--- name: containers-cl-add-ons-istio title: Istio add-on version change log description: Review the version history for Istio. last-updated: 2026-10-02 --- > ## Documentation Index > The table of contents for this documentation set is at https://cloud.ibm.com/docs/containers?format=markdown > The index for all IBM Cloud docs is at: https://cloud.ibm.com/docs/llms.txt > Use these files to discover more information as needed. # Istio add-on version change log {: #cl-add-ons-istio} Patch updates : Patch updates are delivered automatically by IBM and don't contain any feature updates or changes in the supported add-on and cluster versions. Release updates : Release updates contain new features or changes in the supported add-on or cluster versions. You must manually apply release updates to your cluster autoscaler add-on. To view a list of add-ons and the supported cluster versions, run the following command or see the [Supported cluster add-ons table](https://cloud.ibm.com/docs/containers?topic=containers-supported-cluster-addon-versions&format=markdown). ```sh ibmcloud ks cluster addon versions ``` {: pre} ## Supported versions {: #cl-add-ons-istio-supported-versions} | Add-on version | Supported Kubernetes versions | |---|---| | `1.31` | `>=1.32.0 <1.37.0` | | `1.30` | `>=1.32.0 <1.37.0` | | `1.29` | `>=1.31.0 <1.36.0` | | `1.28` | `>=1.31.0 <1.35.0` | | `1.27` | `>=1.31.0 <1.34.0` | | `1.26` | `>=1.31.0 <1.34.0` | {: caption="Supported Istio add-on versions" caption-side="bottom"} Review the version history for Istio. {: shortdesc} ## Version 1.31 {: #cl-add-ons-istio-1.31} ### 28 September 2026, Version 1.31 - 1.31.0 {: #cl-add-ons-istio-1310} [Default version]{: tag-green} - Updates in this version: See the Istio release notes for [Istio 1.31.0](https://istio.io/latest/news/releases/1.31.x/announcing-1.31/){: external}. ### 23 September 2026, Version 1.31 - 1.31.0 {: #cl-add-ons-istio-1310} [Default version]{: tag-green} - Updates in this version: See the Istio release notes for [Istio 1.31.0](https://istio.io/latest/news/releases/1.31.x/announcing-1.31/){: external}. ## Version 1.30 {: #cl-add-ons-istio-1.30} ### 10 September 2026, Version 1.30 - 1.30.4 {: #cl-add-ons-istio-1304} [Default version]{: tag-green} - Resolves the following CVEs: [CVE-2025-45582](https://nvd.nist.gov/vuln/detail/cve-2025-45582){: external}, [CVE-2025-69720](https://nvd.nist.gov/vuln/detail/cve-2025-69720){: external}, [CVE-2026-2219](https://nvd.nist.gov/vuln/detail/cve-2026-2219){: external}, [CVE-2026-3832](https://nvd.nist.gov/vuln/detail/cve-2026-3832){: external}, [CVE-2026-3833](https://nvd.nist.gov/vuln/detail/cve-2026-3833){: external}, [CVE-2026-4046](https://nvd.nist.gov/vuln/detail/cve-2026-4046){: external}, [CVE-2026-4437](https://nvd.nist.gov/vuln/detail/cve-2026-4437){: external}, [CVE-2026-4438](https://nvd.nist.gov/vuln/detail/cve-2026-4438){: external}, [CVE-2026-4873](https://nvd.nist.gov/vuln/detail/cve-2026-4873){: external}, [CVE-2026-4878](https://nvd.nist.gov/vuln/detail/cve-2026-4878){: external}, [CVE-2026-5260](https://nvd.nist.gov/vuln/detail/cve-2026-5260){: external}, [CVE-2026-5419](https://nvd.nist.gov/vuln/detail/cve-2026-5419){: external}, [CVE-2026-5435](https://nvd.nist.gov/vuln/detail/cve-2026-5435){: external}, [CVE-2026-5450](https://nvd.nist.gov/vuln/detail/cve-2026-5450){: external}, [CVE-2026-5545](https://nvd.nist.gov/vuln/detail/cve-2026-5545){: external}, [CVE-2026-5704](https://nvd.nist.gov/vuln/detail/cve-2026-5704){: external}, [CVE-2026-5773](https://nvd.nist.gov/vuln/detail/cve-2026-5773){: external}, [CVE-2026-5928](https://nvd.nist.gov/vuln/detail/cve-2026-5928){: external}, [CVE-2026-5958](https://nvd.nist.gov/vuln/detail/cve-2026-5958){: external}, [CVE-2026-6238](https://nvd.nist.gov/vuln/detail/cve-2026-6238){: external}, [CVE-2026-6253](https://nvd.nist.gov/vuln/detail/cve-2026-6253){: external}, [CVE-2026-6276](https://nvd.nist.gov/vuln/detail/cve-2026-6276){: external}, [CVE-2026-6429](https://nvd.nist.gov/vuln/detail/cve-2026-6429){: external}, [CVE-2026-7168](https://nvd.nist.gov/vuln/detail/cve-2026-7168){: external}, [CVE-2026-7383](https://nvd.nist.gov/vuln/detail/cve-2026-7383){: external}, [CVE-2026-8286](https://nvd.nist.gov/vuln/detail/cve-2026-8286){: external}, [CVE-2026-8376](https://nvd.nist.gov/vuln/detail/cve-2026-8376){: external}, [CVE-2026-8458](https://nvd.nist.gov/vuln/detail/cve-2026-8458){: external}, [CVE-2026-8924](https://nvd.nist.gov/vuln/detail/cve-2026-8924){: external}, [CVE-2026-8925](https://nvd.nist.gov/vuln/detail/cve-2026-8925){: external}, [CVE-2026-8927](https://nvd.nist.gov/vuln/detail/cve-2026-8927){: external}, [CVE-2026-9076](https://nvd.nist.gov/vuln/detail/cve-2026-9076){: external}, [CVE-2026-9547](https://nvd.nist.gov/vuln/detail/cve-2026-9547){: external}, [CVE-2026-10536](https://nvd.nist.gov/vuln/detail/cve-2026-10536){: external}, [CVE-2026-11850](https://nvd.nist.gov/vuln/detail/cve-2026-11850){: external}, [CVE-2026-11856](https://nvd.nist.gov/vuln/detail/cve-2026-11856){: external}, [CVE-2026-15059](https://nvd.nist.gov/vuln/detail/cve-2026-15059){: external}, [CVE-2026-16742](https://nvd.nist.gov/vuln/detail/cve-2026-16742){: external}, [CVE-2026-27135](https://nvd.nist.gov/vuln/detail/cve-2026-27135){: external}, [CVE-2026-33845](https://nvd.nist.gov/vuln/detail/cve-2026-33845){: external}, [CVE-2026-33846](https://nvd.nist.gov/vuln/detail/cve-2026-33846){: external}, [CVE-2026-34180](https://nvd.nist.gov/vuln/detail/cve-2026-34180){: external}, [CVE-2026-34182](https://nvd.nist.gov/vuln/detail/cve-2026-34182){: external}, [CVE-2026-34743](https://nvd.nist.gov/vuln/detail/cve-2026-34743){: external}, [CVE-2026-40226](https://nvd.nist.gov/vuln/detail/cve-2026-40226){: external}, [CVE-2026-40355](https://nvd.nist.gov/vuln/detail/cve-2026-40355){: external}, [CVE-2026-40356](https://nvd.nist.gov/vuln/detail/cve-2026-40356){: external}, [CVE-2026-41989](https://nvd.nist.gov/vuln/detail/cve-2026-41989){: external}, [CVE-2026-41991](https://nvd.nist.gov/vuln/detail/cve-2026-41991){: external}, [CVE-2026-41992](https://nvd.nist.gov/vuln/detail/cve-2026-41992){: external}, [CVE-2026-42009](https://nvd.nist.gov/vuln/detail/cve-2026-42009){: