v1.37.7 v1.36.11

Name: envoy
Author: envoyproxy

envoyproxy/envoyOct 1, 2026 → Oct 1, 20260 days between releases

Generating AI comparison

Analyzing what changed between v1.37.7 and v1.36.11. This page updates automatically — usually within a minute.

The Two Releases

v1.37.7

Oct 1, 2026· 20 days ago

Addresses a critical security vulnerability (CVE-2026-35189) by patching BoringSSL to fix excessive memory allocation during TLS handshakes. Also deprecated Debian Bullseye packaging and updated build infrastructure.

Full release notes

v1.36.11

Oct 1, 2026· 21 days ago

Addresses a critical security vulnerability (CVE-2026-35189) by patching BoringSSL to fix excessive memory allocation during TLS handshakes. Deprecated Debian Bullseye packaging due to end-of-life.

Full release notes