Starstruk Logo MarkStarstruk

v1.34.1

envoyproxy/envoyv1.34.1May 7, 2025by publish-envoy[bot]

AI Summary

Addresses a critical security vulnerability allowing RBAC permission bypass via URI templates.

Key Highlights

  • Fixed CVE-2025-46821 (RBAC uri_template bypass)
  • Assorted minor build fixes

Full Release Notes

**Summary of changes**:

* Security:
  - [CVE-2025-46821](https://github.com/envoyproxy/envoy/security/advisories/GHSA-c7cm-838g-6g67): Bypass of RBAC `uri_template` permission.

* Build:
  - Assorted minor fixes.

**Docker images**:
    https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.34.1
**Docs**:
    https://www.envoyproxy.io/docs/envoy/v1.34.1/
**Release notes**:
    https://www.envoyproxy.io/docs/envoy/v1.34.1/version_history/v1.34/v1.34.1
**Full changelog**:
    https://github.com/envoyproxy/envoy/compare/v1.34.0...v1.34.1

Signed-off-by: Yan Avlasov <yavlasov@google.com>
Signed-off-by: Boteng Yao <boteng@google.com>
Signed-off-by: Ryan Northey <ryan@synca.io>