external}, [CVE-2026-42010](https://nvd.nist.gov/vuln/detail/cve-2026-42010){: external}, [CVE-2026-42011](https://nvd.nist.gov/vuln/detail/cve-2026-42011){: external}, [CVE-2026-42012](https://nvd.nist.gov/vuln/detail/cve-2026-42012){: external}, [CVE-2026-42013](https://nvd.nist.gov/vuln/detail/cve-2026-42013){: external}, [CVE-2026-42014](https://nvd.nist.gov/vuln/detail/cve-2026-42014){: external}, [CVE-2026-42015](https://nvd.nist.gov/vuln/detail/cve-2026-42015){: external}, [CVE-2026-42496](https://nvd.nist.gov/vuln/detail/cve-2026-42496){: external}, [CVE-2026-42497](https://nvd.nist.gov/vuln/detail/cve-2026-42497){: external}, [CVE-2026-42766](https://nvd.nist.gov/vuln/detail/cve-2026-42766){: external}, [CVE-2026-42767](https://nvd.nist.gov/vuln/detail/cve-2026-42767){: external}, [CVE-2026-42770](https://nvd.nist.gov/vuln/detail/cve-2026-42770){: external}, [CVE-2026-45445](https://nvd.nist.gov/vuln/detail/cve-2026-45445){: external}, [CVE-2026-45446](https://nvd.nist.gov/vuln/detail/cve-2026-45446){: external}, [CVE-2026-45447](https://nvd.nist.gov/vuln/detail/cve-2026-45447){: external}, [CVE-2026-54411](https://nvd.nist.gov/vuln/detail/cve-2026-54411){: external}, and [CVE-2026-58055](https://nvd.nist.gov/vuln/detail/cve-2026-58055){: external}. - Updates in this version: See the Istio release notes for [Istio 1.30.4](https://istio.io/latest/news/releases/1.30.x/announcing-1.30.4/){: external} ### 18 August 2026, Version 1.30 - 1.30.3 {: #cl-add-ons-istio-1303} - Updates in this version: See the Istio release notes for [Istio 1.30.3](https://istio.io/latest/news/releases/1.30.x/announcing-1.30.3/){: external} ### 21 July 2026, Version 1.30 - 1.30.2 {: #cl-add-ons-istio-1302} - Updates in this version: See the Istio release notes for [Istio 1.29.6](https://istio.io/latest/news/releases/1.29.x/announcing-1.29.6/){: external}, [Istio 1.30.1](https://istio.io/latest/news/releases/1.30.x/announcing-1.30.1/){: external} and [Istio 1.30.2](https://istio.io/latest/news/releases/1.30.x/announcing-1.30.2/){: external} ## Version 1.29 {: #cl-add-ons-istio-1.29} ### 10 September 2026, Version 1.29 - 1.29.7 {: #cl-add-ons-istio-1297} [Default version]{: tag-green} - Resolves the following CVEs: [CVE-2025-45582](https://nvd.nist.gov/vuln/detail/cve-2025-45582){: external}, [CVE-2025-69720](https://nvd.nist.gov/vuln/detail/cve-2025-69720){: external}, [CVE-2026-2219](https://nvd.nist.gov/vuln/detail/cve-2026-2219){: external}, [CVE-2026-3832](https://nvd.nist.gov/vuln/detail/cve-2026-3832){: external}, [CVE-2026-3833](https://nvd.nist.gov/vuln/detail/cve-2026-3833){: external}, [CVE-2026-4046](https://nvd.nist.gov/vuln/detail/cve-2026-4046){: external}, [CVE-2026-4437](https://nvd.nist.gov/vuln/detail/cve-2026-4437){: external}, [CVE-2026-4438](https://nvd.nist.gov/vuln/detail/cve-2026-4438){: external}, [CVE-2026-4873](https://nvd.nist.gov/vuln/detail/cve-2026-4873){: external}, [CVE-2026-4878](https://nvd.nist.gov/vuln/detail/cve-2026-4878){: external}, [CVE-2026-5260](https://nvd.nist.gov/vuln/detail/cve-2026-5260){: external}, [CVE-2026-5419](https://nvd.nist.gov/vuln/detail/cve-2026-5419){: external}, [CVE-2026-5435](https://nvd.nist.gov/vuln/detail/cve-2026-5435){: external}, [CVE-2026-5450](https://nvd.nist.gov/vuln/detail/cve-2026-5450){: external}, [CVE-2026-5545](https://nvd.nist.gov/vuln/detail/cve-2026-5545){: external}, [CVE-2026-5704](https://nvd.nist.gov/vuln/detail/cve-2026-5704){: external}, [CVE-2026-5773](https://nvd.nist.gov/vuln/detail/cve-2026-5773){: external}, [CVE-2026-5928](https://nvd.nist.gov/vuln/detail/cve-2026-5928){: external}, [CVE-2026-5958](https://nvd.nist.gov/vuln/detail/cve-2026-5958){: external}, [CVE-2026-6238](https://nvd.nist.gov/vuln/detail/cve-2026-6238){: external}, [CVE-2026-6253](https://nvd.nist.gov/vuln/detail/cve-2026-6253){: external}, [CVE-2026-6276](https://nvd.nist.gov/vuln/detail/cve-2026-6276){: external}, [CVE-2026-6429](https://nvd.nist.gov/vuln/detail/cve-2026-6429){: external}, [CVE-2026-7168](https://nvd.nist.gov/vuln/detail/cve-2026-7168){: external}, [CVE-2026-7383](https://nvd.nist.gov/vuln/detail/cve-2026-7383){: external}, [CVE-2026-8286](https://nvd.nist.gov/vuln/detail/cve-2026-8286){: external}, [CVE-2026-8376](https://nvd.nist.gov/vuln/detail/cve-2026-8376){: external}, [CVE-2026-8458](https://nvd.nist.gov/vuln/detail/cve-2026-8458){: external}, [CVE-2026-8924](https://nvd.nist.gov/vuln/detail/cve-2026-8924){: external}, [CVE-2026-8925](https://nvd.nist.gov/vuln/detail/cve-2026-8925){: external}, [CVE-2026-8927](https://nvd.nist.gov/vuln/detail/cve-2026-8927){: external}, [CVE-2026-8932](https://nvd.nist.gov/vuln/detail/cve-2026-8932){: external}, [CVE-2026-9076](https://nvd.nist.gov/vuln/detail/cve-2026-9076){: external}, [CVE-2026-9547](https://nvd.nist.gov/vuln/detail/cve-2026-9547){: external}, [CVE-2026-10536](https://nvd.nist.gov/vuln/detail/cve-2026-10536){: external}, [CVE-2026-11850](https://nvd.nist.gov/vuln/detail/cve-2026-11850){: external}, [CVE-2026-11856](https://nvd.nist.gov/vuln/detail/cve-2026-11856){: external}, [CVE-2026-15059](https://nvd.nist.gov/vuln/detail/cve-2026-15059){: external}, [CVE-2026-16742](https://nvd.nist.gov/vuln/detail/cve-2026-16742){: external}, [CVE-2026-27135](https://nvd.nist.gov/vuln/detail/cve-2026-27135){: external}, [CVE-2026-33845](https://nvd.nist.gov/vuln/detail/cve-2026-33845){: external}, [CVE-2026-33846](https://nvd.nist.gov/vuln/detail/cve-2026-33846){: external}, [CVE-2026-34180](https://nvd.nist.gov/vuln/detail/cve-2026-34180){: external}, [CVE-2026-34182](https://nvd.nist.gov/vuln/detail/cve-2026-34182){: external}, [CVE-2026-34743](https://nvd.nist.gov/vuln/detail/cve-2026-34743){: external}, [CVE-2026-40226](https://nvd.nist.gov/vuln/detail/cve-2026-40226){: external}, [CVE-2026-40355](https://nvd.nist.gov/vuln/detail/cve-2026-40355){: external}, [CVE-2026-40356](https://nvd.nist.gov/vuln/detail/cve-2026-40356){: external}, [CVE-2026-41989](https://nvd.nist.gov/vuln/detail/cve-2026-41989){: external}, [CVE-2026-41991](https://nvd.nist.gov/vuln/detail/cve-2026-41991){: external}, [CVE-2026-41992](https://nvd.nist.gov/vuln/detail/cve-2026-41992){: external}, [CVE-2026-42009](https://nvd.nist.gov/vuln/detail/cve-2026-42009){: