Announcing Istio 1.12.8

Istio 1.12.8 patch release.

Jun 9, 2022

This release fixes the security vulnerabilities described in our June 9th post, ISTIO-SECURITY-2022-005. This release note describes what’s different between Istio 1.12.7 and 1.12.8.

BEFORE YOU UPGRADE

Things to know and prepare before upgrading.

DOWNLOAD

Download and install this release.

DOCS

Visit the documentation for this release.

SOURCE CHANGES

Inspect the full set of source code changes.

Changes

Fixed an issue where setting PILOT_ENABLE_METADATA_EXCHANGE to false does not remove the TCP MX filter. (Issue #38520)
Fixed an issue where cluster VIPs are not correct and a stale IP address exists after a multi-cluster service is deleted in one cluster. This would cause the DNS Proxy to return a stale IP for service resolution and thus cause a traffic outage. (Issue #39039)
Fixed an issue where WorkloadEntry.Annotations being nil would lead to an abnormal exit of istiod. (Issue #39201)