Envoy

v1.39.6Networking & Messaging

Oct 27, 2026

A security maintenance release updates the `distroless` image's CA bundle. It stops the image from trusting compromised eMudhra intermediate CAs.

Action needed (1)

securityPatched CA bundle in the distroless Docker image
The distroless Docker image now uses the patched ca-certificates package (20250419+deb13u1) and no longer trusts the roots of the compromised eMudhra intermediate CAs. The update ships in the image released with this version.
eMudhra intermediate CA compromise

Add Envoy to your stack

A weekly email arrives when a release needs action. Like the security patches in this release.