external}, [CVE-2026-42010](https://nvd.nist.gov/vuln/detail/cve-2026-42010){: external}, [CVE-2026-42011](https://nvd.nist.gov/vuln/detail/cve-2026-42011){: external}, [CVE-2026-42012](https://nvd.nist.gov/vuln/detail/cve-2026-42012){: external}, [CVE-2026-42013](https://nvd.nist.gov/vuln/detail/cve-2026-42013){: external}, [CVE-2026-42014](https://nvd.nist.gov/vuln/detail/cve-2026-42014){: external}, [CVE-2026-42015](https://nvd.nist.gov/vuln/detail/cve-2026-42015){: external}, [CVE-2026-42496](https://nvd.nist.gov/vuln/detail/cve-2026-42496){: external}, [CVE-2026-42497](https://nvd.nist.gov/vuln/detail/cve-2026-42497){: external}, [CVE-2026-42766](https://nvd.nist.gov/vuln/detail/cve-2026-42766){: external}, [CVE-2026-42767](https://nvd.nist.gov/vuln/detail/cve-2026-42767){: external}, [CVE-2026-42770](https://nvd.nist.gov/vuln/detail/cve-2026-42770){: external}, [CVE-2026-45445](https://nvd.nist.gov/vuln/detail/cve-2026-45445){: external}, [CVE-2026-45446](https://nvd.nist.gov/vuln/detail/cve-2026-45446){: external}, [CVE-2026-45447](https://nvd.nist.gov/vuln/detail/cve-2026-45447){: external}, [CVE-2026-54411](https://nvd.nist.gov/vuln/detail/cve-2026-54411){: external}, [CVE-2026-54874](https://nvd.nist.gov/vuln/detail/cve-2026-54874){: external}, [CVE-2026-58055](https://nvd.nist.gov/vuln/detail/cve-2026-58055){: external}, [CVE-2026-63072](https://nvd.nist.gov/vuln/detail/cve-2026-63072){: external}, [CVE-2026-63074](https://nvd.nist.gov/vuln/detail/cve-2026-63074){: external}, [CVE-2026-63076](https://nvd.nist.gov/vuln/detail/cve-2026-63076){: external}, and [CVE-2026-75803](https://nvd.nist.gov/vuln/detail/cve-2026-75803){: external}. - Updates in this version: See the Istio release notes for [Istio 1.29.7](https://istio.io/latest/news/releases/1.29.x/announcing-1.29.7/){: external}. ### 18 August 2026, Version 1.29 - 1.29.6 {: #cl-add-ons-istio-1296} - Updates in this version: See the Istio release notes for [Istio 1.29.6](https://istio.io/latest/news/releases/1.29.x/announcing-1.29.6/){: external}. ### 15 July 2026, Version 1.29 - 1.29.5 {: #cl-add-ons-istio-1295} - Updates in this version: See the Istio release notes for [Istio 1.29.5](https://istio.io/latest/news/releases/1.29.x/announcing-1.29.5/){: external}. ### 17 June 2026, Version 1.29 - 1.29.4 {: #cl-add-ons-istio-1294} - Updates in this version: See the Istio release notes for [Istio 1.29.3](https://istio.io/latest/news/releases/1.29.x/announcing-1.29.3/){: external} and [Istio 1.29.4](https://istio.io/latest/news/releases/1.29.x/announcing-1.29.4/){: external}. ### 12 May 2026, Version 1.29 - 1.29.2 {: #cl-add-ons-istio-1292} - Updates in this version: See the Istio release notes for [Istio 1.29.0](https://istio.io/latest/news/releases/1.29.x/announcing-1.29/){: external}, [Istio 1.29.1](https://istio.io/latest/news/releases/1.29.x/announcing-1.29.1/){: external} and [Istio 1.29.2](https://istio.io/latest/news/releases/1.29.x/announcing-1.29.2/){: external}. ## Version 1.28 {: #cl-add-ons-istio-1.28} ### 15 July 2026, Version 1.28 - 1.28.10 {: #cl-add-ons-istio-12810} [Default version]{: tag-green} - Updates in this version: See the Istio release notes for [Istio 1.28.9](https://istio.io/latest/news/releases/1.28.x/announcing-1.28.9/){: external} and [Istio 1.28.10](https://istio.io/latest/news/releases/1.28.x/announcing-1.28.10/){: external}. ### 17 June 2026, Version 1.28 - 1.28.8 {: #cl-add-ons-istio-1288} - Updates in this version: See the Istio release notes for [Istio 1.28.7](https://istio.io/latest/news/releases/1.28.x/announcing-1.28.7/){: external} and [Istio 1.28.8](https://istio.io/latest/news/releases/1.28.x/announcing-1.28.8/){: external}. ### 30 April 2026, Version 1.28 - 1.28.6 {: #cl-add-ons-istio-1286} - Resolves the following CVEs: [CVE-2026-28387](https://nvd.nist.gov/vuln/detail/cve-2026-28387){: external}, [CVE-2026-28388](https://nvd.nist.gov/vuln/detail/cve-2026-28388){: external}, [CVE-2026-31789](https://nvd.nist.gov/vuln/detail/cve-2026-31789){: external}, [CVE-2026-28389](https://nvd.nist.gov/vuln/detail/cve-2026-28389){: external}, [CVE-2026-28390](https://nvd.nist.gov/vuln/detail/cve-2026-28390){: external}, and [CVE-2026-31790](https://nvd.nist.gov/vuln/detail/cve-2026-31790){: external}. - Updates in this version: See the Istio release notes for [Istio 1.28.0](https://istio.io/latest/news/releases/1.28.x/announcing-1.28/){: external}, [Istio 1.28.1](https://istio.io/latest/news/releases/1.28.x/announcing-1.28.1/){: external}, [Istio 1.28.2](https://istio.io/latest/news/releases/1.28.x/announcing-1.28.2/){: external}, [Istio 1.28.3](https://istio.io/latest/news/releases/1.28.x/announcing-1.28.3/){: external}, [Istio 1.28.4](https://istio.io/latest/news/releases/1.28.x/announcing-1.28.4/){: external}, [Istio 1.28.5](https://istio.io/latest/news/releases/1.28.x/announcing-1.28.5/){: external} and [Istio 1.28.6](https://istio.io/latest/news/releases/1.28.x/announcing-1.28.6/){: external}. ## Version 1.27 {: #cl-add-ons-istio-1.27} ### 28 April 2026, Version 1.27 - 1.27.9 {: #cl-add-ons-istio-1279} - Resolves the following CVEs: [CVE-2026-35535](https://nvd.nist.gov/vuln/detail/cve-2026-35535){: external}, [CVE-2026-1965](https://nvd.nist.gov/vuln/detail/cve-2026-1965){: external}, [CVE-2026-3731](https://nvd.nist.gov/vuln/detail/cve-2026-3731){: external}, [CVE-2026-3783](https://nvd.nist.gov/vuln/detail/cve-2026-3783){: external}, [CVE-2026-29111](https://nvd.nist.gov/vuln/detail/cve-2026-29111){: external}, [CVE-2025-0167](https://nvd.nist.gov/vuln/detail/cve-2025-0167){: external}, and [CVE-2026-3784](https://nvd.nist.gov/vuln/detail/cve-2026-3784){: external}. - Updates in this version: See the Istio release notes for [Istio 1.27.9](https://istio.io/latest/news/releases/1.27.x/announcing-1.27.9/){: external}. ### 27 March 2026, Version 1.27 - 1.27.8 {: #cl-add-ons-istio-1278} - Resolves the following CVEs: [CVE-2026-22796](https://nvd.nist.gov/vuln/detail/cve-2026-22796){: external}, [CVE-2026-0965](https://nvd.nist.gov/vuln/detail/cve-2026-0965){: external}, [CVE-2025-68973](https://nvd.nist.gov/vuln/detail/cve-2025-68973){: external}, [CVE-2025-15281](https://nvd.nist.gov/vuln/detail/cve-2025-15281){: external}, [CVE-2026-0968](https://nvd.nist.gov/vuln/detail/cve-2026-0968){: