Announcing Istio 1.5.3
Patch Release
Due to a publishing error, the 1.5.3 images do not contain the fix for CVE-2020-10739 as claimed in the original announcement.
This release contains bug fixes to improve robustness. This release note describes what’s different between Istio 1.5.3 and Istio 1.5.2.
BEFORE YOU UPGRADE
Things to know and prepare before upgrading.
DOWNLOAD
Download and install this release.
DOCS
Visit the documentation for this release.
SOURCE CHANGES
Inspect the full set of source code changes.
Changes
- Fixed the Helm installer to install Kiali using a dynamically generated signing key.
- Fixed overlaying the generated Kubernetes resources for addon components with user-defined overlays (Issue 23048)
- Fixed
istio-sidecar.deb
failing to start on Debian buster withiptables
defaultnftables
setting (Issue 23279) - Fixed the corresponding hash policy not being updated after the header name specified in
DestinationRule.trafficPolicy.loadBalancer.consistentHash.httpHeaderName
is changed (Issue 23434) - Fixed traffic routing when deployed in a namespace other than istio-system (Issue 23401)