RATATOSKRATATOSK
Sign in

Envoy

v1.40.2Networking & Messaging
Oct 27, 2026

ACTION 1

A security maintenance release updates the `distroless` image's CA bundle to stop trusting compromised eMudhra intermediate CAs. No other operator-facing changes are noted.

Action needed (1)

  • securityThe distroless image's ca-certificates bundle

    The distroless Docker image uses the patched ca-certificates package (20250419+deb13u1) and no longer trusts the roots of the compromised eMudhra intermediate CAs. The change ships in the distroless image; version 1.40.1 still contained the unpatched bundle.

    eMudhra intermediate CA compromise

Add Envoy to your stack

A weekly email arrives when a release needs action. Like the security patches in this release.

Add to stack →
Official release note ↗All Envoy releases →