external}, [CVE-2026-0964](https://nvd.nist.gov/vuln/detail/cve-2026-0964){: external}, [CVE-2025-15224](https://nvd.nist.gov/vuln/detail/cve-2025-15224){: external}, [CVE-2025-8277](https://nvd.nist.gov/vuln/detail/cve-2025-8277){: external}, [CVE-2026-22795](https://nvd.nist.gov/vuln/detail/cve-2026-22795){: external}, [CVE-2025-9820](https://nvd.nist.gov/vuln/detail/cve-2025-9820){: external}, [CVE-2025-14524](https://nvd.nist.gov/vuln/detail/cve-2025-14524){: external}, [CVE-2025-69421](https://nvd.nist.gov/vuln/detail/cve-2025-69421){: external}, [CVE-2025-15079](https://nvd.nist.gov/vuln/detail/cve-2025-15079){: external}, [CVE-2026-0915](https://nvd.nist.gov/vuln/detail/cve-2026-0915){: external}, [CVE-2025-13151](https://nvd.nist.gov/vuln/detail/cve-2025-13151){: external}, [CVE-2025-14819](https://nvd.nist.gov/vuln/detail/cve-2025-14819){: external}, [CVE-2026-0861](https://nvd.nist.gov/vuln/detail/cve-2026-0861){: external}, [CVE-2025-14831](https://nvd.nist.gov/vuln/detail/cve-2025-14831){: external}, [CVE-2025-69419](https://nvd.nist.gov/vuln/detail/cve-2025-69419){: external}, [CVE-2026-0966](https://nvd.nist.gov/vuln/detail/cve-2026-0966){: external}, [CVE-2025-15467](https://nvd.nist.gov/vuln/detail/cve-2025-15467){: external}, [CVE-2026-0967](https://nvd.nist.gov/vuln/detail/cve-2026-0967){: external}, [CVE-2025-69420](https://nvd.nist.gov/vuln/detail/cve-2025-69420){: external}, [CVE-2025-68160](https://nvd.nist.gov/vuln/detail/cve-2025-68160){: external}, [CVE-2025-10148](https://nvd.nist.gov/vuln/detail/cve-2025-10148){: external}, [CVE-2025-69418](https://nvd.nist.gov/vuln/detail/cve-2025-69418){: external}, and [CVE-2025-14017](https://nvd.nist.gov/vuln/detail/cve-2025-14017){: external}. - Updates in this version: See the Istio release notes for [Istio 1.27.0](https://istio.io/latest/news/releases/1.27.x/announcing-1.27/){: external}, [Istio 1.27.1](https://istio.io/latest/news/releases/1.27.x/announcing-1.27.1/){: external}, [Istio 1.27.2](https://istio.io/latest/news/releases/1.27.x/announcing-1.27.2/){: external}, [Istio 1.27.3](https://istio.io/latest/news/releases/1.27.x/announcing-1.27.3/){: external}, [Istio 1.27.4](https://istio.io/latest/news/releases/1.27.x/announcing-1.27.4/){: external}, [Istio 1.27.5](https://istio.io/latest/news/releases/1.27.x/announcing-1.27.5/){: external}, [Istio 1.27.6](https://istio.io/latest/news/releases/1.27.x/announcing-1.27.6/){: external}, [Istio 1.27.7](https://istio.io/latest/news/releases/1.27.x/announcing-1.27.7/){: external} and [Istio 1.27.8](https://istio.io/latest/news/releases/1.27.x/announcing-1.27.8/){: external}. ## Version 1.26 {: #cl-add-ons-istio-1.26} ### 15 December 2025, Version 1.26 - 1.26.6 {: #cl-add-ons-istio-1266} - Resolves the following CVEs: [CVE-2025-32463](https://nvd.nist.gov/vuln/detail/cve-2025-32463){: external}, [CVE-2025-32988](https://nvd.nist.gov/vuln/detail/cve-2025-32988){: external}, [CVE-2025-47268](https://nvd.nist.gov/vuln/detail/cve-2025-47268){: external}, [CVE-2025-5372](https://nvd.nist.gov/vuln/detail/cve-2025-5372){: external}, [CVE-2025-6297](https://nvd.nist.gov/vuln/detail/cve-2025-6297){: external}, [CVE-2025-32989](https://nvd.nist.gov/vuln/detail/cve-2025-32989){: external}, [CVE-2025-4878](https://nvd.nist.gov/vuln/detail/cve-2025-4878){: external}, [CVE-2025-5351](https://nvd.nist.gov/vuln/detail/cve-2025-5351){: external}, [CVE-2025-5987](https://nvd.nist.gov/vuln/detail/cve-2025-5987){: external}, [CVE-2025-4877](https://nvd.nist.gov/vuln/detail/cve-2025-4877){: external}, [CVE-2025-48964](https://nvd.nist.gov/vuln/detail/cve-2025-48964){: external}, [CVE-2025-32990](https://nvd.nist.gov/vuln/detail/cve-2025-32990){: external}, [CVE-2025-9230](https://nvd.nist.gov/vuln/detail/cve-2025-9230){: external}, [CVE-2025-32462](https://nvd.nist.gov/vuln/detail/cve-2025-32462){: external}, [CVE-2025-5318](https://nvd.nist.gov/vuln/detail/cve-2025-5318){: external}, [CVE-2025-40909](https://nvd.nist.gov/vuln/detail/cve-2025-40909){: external}, [CVE-2025-5702](https://nvd.nist.gov/vuln/detail/cve-2025-5702){: external}, [CVE-2024-10963](https://nvd.nist.gov/vuln/detail/cve-2024-10963){: external}, [CVE-2024-8058](https://nvd.nist.gov/vuln/detail/cve-2024-8058){: external}, and [CVE-2024-6395](https://nvd.nist.gov/vuln/detail/cve-2024-6395){: external}. - Updates in this version: See the Istio release notes for [Istio 1.26.0](https://istio.io/latest/news/releases/1.26.x/announcing-1.26/){: external}, [Istio 1.26.1](https://istio.io/latest/news/releases/1.26.x/announcing-1.26.1/){: external}, [Istio 1.26.2](https://istio.io/latest/news/releases/1.26.x/announcing-1.26.2/){: external}, [Istio 1.26.3](https://istio.io/latest/news/releases/1.26.x/announcing-1.26.3/){: external}, [Istio 1.26.4](https://istio.io/latest/news/releases/1.26.x/announcing-1.26.4/){: external}, [Istio 1.26.5](https://istio.io/latest/news/releases/1.26.x/announcing-1.26.5/){: external} and [Istio 1.26.6](https://istio.io/latest/news/releases/1.26.x/announcing-1.26.6/){: external}. ### 05 November 2025, Version 1.25.5 {: #1255} - This is the final version of `addon-istio` 1.25. `addon-istio` 1.25.5 is unsupported on 15 May 2026. Update your Istio components to the latest patch version of Istio 1.27 that is supported by IBM Cloud Kubernetes Service before that date. - `addon-istio` 1.27 is available and supported on IBM Cloud Kubernetes Service versions 1.32 and 1.33. To upgrade from 1.25 to 1.27, follow [Updating to a minor version of the Istio add-on](https://cloud.ibm.com/docs/containers?topic=containers-istio-update&format=markdown#istio_minor). You must complete both minor upgrades, from 1.25 to 1.26 and from 1.26 to 1.27. - See the Istio release notes for [Istio 1.25.0](https://istio.io/latest/news/releases){: external}, [Istio 1.25.1](https://istio.io/latest/news/releases){: external}, [Istio 1.25.2](https://istio.io/latest/news/releases){: external}, [Istio 1.25.3](https://istio.io/latest/news/releases){: external}, [Istio 1.25.4](https://istio.io/latest/news/releases){: external}, and [Istio 1.25.5](https://istio.io/latest/news/releases){: external}. - Resolves the following CVEs: [CVE-2025-3576](https://www.cve.org/cveRecord?id=cve-2025-3576){: