v1.38.5 v1.37.7

envoyproxy/envoyOct 1, 2026 → Oct 1, 20260 days between releases

Generating AI comparison

Analyzing what changed between v1.38.5 and v1.37.7. This page updates automatically — usually within a minute.

The Two Releases

v1.38.5

v1.38.5

Oct 1, 2026· 20 days ago

Addresses a critical security vulnerability (CVE-2026-35189) by patching BoringSSL to fix excessive memory allocation during TLS handshakes. Also deprecated Debian Bullseye packaging and updated build infrastructure.

Full release notes
v1.37.7

v1.37.7

Oct 1, 2026· 20 days ago

Addresses a critical security vulnerability (CVE-2026-35189) by patching BoringSSL to fix excessive memory allocation during TLS handshakes. Also deprecated Debian Bullseye packaging and updated build infrastructure.

Full release notes