Announcing Istio 1.6.11

This release fixes the security vulnerability described in our September 29 post.

{{< relnote >}}

Security update

• CVE-2020-25017: In some cases, Envoy only considers the first value when multiple headers are present. Also, Envoy does not replace all existing occurrences of a non-inline header.
  • CVSS Score: 8.3 AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L