external}, [CVE-2025-4598](https://www.cve.org/cveRecord?id=cve-2025-4598){: external}, [CVE-2025-46836](https://www.cve.org/cveRecord?id=cve-2025-46836){: external}, and [CVE-2025-6020](https://www.cve.org/cveRecord?id=cve-2025-6020){: external}. ### 21 January 2025, Version 1.26 - 1.26.8 {: #cl-add-ons-istio-1268} - Resolves the following CVEs: [CVE-2025-8114](https://nvd.nist.gov/vuln/detail/cve-2025-8114){: external}. - Updates in this version: See the Istio release notes for [Istio 1.26.7](https://istio.io/latest/news/releases/1.26.x/announcing-1.26.7/){: external} and [Istio 1.26.8](https://istio.io/latest/news/releases/1.26.x/announcing-1.26.8/){: external}. ## Unsupported: Version 1.25 {: #v125} ### 20 September 2024, Version 1.23.1 {: #1231} - See the Istio release notes for [Istio 1.23.0](https://istio.io/latest/news/releases){: external} and [Istio 1.23.1](https://istio.io/latest/news/releases){: external}. - Resolves the following CVEs: [CVE-2024-6119](https://www.cve.org/cveRecord?id=cve-2024-6119){: external} and [usn-6986-1](https://ubuntu.com/security/notices/USN-6986-1){: external}. ### 20 August 2024, Version 1.22.3 {: #1223} - See the Istio release notes for [Istio 1.22.2](https://istio.io/latest/news/releases){: external} and [Istio 1.22.3](https://istio.io/latest/news/releases){: external}. - Resolves the following CVEs: [CVE-2024-33599](https://www.cve.org/cveRecord?id=cve-2024-33599){: external}, [CVE-2024-33600](https://www.cve.org/cveRecord?id=cve-2024-33600){: external}, [CVE-2024-33601](https://www.cve.org/cveRecord?id=cve-2024-33601){: external}, [CVE-2024-33602](https://www.cve.org/cveRecord?id=cve-2024-33602){: external}, [CVE-2022-40735](https://www.cve.org/cveRecord?id=cve-2022-40735){: external}, [CVE-2024-28182](https://www.cve.org/cveRecord?id=cve-2024-28182){: external}, [usn-6804-1](https://ubuntu.com/security/notices/USN-6804-1){: external}, [usn-6854-1](https://ubuntu.com/security/notices/USN-6854-1){: external}, and [usn-6754-1](https://ubuntu.com/security/notices/USN-6754-1){: external}. - For more information, see the [Istio security bulletin 2024-005](https://istio.io/latest/news/security/istio-security-2024-005/){: external}. ### 20 August 2024, Version 1.21.5 {: #1215} - See the Istio release notes for [Istio 1.21.4](https://istio.io/latest/news/releases){: external} and [Istio 1.21.5](https://istio.io/latest/news/releases){: external}. - Resolves the following CVEs: [CVE-2024-33599](https://www.cve.org/cveRecord?id=cve-2024-33599){: external}, [CVE-2024-33600](https://www.cve.org/cveRecord?id=cve-2024-33600){: external}, [CVE-2024-33601](https://www.cve.org/cveRecord?id=cve-2024-33601){: external}, [CVE-2024-33602](https://www.cve.org/cveRecord?id=cve-2024-33602){: external}, [CVE-2022-40735](https://www.cve.org/cveRecord?id=cve-2022-40735){: external}, [usn-6804-1](https://ubuntu.com/security/notices/USN-6804-1){: external}, and [usn-6854-1](https://ubuntu.com/security/notices/USN-6854-1){: external}. - For more information, see the [Istio security bulletin 2024-005](https://istio.io/latest/news/security/istio-security-2024-005/){: external}. ### 20 August 2024, Version 1.20.8 {: #1208} - This is the final version of `addon-istio` 1.20. `addon-istio` 1.20 is unsupported on 18 September 2024. - See the Istio release notes for [Istio 1.20.8](https://istio.io/latest/news/releases){: external}. - Resolves the following CVEs: [CVE-2024-33599](https://www.cve.org/cveRecord?id=cve-2024-33599){: external}, [CVE-2024-33600](https://www.cve.org/cveRecord?id=cve-2024-33600){: external}, [CVE-2024-33601](https://www.cve.org/cveRecord?id=cve-2024-33601){: external}, [CVE-2024-33602](https://www.cve.org/cveRecord?id=cve-2024-33602){: external}, and [usn-6804-1](https://ubuntu.com/security/notices/USN-6804-1){: external}. ### 18 August 2024, Version 1.22.4 {: #1224} - See the Istio release notes for [Istio 1.22.4](https://istio.io/latest/news/releases){: external}. - Resolves the following CVEs: [CVE-2024-4603](https://www.cve.org/cveRecord?id=cve-2024-4603){: external}, [CVE-2024-37371](https://www.cve.org/cveRecord?id=cve-2024-37371){: external}, [CVE-2024-2511](https://www.cve.org/cveRecord?id=cve-2024-2511){: external}, [CVE-2024-4741](https://www.cve.org/cveRecord?id=cve-2024-4741){: external}, [CVE-2022-37370](https://www.cve.org/cveRecord?id=cve-2022-37370){: external}, [CVE-2024-5535](https://www.cve.org/cveRecord?id=cve-2024-5535){: external}, [CVE-2024-7264](https://www.cve.org/cveRecord?id=cve-2024-7264){: external}, [usn-6937-1](https://ubuntu.com/security/notices/USN-6937-1){: external}, [usn-6947-1](https://ubuntu.com/security/notices/USN-6947-1){: external}, and [usn-6944-1](https://ubuntu.com/security/notices/USN-6944-1){: external}. ### 21 June 2024, Version 1.22.1 {: #1221} - See the Istio release notes for [Istio 1.22.0](https://istio.io/latest/news/releases){: external} and [Istio 1.22.1](https://istio.io/latest/news/releases){: external}. ## Unsupported: Version 1.24 {: #v124} ### 26 September 2025, Version 1.24.6 {: #1246} - The Istio managed add-on is migrating from the in-cluster operator in 1.23.x to a cyclic Helm upgrade installation in 1.24. This upgrade requires a different process than earlier versions, so review the [migration documentation](https://cloud.ibm.com/docs/containers?topic=containers-istio-update&format=markdown#istio_minor) before getting started. - With the move to a Helm-based installation, the gateways are switching from the `istio/gateways` chart that the in-cluster operator used to the `istio/gateway` chart that Istio recommends for Helm-based Istio. The main change is that the Istio gateways are set to `image: auto` to have the sidecar injector automatically select the image to use. - With the move away from the `IstioOperator` `CustomResource` to use the Helm `value.yaml` charts, `addon-istio` is no longer supporting more than 1 default gateway (`istio-ingressgateway-public-2` and `istio-ingressgateway-public-3`). However, the default gateway's `value.yaml` can be customized by the user and the user can install the previous gateways as additional custom gateways by using Helm. - See the Istio release notes for [Istio 1.24.0](https://istio.io/latest/news/releases){: