This release note describes what’s different between Solo builds of Istio versions 1.27.3-patch0 and 1.27.4.

Security Notice

This build includes a fix of a CVE in the c-ares dependency of Envoy:

  • CVE-2025-62408: (CVSS score 5.9, Medium): Use after free due to connection being cleaned up after error.

General Changes

  • Built against upstream Istio version 1.27.5, release note can be found here.

Solo Flavor Changes

No changes in this section.

FIPS Flavor Changes

No changes in this section.