Envoy / update detail

v1.38.5

Official Envoy changelog summary with source attribution, release tags, and community reactions.

Track this Envoy release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.

Envoy·Oct 1, 2026, 04:53 PMChangeSecurity-relevantAI-assisted summary

Summary

Patched BoringSSL to address CVE‑2026‑35189 memory allocation issue in TLS handshakes, mitigating remote DoS.
Removed Debian Bullseye (11) packaging and moved .changes and checksum signing into Bazel release assembly; refreshed Ubuntu build image.
Published updated Docker images for v1.38.5 and refreshed documentation links.

securityminordocssource failing

Official source Last checked Oct 4, 2026, 1:00 AM

Loading follow options…

official source

Verify the original release note

Every summary should remain traceable to the original changelog or release source.

AI-assisted summarysource failingLast checked Oct 4, 2026, 1:00 AM

related channels

Turn this Envoy release note into a weekly digest for the tools you actually use.