1.30.1

Solo build of Istio version 1.30.1 patch release.

This release note describes what’s different between Solo builds of Istio versions 1.30.0 and 1.30.1.

Security Notice

Envoy CVEs

• CVE-2026-47774 / GHSA-22m2-hvr2-xqc8: (CVSS score 7.5, High): Fixed an HTTP/2 memory exhaustion issue where cookie header bytes were not fully accounted for during request header size validation, allowing specially crafted requests with large cookie headers to trigger excessive memory consumption and cause a denial of service.

General Changes

• Built against upstream Istio version 1.30.1, release note can be found here.

Solo Flavor Changes

• Added the ability to customize the east-west gateway name to the peering Helm chart. If creating the east-west gateway with the Helm chart, the eastwest.name field can be used to control the gateway name. In this case, or if using the chart to create istio-remote gateways for an existing east-west gateway with a non-default service account, the serviceAccountOverride field on the remote should be set to the corresponding east-west gateway’s service account. The service account is either the value of the gateway.istio.io/service-account annotation on the east-west gateway, or that gateway’s name if the annotation is unset.

• Fixed duplicate target port mappings that caused ServiceEntry validation failures.

• Fixed an issue where ServiceEntry resources were not removed after their associated Service was removed.

• Fixed an issue where modifying the solo.io/service-inheritance annotation did not always affect the underlying resource.

FIPS Flavor Changes

No changes in this section.