content/en/news/releases/1.23.x/announcing-1.23.5/index.md
This release contains bug fixes to improve robustness. This release note describes what’s different between Istio 1.23.4 and Istio 1.23.5
{{< relnote >}}
Fixed a bug where mixed-case Hosts in Gateway and TLS redirect resulted in stale RDS. (Issue #49638)
Fixed an issue where ambient mode PeerAuthentication policies were overly strict.
(Issue #53884)
Fixed a bug in where multiple STRICT port-level mTLS rules in an ambient mode PeerAuthentication policy would effectively result in a permissive policy due to incorrect evaluation logic (AND vs. OR). (Issue #54146)
Fixed non-default revisions controlling gateways lacking istio.io/rev labels.
(Issue #54280)
Fixed an issue where access log order instability caused connection draining. (Issue #54672)
Fixed a bug where Istiod would send an incompatible access log format to <1.23 proxies. (Issue #54795)
Improved Istiod's validation webhook to accept versions it does not know about. This ensures that an older Istio can validate resources created by newer CRDs.