RATATOSKRATATOSK
Sign in

Istio

1.29.9Networking & Messaging
Oct 15, 2026

ACTION 3CHECK 10OTHER 13

A security-focused maintenance release with vulnerability fixes, certificate and transport hardening, and correctness and reliability fixes. It also adds tighter certificate lifetime and registry retry controls, along with client-side request timeouts that may affect existing deployments.

Action needed (3)

  • securitySecurity fixes

    This release contains security fixes.

  • securityMAX_RA_WORKLOAD_CERT_TTL workload certificate limit

    The new MAX_RA_WORKLOAD_CERT_TTL environment variable caps the TTL at 48 hours by default, limiting the blast radius of a stolen istio-token.

  • breakingClient-side request timeouts

    Requests now time out on the client side, so a stuck request is canceled and the component recovers on its own.

Check if affected (10)

  • securityGHSA-8vc2-jrm4-835w in the OAuth2 HTTP filter

    Applies if you use the OAuth2 HTTP filter.

    The unauthenticated remote crash in the OAuth2 HTTP filter on a CONNECT request without a :path header is fixed. Advisory: GHSA-8vc2-jrm4-835w.

  • securityGHSA-47vj-9r25-wv5j in the api_key_auth HTTP filter

    Applies if you use the api_key_auth HTTP filter.

    The crash in the api_key_auth HTTP filter on a CONNECT request without a :path header is fixed. Advisory: GHSA-47vj-9r25-wv5j.

  • securityGHSA-w44g-8m76-8gc5 method matching

    Applies if you use AuthorizationPolicy and HTTP/2.

    AuthorizationPolicy method rules can no longer be bypassed over HTTP/2 by changing the case of the method. Advisory: GHSA-w44g-8m76-8gc5.

  • securityGHSA-7p2q-4xvg-vxc6 ambient-mode crash

    Applicability is not stated in the release notes.

    The istiod crash in ambient mode is fixed when a ServiceEntry or another service claims the address of an IP-addressed waypoint. Advisory: GHSA-7p2q-4xvg-vxc6.

  • securityistioctl istiod certificate verification

    Applies if you use istioctl with XDS and a service account token.

    istioctl now verifies the istiod certificate when connecting to XDS with a service account token.

  • securityShell command injection in istioctl manifest translate

    Applies if you use istioctl manifest translate.

    Crafted values can no longer inject additional shell commands when scripts generated by istioctl manifest translate are run.

  • securityCreateCertificate error responses

    Applies if you use CreateCertificate.

    CreateCertificate no longer returns raw Kubernetes API error text to callers.

  • securityPlaintext registry retries via WASM_INSECURE_REGISTRIES

    Applies if you configure WASM_INSECURE_REGISTRIES.

    Plaintext retry is now attempted only for registries that the operator explicitly allowlists through WASM_INSECURE_REGISTRIES.

  • securityExact proxyID matching for debug APIs

    Applies if you use /debug/config_dump, /debug/edsz, or XDS istio.io/debug/config_dump.

    proxyID must now be the exact <pod>.<namespace> or full connection ID. Short forms such as proxyID=istio-ingressgateway no longer match.

  • breaking1.29 end of life

    Applies if you use 1.29.

    This is the final 1.29 release because 1.29 reached end of life on October 15, 2026.

All 13 other recorded changesfixes 10 · additions 2 · value changes 1

fixes (10)

  • Fixed a panic in istiod when the OIDC/JWT authenticator received a token with a malformed sub claim.
  • Fixed the Kubernetes CSR watch loop using an abandoned time.After timer that could leave a goroutine running past request completion
  • Fixed an HTTPRoute rule with several InferencePool backendRefs configuring only one endpoint picker.
  • Fixed two HTTPRoute s sharing a rules[].name on the same gateway overwriting each other&rsquo;s endpoint picker.
  • Fixed a route rule losing its InferencePool endpoint picker when it also carried a CORS filter.
  • Fixed sidecar proxy UID/GID resolution on OpenShift for workloads bound to a custom SecurityContextConstraint
  • Fixed an issue where the pre-marshaled workload used for change detection and versioning in ambient was not stable when a workload had more than one service
  • Fixed a memory and goroutine leak in Istiod ambient multi-cluster mode
  • Fixed a bug where an internal listener was incorrectly created when the listener is of HTTPS or TLS but without a TLS section defined.
  • Fixed a memory leak in ambient multi-cluster mode where collections were registered with the krt debugger but never unregistered

additions (2)

  • Added PILOT_ENABLE_STRICT_GATEWAY_MERGING to prevent cross-namespace merging of Istio Gateways with managed GatewayAPI Gateways.
  • Added a validation warning for ServiceEntry addresses that are catch-all

value changes (1)

  • aws-lc-rs is updated to 1.18.2, which retries the read instead of aborting.
Add Istio to your stack

A weekly email arrives when a release needs action. Like the security patches and breaking changes in this release.

Add to stack →
Official release note ↗All Istio releases →