Istio 1.28.7 is a patch release with bug fixes and a security update. Key changes include support for Gateway API v1.4.1, new feature flags for HBONE connection window sizes, and fixes for waypoint TLS inspector issues, certificate expiration edge cases, and kubelet health probe failures on AWS EKS with branch ENI. A security fix addresses an authorization bypass in AuthorizationPolicy where unescaped regex metacharacters in identity fields (source.principals and source.namespaces) could allow unintended identities to match policies. Additionally, XDS debug endpoints now enforce same-namespace authorization to prevent cross-namespace configuration enumeration.
Sort: