Announcing Istio 1.17.8

This release fixes the security vulnerabilities described in our Oct 11th post, ISTIO-SECURITY-2023-004.

This release note describes what’s different between Istio 1.17.6 and 1.17.8. Please note that this release supersedes the unpublished 1.17.7 release. 1.17.7 was only published internally and has been skipped so that additional security fixes could be included in this release.

{{< relnote >}}

Security updates

• CVE-2023-44487: (CVSS Score 7.5, High): HTTP/2 denial of service
• CVE-2023-39325: (CVSS Score 7.5, High): HTTP/2 denial of service