Announcing Istio 1.23.2

This release fixes the security vulnerabilities described in our September 19th post, ISTIO-SECURITY-2024-006. This release note describes what’s different between Istio 1.23.1 and 1.23.2.

{{< relnote >}}

Changes

• Fixed PILOT_SIDECAR_USE_REMOTE_ADDRESS functionality on sidecars to support setting internal addresses to mesh network rather than localhost to prevent header sanitization if envoy.reloadable_features.explicit_internal_address_config is enabled.