RATATOSKRATATOSK
Sign in

Envoy

v1.38.9Networking & Messaging
Oct 26, 2026

ACTION 1

A focused security maintenance release updates the CA bundle in the `distroless` Docker image. The image no longer trusts the compromised eMudhra intermediate CA roots.

Action needed (1)

  • securityPatched CA bundle in the distroless Docker image

    The distroless Docker image now uses Debian bookworm's patched ca-certificates package, version 20250419~deb12u2. This removes trust in the compromised eMudhra intermediate CA roots; the distroless image in 1.38.8 still contained the unpatched bundle.

    eMudhra intermediate CA compromise

Add Envoy to your stack

A weekly email arrives when a release needs action. Like the security patches in this release.

Add to stack →
Official release note ↗All Envoy releases →