Envoy / update detail

v1.28.4

Official Envoy changelog summary with source attribution, release tags, and community reactions.

Track this Envoy release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.

Envoy·2 years ago · Jun 5, 2024, 10:36 AMFixSecurity-relevantAI-assisted summary

Summary

Fix multiple security vulnerabilities including use‑after‑free, uncaught JSON exception crashes, OOM in HTTP async client, and infinite Brotli decompression loop.
Patch several CVEs causing crashes in EnvoyQuicServerStream, QuicheDataReader, and incorrect handling of HTTP 200 upgrade responses.
Update Docker images and documentation for v1.28.4 release.

securitybugfixdocssource healthy

Official source Last checked 15 hours ago

Loading follow options…

official source

Verify the original release note

Every summary should remain traceable to the original changelog or release source.

AI-assisted summarysource healthyLast checked 15 hours ago

related channels

Turn this Envoy release note into a weekly digest for the tools you actually use.