Skip to content
home
2.11.x
Reference
Changelog
Solo distribution of Istio changelog
1.28
You are viewing the documentation for Solo Enterprise for Istio, formerly known as Gloo Mesh (OSS APIs).

1.28.2

Page as Markdown
Solo build of Istio version 1.28.2 patch release.
This release note describes what’s different between Solo builds of Istio versions 1.28.1-patch0 and 1.28.2.
Security Notice

This build includes a fix of a CVE in the c-ares dependency of Envoy:
  • CVE-2025-62408: (CVSS score 5.9, Medium): Use after free due to connection being cleaned up after error.
General Changes

Solo Flavor Changes

  • Improved istioctl command help descriptions and examples with clearer guidance for bootstrap, ecs service-add, multicluster check, multicluster expose, and multicluster link commands.
  • Added a mesh-wide escape hatch based on port matching for outbound traffic being impacted by ztunnel capture. Configure via AMBIENT_EXCLUDE_OUTBOUND_PORTS environment variable (for example, AMBIENT_EXCLUDE_OUTBOUND_PORTS="1443,16000-16010").
FIPS Flavor Changes

No changes in this section.
Last updated on 
1.28.31.28.1-patch0