Announcing Istio 1.22.5

This release fixes the security vulnerabilities described in our September 19th post, ISTIO-SECURITY-2024-006. This release note describes what’s different between Istio 1.22.4 and 1.22.5.

{{< relnote >}}

Changes

• Fixed PILOT_SIDECAR_USE_REMOTE_ADDRESS functionality on sidecars to support setting internal addresses to mesh network rather than localhost to prevent header sanitization if envoy.reloadable_features.explicit_internal_address_config is enabled.

• Removed a change in 1.22.4 to the handling of multiple service VIPs in ServiceEntry. (Issue #52944), (Issue #52847)