RATATOSKRATATOSK
Sign in

Envoy

v1.38.8Networking & Messaging
Oct 22, 2026

CHECK 2

A security maintenance release removes trust in compromised eMudhra certificate authorities from Envoy Docker images and DNS-over-TLS and DNS-over-HTTPS resolution. It updates the built-in Hickory DNS resolver's certificate root crates as part of that change.

Check if affected (2)

  • securityEnvoy Docker image trust in eMudhra certificate authorities

    Applies if you use Envoy docker images.

    The Envoy Docker images no longer trust the compromised eMudhra certificate authorities.

  • securityeMudhra certificate authority trust in the built-in Hickory DNS resolver

    Applies if you use DNS-over-TLS upstreams or DNS-over-HTTPS upstreams.

    The webpki-roots and rustls-webpki crates used by the built-in Hickory DNS resolver are updated. DNS-over-TLS and DNS-over-HTTPS upstreams no longer trust the compromised eMudhra intermediate certificate authorities.

Add Envoy to your stack

A weekly email arrives when a release needs action. Like the security patches in this release.

Add to stack →
Official release note ↗All Envoy releases →