external}, Istio 1.24.1, [Istio 1.24.2](https://istio.io/latest/news/releases){: external}, [Istio 1.24.3](https://istio.io/latest/news/releases){: external}, [Istio 1.24.4](https://istio.io/latest/news/releases){: external}, [Istio 1.24.5](https://istio.io/latest/news/releases){: external}, and [Istio 1.24.6](https://istio.io/latest/news/releases){: external}. - Resolves the following CVEs: [CVE-2024-56406](https://www.cve.org/cveRecord?id=cve-2024-56406){: external}, [CVE-2025-30258](https://www.cve.org/cveRecord?id=cve-2025-30258){: external}, and [CVE-2025-31115](https://www.cve.org/cveRecord?id=cve-2025-31115){: external}. ## Unsupported: Version 1.23 {: #v123} ### 29 April 2025, Version 1.23.6 {: #1236} - See the Istio release notes for [Istio 1.23.6](https://istio.io/latest/news/releases){: external}. - Resolves the following CVEs: [CVE-2024-25260](https://www.cve.org/cveRecord?id=cve-2024-25260){: external}, [CVE-2025-1365](https://www.cve.org/cveRecord?id=cve-2025-1365){: external}, [CVE-2025-1371](https://www.cve.org/cveRecord?id=cve-2025-1371){: external}, [CVE-2025-1372](https://www.cve.org/cveRecord?id=cve-2025-1372){: external}, [CVE-2025-1377](https://www.cve.org/cveRecord?id=cve-2025-1377){: external}, [CVE-2024-12243](https://www.cve.org/cveRecord?id=cve-2024-12243){: external}, [CVE-2024-26458](https://www.cve.org/cveRecord?id=cve-2024-26458){: external}, [CVE-2024-26461](https://www.cve.org/cveRecord?id=cve-2024-26461){: external}, [CVE-2024-26462](https://www.cve.org/cveRecord?id=cve-2024-26462){: external}, [CVE-2025-24528](https://www.cve.org/cveRecord?id=cve-2025-24528){: external}, [CVE-2024-12133](https://www.cve.org/cveRecord?id=cve-2024-12133){: external}, [CVE-2025-0395](https://www.cve.org/cveRecord?id=cve-2025-0395){: external}, [CVE-2024-13176](https://www.cve.org/cveRecord?id=cve-2024-13176){: external}, [CVE-2024-9143](https://www.cve.org/cveRecord?id=cve-2024-9143){: external}, [CVE-2024-3596](https://www.cve.org/cveRecord?id=cve-2024-3596){: external}, [CVE-2025-1390](https://www.cve.org/cveRecord?id=cve-2025-1390){: external}, [usn-7369-1](https://ubuntu.com/security/notices/USN-7369-1){: external}, [usn-7281-1](https://ubuntu.com/security/notices/USN-7281-1){: external}, [usn-7314-1](https://ubuntu.com/security/notices/USN-7314-1){: external}, [usn-7275-1](https://ubuntu.com/security/notices/USN-7275-1){: external}, [usn-7259-1](https://ubuntu.com/security/notices/USN-7259-1){: external}, [usn-7264-1](https://ubuntu.com/security/notices/USN-7264-1){: external}, [usn-7055-1](https://ubuntu.com/security/notices/USN-7055-1){: external}, and [usn-7287-1](https://ubuntu.com/security/notices/USN-7287-1){: external}. ### 4 March 2025, Version 1.23.5 {: #1235} - See the Istio release notes for [Istio 1.23.5](https://istio.io/latest/news/releases){: external}. - Expanded testing and support to IKS 1.31. - Resolves the following CVEs: [CVE-2025-0665](https://www.cve.org/cveRecord?id=cve-2025-0665){: external} and [CVE-2024-11053](https://www.cve.org/cveRecord?id=cve-2024-11053){: external}. ## Unsupported: Version 1.22 {: #v122} ### 19 June 2024, Version 1.21.3 {: #1213} - See the Istio release notes for [Istio 1.21.3](https://istio.io/latest/news/releases){: external}. - Resolves the following CVEs: [CVE-2024-2961](https://www.cve.org/cveRecord?id=cve-2024-2961){: external}, [CVE-2024-28182](https://www.cve.org/cveRecord?id=cve-2024-28182){: external}, [usn- 6737-1](https://ubuntu.com/security/notices/USN-6737-1){: external}, and [usn-6754-1](https://ubuntu.com/security/notices/USN-6754-1){: external}. - For more information, see the [Istio security bulletin 2024-004](https://istio.io/latest/news/security/istio-security-2024-004/){: external} ### 19 June 2024, Version 1.20.7 {: #1207} - See the Istio release notes for [Istio 1.20.7](https://istio.io/latest/news/releases){: external}. - Resolves the following CVEs: [CVE-2024-2961](https://www.cve.org/cveRecord?id=cve-2024-2961){: external}, [CVE-2024-28182](https://www.cve.org/cveRecord?id=cve-2024-28182){: external}, [usn- 6737-1](https://ubuntu.com/security/notices/USN-6737-1){: external}, and [usn-6754-1](https://ubuntu.com/security/notices/USN-6754-1){: external}. - For more information, see the [Istio security bulletin 2024-004](https://istio.io/latest/news/security/istio-security-2024-004/){: external} ### 8 May 2024, Version 1.21.2 {: #1212} - For more information, see the [Istio security bulletin 2024-003](https://istio.io/latest/news/security/istio-security-2024-003){: external}. - See the Istio release notes for [Istio 1.21.2](https://istio.io/latest/news/releases){: external}. - Resolves the following CVEs: USN-6733-1, CVE-2024-28835, and CVE-2024-28834. ### 8 May 2024, Version 1.20.6 {: #1206} - For more information, see the [Istio security bulletin 2024-003](https://istio.io/latest/news/security/istio-security-2024-003){: external}. - See the Istio release notes for [Istio 1.20.6](https://istio.io/latest/news/releases){: external}. - Resolves the following CVEs: USN-6733-1, CVE-2024-28835, and CVE-2024-28834. ### 26 April 2024, Version 1.21.1 {: #1211} - See the Istio release notes for [Istio 1.21.0](https://istio.io/latest/news/releases){: external} and [Istio 1.21.1](https://istio.io/latest/news/releases){: external}. - `Addon-Istio` no longer deletes the `managed-istio` IOP when you disable the add-on. If you choose to disable `addon-istio`, you can choose between uninstalling or no longer managing Istio. See the [Setting up Istio](https://cloud.ibm.com/docs/containers?topic=containers-istio&format=markdown) documentation for more information. ## Unsupported: Version 1.20 {: #v120} ### 24 April 2024, Version 1.20.5 {: #1205} - For more information, see the [Istio security bulletin 2024-002](https://istio.io/latest/news/security/istio-security-2024-002){: external}. - See the Istio release notes for [Istio 1.20.5](https://istio.io/latest/news/releases){: external}. - Resolves the following CVEs: [CVE-2024-2398](https://nvd.nist.gov/vuln/detail/cve-2024-2398){: external}, [CVE-2024-28085](https://nvd.nist.gov/vuln/detail/cve-2024-28085){: external}, and [CVE-2022-3715](https://nvd.nist.gov/vuln/detail/cve-2022-3715){: external}. ### 24 April 