Envoy

This release addresses multiple security vulnerabilities across various components including URL normalization, HTTP/3, HTTP/2, ext_authz, and QUIC. It also includes bug fixes for the filter manager, ext_proc, and TLS handling.

This release addresses multiple security vulnerabilities including issues with URL normalization, HTTP/3, HTTP/2, ext_authz, and QUIC. It also includes several bug fixes for filter management, ext_proc, dynamic forward proxy, and TLS memory leaks.

This release addresses multiple security vulnerabilities including issues with URL normalization, HTTP/3, HTTP/2, ext_authz, and QUIC. It also includes several bug fixes for the http filter manager, ext_proc filter, and router.

This release addresses multiple security vulnerabilities across various components including URL normalization, HTTP/3, HTTP/2, admin, ext_authz, and QUIC. It also includes several bug fixes for filter management, ext_proc, and router functionalities.

This release primarily focuses on numerous security fixes across various components, including Authz, HTTP/3, TLS, and various filters. It also disables the Intel DLB connection balancer extension by default.

Release v1.37.5 focuses heavily on security, addressing numerous CVEs across various components including Authz, HTTP/3, OAuth2, and Zstd decompression. Additionally, the Intel DLB connection balancer extension was disabled due to upstream source archive issues.

Release v1.36.9 primarily incorporates numerous upstream security fixes from Envoy, addressing vulnerabilities ranging from crashes and buffer overflows to protocol smuggling and DoS risks. Additionally, the Intel DLB connection balancer extension has been disabled due to upstream source breakage.

This release primarily focuses on addressing numerous critical security vulnerabilities across various components, including HTTP/3, OAuth2, and various filters. Additionally, the Intel DLB connection balancer extension has been disabled due to upstream issues.

This patch release fixes a bug in RTDS runtime guard handling and introduces new opt-in features for monitoring HTTP/2 header statistics and limiting cookie header size.

This patch fixes a bug related to RTDS runtime guard override removal and introduces new opt-in features for monitoring HTTP/2 header statistics and limiting cookie header size.

This release fixes a bug related to RTDS runtime guard override removal and introduces new opt-in features for monitoring HTTP/2 header statistics and limiting cookie header size.

This patch fixes a bug related to RTDS runtime guard overrides and introduces new opt-in features for monitoring HTTP/2 header statistics and limiting cookie header size.

This release focuses heavily on security fixes, addressing vulnerabilities in HTTP/2 header limits, HMAC verification, and AES-CBC decryption. It also includes several bug fixes and minor behavior changes regarding upstream failure reasons and load balancer rebuild coalescing.

Release v1.37.3 includes several security fixes related to HTTP/2 header limits, HMAC verification, and AES-CBC decryption, alongside a fix for a load report shutdown race condition.

This release focuses on security fixes, addressing vulnerabilities in HTTP/2 header limits and OAuth2 HMAC verification, alongside a fix for a load report shutdown race condition.

This release focuses heavily on security fixes, addressing vulnerabilities in HTTP/2 header limits, HMAC verification, and AES-CBC decryption. It also introduces new features for periodic metric eviction and limiting stats scope size.

This release introduces extensive new capabilities for dynamic module extensibility, significant enhancements to the MCP and A2A protocols, and security hardening across TLS and authorization components. Several configuration defaults have been tightened, notably around RSA key usage enforcement.

This patch release fixes several critical bugs, including crashes related to listener removal and request buffering issues, alongside updates to Docker images and statistics.

This patch release fixes critical bugs related to dynamic module filtering and internal redirect buffering, and updates the Docker release images.

This patch release primarily focuses on updating and fixing issues found in the Docker release images for version 1.35.10.

This release primarily focuses on updating and fixing issues within the Docker release images for Envoy version v1.34.14.

This release focuses heavily on security fixes across multiple components, including ratelimit, rbac, json, and http handling. It also includes several bug fixes for OAuth2, ext_proc, ext_authz, and access logging.

This release focuses primarily on security fixes addressing multiple CVEs related to crashes, header bypasses, and memory corruption. It also includes a bug fix for OAuth2 refresh requests.

This release focuses primarily on security fixes addressing various vulnerabilities, including issues in rbac, IPv6 handling, JSON parsing, and HTTP decoding. It also includes a fix for OAuth2 host rewriting and dependency updates.