log order instability caused connection draining. (Issue #54672)
Fixed a bug where Istiod would send an incompatible access log format to <1.23 proxies. (Issue #54795)
Improved Istiod’s validation webhook to accept versions it does not know about. This ensures that an older Istio can validate resources created by newer CRDs.