Announcing Istio 1.13.5

Istio 1.13.5 patch release.

Jun 9, 2022

This release fixes the security vulnerabilities described in our June 9th post, ISTIO-SECURITY-2022-005. This release note describes what’s different between Istio 1.13.4 and 1.13.5.

BEFORE YOU UPGRADE

Things to know and prepare before upgrading.

DOWNLOAD

Download and install this release.

DOCS

Visit the documentation for this release.

SOURCE CHANGES

Inspect the full set of source code changes.

Changes

Fixed improper filtering of endpoints from East-West Gateway caused by DestinationRule TLS settings. (Issue #38704)
Fixed that running istioctl verify-install would fail with the demo profile.
Fixed an issue where cluster VIPs are not correct and a stale IP address exists after a multi-cluster service is deleted in one cluster. This would cause the DNS Proxy to return a stale IP for service resolution and thus cause a traffic outage. (Issue #39039)
Fixed an issue where WorkloadEntry.Annotations being nil would lead to an abnormal exit of istiod. (Issue #39201)