Announcing Istio 1.9.1

Istio 1.9.1 patch release.

Mar 1, 2021

This release fixes the security vulnerability described in our March 1st, 2021 news post as well as bug fixes to improve robustness.

This release note describes what’s different between Istio 1.9.0 and Istio 1.9.1.

Security update

A zero-day security vulnerability was fixed in the version of Envoy shipped with Istio 1.9.0. This vulnerability was fixed on February 26th, 2021. 1.9.0 is the only version of Istio that includes the vulnerable version of Envoy. This vulnerability can only be exploited on misconfigured systems.