Upcoming security updates in Istio 1.2.4 and 1.1.13

Hello everyone,

We’d like to call your attention to a recent Envoy announcement that affects Istio:

The Envoy security team would like to announce the forthcoming release of Envoy 1.11.1.

This release will be made available on Tuesday, the 13th of August 2019 at 10:00 PDT (17:00 GMT).
This release will fix 5 security defect(s), all of them considered HIGH severity.

No further details or patches will be made available in advance of the release.

At the same time the Envoy community makes 1.11.1 available (August 13th at 10am PDT), the Istio team will publish Istio 1.2.4 and 1.1.13 containing fixes for the same 5 defects.

  • The Istio Product Security Committee