2024, Version 1.19.9 {: #1199} - This is the final version of `addon-istio` 1.19. `addon-istio` 1.19 is unsupported on 08 May 2024. - For more information, see the [Istio security bulletin 2024-002](https://istio.io/latest/news/security/istio-security-2024-002){: external}. - See the Istio release notes for [Istio 1.19.9](https://istio.io/latest/news/releases){: external}. - Resolves the following CVEs: [CVE-2024-2398](https://nvd.nist.gov/vuln/detail/cve-2024-2398){: external}, [CVE-2024-28085](https://nvd.nist.gov/vuln/detail/cve-2024-28085){: external}, and [CVE-2022-3715](https://nvd.nist.gov/vuln/detail/cve-2022-3715){: external}. ### 03 April 2024, Version 1.20.4 {: #1204} - Uninstalling `Addon-Istio` no longer deletes the `istio-system` namespace. This cleanup became unnecessary over time. - See the Istio release notes for [Istio 1.20.4](https://istio.io/latest/news/releases){: external}. - Resolves the following CVEs: [CVE-2024-0727](https://nvd.nist.gov/vuln/detail/cve-2024-0727){: external}, [CVE-2023-6237](https://nvd.nist.gov/vuln/detail/cve-2023-6237){: external}, [CVE-2023-5678](https://nvd.nist.gov/vuln/detail/cve-2023-5678){: external}, [CVE-2023-6129](https://nvd.nist.gov/vuln/detail/cve-2023-6129){: external}, and [CVE-2023-4641](https://nvd.nist.gov/vuln/detail/cve-2023-4641){: external}. ### 03 April 2024, Version 1.19.8 {: #1198} - This version is the final version of `Addon-Istio` 1.19. `Addon-Istio` 1.19 is unsupported on 8 May 2024. - Uninstalling `Addon-Istio` no longer deletes the `istio-system` namespace. This cleanup became unnecessary over time. - See the Istio release notes for [Istio 1.19.8](https://istio.io/latest/news/releases){: external}. - Resolves the following CVEs: [CVE-2024-0727](https://nvd.nist.gov/vuln/detail/cve-2024-0727){: external}, [CVE-2023-6237](https://nvd.nist.gov/vuln/detail/cve-2023-6237){: external}, [CVE-2023-5678](https://nvd.nist.gov/vuln/detail/cve-2023-5678){: external}, [CVE-2023-6129](https://nvd.nist.gov/vuln/detail/cve-2023-6129){: external}, and [CVE-2023-4641](https://nvd.nist.gov/vuln/detail/cve-2023-4641){: external}. ### 06 March 2024, Version 1.20.3 {: #1203} - See the Istio release notes for [Istio 1.20.3](https://istio.io/latest/news/releases){: external}. - Resolves the following CVEs: [CVE-2023-6779](https://nvd.nist.gov/vuln/detail/cve-2023-6779){: external}, [CVE-2023-6246](https://nvd.nist.gov/vuln/detail/cve-2023-6246){: external}, [CVE-2023-6004](https://nvd.nist.gov/vuln/detail/cve-2023-6004){: external}, [CVE-2024-0553](https://nvd.nist.gov/vuln/detail/cve-2024-0553){: external}, [CVE-2023-6918](https://nvd.nist.gov/vuln/detail/cve-2023-6918){: external}, [CVE-2023-2953](https://nvd.nist.gov/vuln/detail/cve-2023-2953){: external}, [CVE-2024-22365](https://nvd.nist.gov/vuln/detail/cve-2024-22365){: external}, [CVE-2024-0567](https://nvd.nist.gov/vuln/detail/cve-2024-0567){: external}, and [CVE-2023-6780](https://nvd.nist.gov/vuln/detail/cve-2023-6780){: external}. ### 06 March 2024, Version 1.19.7 {: #1197} - See the Istio release notes for [Istio 1.19.7](https://istio.io/latest/news/releases){: external}. - Resolves the following CVEs: [CVE-2023-6779](https://nvd.nist.gov/vuln/detail/cve-2023-6779){: external}, [CVE-2023-6246](https://nvd.nist.gov/vuln/detail/cve-2023-6246){: external}, [CVE-2023-6004](https://nvd.nist.gov/vuln/detail/cve-2023-6004){: external}, [CVE-2024-0553](https://nvd.nist.gov/vuln/detail/cve-2024-0553){: external}, [CVE-2023-6918](https://nvd.nist.gov/vuln/detail/cve-2023-6918){: external}, [CVE-2023-2953](https://nvd.nist.gov/vuln/detail/cve-2023-2953){: external}, [CVE-2024-22365](https://nvd.nist.gov/vuln/detail/cve-2024-22365){: external}, [CVE-2024-0567](https://nvd.nist.gov/vuln/detail/cve-2024-0567){: external}, and [CVE-2023-6780](https://nvd.nist.gov/vuln/detail/cve-2023-6780){: external}. ### 07 February 2024, Version 1.20.2 {: #1202} - For more information, see the [Istio 1.20.2 release notes](https://istio.io/latest/news/releases){: external}. - Resolves the following CVEs: [CVE-2023-39804](https://nvd.nist.gov/vuln/detail/cve-2023-39804){: external} and [CVE-2023-48795](https://nvd.nist.gov/vuln/detail/cve-2023-48795){: external}. ### 07 February 2024, Version 1.19.6 {: #1196} - See the [Istio 1.19.6 release notes](https://istio.io/latest/news/releases){: external}. - Resolves the following CVEs: [CVE-2023-39804](https://nvd.nist.gov/vuln/detail/cve-2023-39804){: external} and [CVE-2023-48795](https://nvd.nist.gov/vuln/detail/cve-2023-48795){: external}. ### 07 February 2024, Version 1.18.7 {: #1187} - This version is the EOL version for 1.18. Support for Istio 1.18 ends on 21 February 2024. - See the Istio release notes for [Istio 1.18.7](https://istio.io/latest/news/releases){: external}. - Resolves the following CVEs: [CVE-2023-39804](https://nvd.nist.gov/vuln/detail/cve-2023-39804){: external} and [CVE-2023-48795](https://nvd.nist.gov/vuln/detail/cve-2023-48795){: external}. ### 10 January 2024, Version 1.20.1 {: #1201} - For more information, see the [Istio security bulletin 2023-005](https://istio.io/latest/news/security/istio-security-2023-005/){: external}. - See the Istio release notes for [Istio 1.20.1](https://istio.io/latest/news/releases){: external}. - Resolves the following CVEs: [USN-6517-1](https://ubuntu.com/security/notices/USN-6517-1){: external}, [CVE-2022-48522](https://nvd.nist.gov/vuln/detail/cve-2022-48522){: external}, [CVE-2023-47038](https://nvd.nist.gov/vuln/detail/cve-2023-47038){: external}, USN-6477-1, [CVE-2023-4016](https://nvd.nist.gov/vuln/detail/cve-2023-4016){: external}, USN-6427-1, [CVE-2023-44487](https://nvd.nist.gov/vuln/detail/cve-2023-44487){: external}, [USN-6535-1](https://ubuntu.com/security/notices/USN-6535-1){: external}, [CVE-2023-46218](https://nvd.nist.gov/vuln/detail/cve-2023-46218){: external}, [CVE-2023-46219](https://nvd.nist.gov/vuln/detail/cve-2023-46219){: external}, [USN-6541-1](https://ubuntu.com/security/notices/USN-6541-1){: external}, [CVE-2023-4806](https://nvd.nist.gov/vuln/detail/cve-2023-4806){: external}, [CVE-2023-4813](https://nvd.nist.gov/vuln/detail/cve-2023-4813){: external}, [CVE-2023-5156](https://nvd.nist.gov/vuln/detail/cve-2023-5156){: external}, USN-6499-1, and [CVE-2023-5981](https://nvd.nist.gov/vuln/detail/cve-2023-5981){: external}. ### 10 January 2024, Version 1.19.5 {: #1195} - For more information, see the [Istio security bulletin 2023-005](https://istio.io/latest/news/security/istio-security-2023-005/){: external}. - See the Istio release notes for [Istio 1.19.5](https://istio.io/latest/news/releases){: external}. - Resolves the following CVEs: [USN-6517-1](https://ubuntu.com/security/notices/USN-6517-1){: external}, [CVE-2022-48522](https://nvd.nist.gov/vuln/detail/cve-2022-48522){: external}, [CVE-2023-47038](https://nvd.nist.gov/vuln/detail/cve-2023-47038){: external}, USN-6477-1, [CVE-2023-4016](https://nvd.nist.gov/vuln/detail/cve-2023-4016){: external}, USN-6427-1, [CVE-2023-44487](https://nvd.nist.gov/vuln/detail/cve-2023-44487){: external}, [USN-6535-1](https://ubuntu.com/security/notices/USN-6535-1){: external}, [CVE-2023-46218](https://nvd.nist.gov/vuln/detail/cve-2023-46218){: external}, [CVE-2023-46219](https://nvd.nist.gov/vuln/detail/cve-2023-46219){: external}, [USN-6541-1](https://ubuntu.com/security/notices/USN-6541-1){: external}, [CVE-2023-4806](https://nvd.nist.gov/vuln/detail/cve-2023-4806){: external}, [CVE-2023-4813](https://nvd.nist.gov/vuln/detail/cve-2023-4813){: external}, [CVE-2023-5156](https://nvd.nist.gov/vuln/detail/cve-2023-5156){: external}, USN-6499-1, and [CVE-2023-5981](https://nvd.nist.gov/vuln/detail/cve-2023-5981){: external}. ### 10 January 2024, Version 1.18.6 {: #1186} - See the Istio release notes for [Istio 1.18.6](https://istio.io/latest/news/releases){: external}. - For more information, see the [Istio security bulletin 2023-005](https://istio.io/latest/news/security/istio-security-2023-005/){: external}. - Resolves the following CVEs: [USN-6517-1](https://ubuntu.com/security/notices/USN-6517-1){: external}, [CVE-2022-48522](https://nvd.nist.gov/vuln/detail/cve-2022-48522){: external}, [CVE-2023-47038](https://nvd.nist.gov/vuln/detail/cve-2023-47038){: external}, [USN-6450-1](https://ubuntu.com/security/notices/USN-6450-1){: external}, [CVE-2023-2975](https://nvd.nist.gov/vuln/detail/cve-2023-2975){: external}, [CVE-2023-5363](https://nvd.nist.gov/vuln/detail/cve-2023-5363){: external}, [USN-6435-1](https://ubuntu.com/security/notices/USN-6435-1){: external}, [CVE-2023-3446](https://nvd.nist.gov/vuln/detail/cve-2023-3446){: external}, [CVE-2023-3817](https://nvd.nist.gov/vuln/detail/cve-2023-3817){: external}, USN-6467-1, [CVE-2023-36054](https://nvd.nist.gov/vuln/detail/cve-2023-36054){: external}, [USN-6429-1](https://ubuntu.com/security/notices/USN-6429-1){: external}, [CVE-2023-38545](https://nvd.nist.gov/vuln/detail/cve-2023-38545){: external}, [CVE-2023-38546](https://nvd.nist.gov/vuln/detail/cve-2023-38546){: external}, [USN-6543-1](https://ubuntu.com/security/notices/USN-6543-1){: external}, [CVE-2023-39804](https://nvd.nist.gov/vuln/detail/cve-2023-39804){: external}, USN-6477-1, [CVE-2023-4016](https://nvd.nist.gov/vuln/detail/cve-2023-4016){: external}, USN-6427-1, [CVE-2023-44487](https://nvd.nist.gov/vuln/detail/cve-2023-44487){: external}, [USN-6535-1](https://ubuntu.com/security/notices/USN-6535-1){: external}, [CVE-2023-46218](https://nvd.nist.gov/vuln/detail/cve-2023-46218){: external}, [CVE-2023-46219](https://nvd.nist.gov/vuln/detail/cve-2023-46219){: external}, [USN-6541-1](https://ubuntu.com/security/notices/USN-6541-1){: external}, [CVE-2023-4806](https://nvd.nist.gov/vuln/detail/cve-2023-4806){: external}, [CVE-2023-4813](https://nvd.nist.gov/vuln/detail/cve-2023-4813){: external}, [CVE-2023-5156](https://nvd.nist.gov/vuln/detail/cve-2023-5156){: external}, USN-6499-1, and [CVE-2023-5981](https://nvd.nist.gov/vuln/detail/cve-2023-5981){: external}. ### 7 December 2023, Version 1.20.0 {: #1200} - See the Istio release notes for [Istio 1.20.0](https://istio.io/latest/news/releases){: external}. ## Unsupported: Version 1.19 {: #v119} ### 5 December 2023, Version 1.19.4 {: #1194} - See the Istio release notes for [Istio 1.19.64](https://istio.io/latest/news/releases){: external}. - Resolves the following CVEs: [CVE-2023-2975](https://www.cve.org/cveRecord?id=cve-2023-2975){: external}, [CVE-2023-3446](https://www.cve.org/cveRecord?id=cve-2023-3446){: external}, [CVE-2023-38545](https://www.cve.org/cveRecord?id=cve-2023-38545){: external}, [CVE-2023-38546](https://www.cve.org/cveRecord?id=cve-2023-38546){: external}, [CVE-2023-3817](https://www.cve.org/cveRecord?id=cve-2023-3817){: external}, [CVE-2023-4911](https://www.cve.org/cveRecord?id=cve-2023-4911){: external}, [CVE-2023-5363](https://www.cve.org/cveRecord?id=cve-2023-5363){: external}, [CVE-2023-36054](https://www.cve.org/cveRecord?id=cve-2023-36054){: external}, [usn-6429-1](https://ubuntu.com/security/notices/USN-6429-1){: external}, and [usn-6450-1](https://ubuntu.com/security/notices/USN-6450-1){: external}. ### 18 October 2023, Version 1.18.5 {: #1185} - See the Istio release notes for [Istio 1.18.5](https://istio.io/latest/news/releases){: external}. - Resolves [CVE-2023-44487](https://nvd.nist.gov/vuln/detail/cve-2023-44487){: external} and [CVE-2023-39325](https://nvd.nist.gov/vuln/detail/cve-2023-39325){: external}. - For more information, see the [Istio security bulletin 2023-004](https://istio.io/latest/news/security/istio-security-2023-004/){: external}. ### 18 October 2023, Version 1.17.8 {: #1178} - See the Istio release notes for [Istio 1.17.8](https://istio.io/latest/news/releases){: external}. - Resolves [CVE-2023-44487](https://nvd.nist.gov/vuln/detail/cve-2023-44487) and [CVE-2023-39325](https://nvd.nist.gov/vuln/detail/cve-2023-39325). - For more information, see the [Istio security bulletin 2023-004](https://istio.io/latest/news/security/istio-security-2023-004/){: external} ### 10 October 2023, Version 1.19.3 {: #1193} - For more information, see the [Istio security bulletin 2023-004](https://istio.io/latest/news/security/istio-security-2023-004/){: external} - See the Istio release notes for [Istio 1.19.3](https://istio.io/latest/news/releases){: external}. - Upstream announcement for [Istio 1.19.0](https://istio.io/latest/news/releases){: external}. - `Addon-Istio` does not support ambient mesh at this time ## Unsupported: Version 1.18 {: #v118}