Back to Istio Io

Announcing Istio 1.3.2

content/en/news/releases/1.3.x/announcing-1.3.2/index.md

latest774 B
Original Source

We're pleased to announce the availability of Istio 1.3.2. Please see below for what's changed.

{{< relnote >}}

Security update

This release contains fixes for the security vulnerability described in our October 8th, 2019 news post. Specifically:

ISTIO-SECURITY-2019-005: A DoS vulnerability has been discovered by the Envoy community.

  • CVE-2019-15226: After investigation, the Istio team has found that this issue could be leveraged for a DoS attack in Istio if an attacker uses a high quantity of very small headers.

Nothing else is included in this release except for the above security fix. Distroless images will be available in a few days.