v1.34.6

envoyproxy/envoyv1.34.6Sep 3, 2025by publish-envoy[bot]

AI Summary

This release addresses critical security vulnerabilities including an OAuth cookie issue and a Use-After-Free (UAF) bug in DNS resolution.

Key Highlights

Fixed OAuth cookie issue (CVE-2025-55162)
Fixed UAF in DNS resolution (CVE-2025-54588)

Full Release Notes

**Summary of changes**:

* Security fixes:
  - Fix for OAuth cookie issue
[CVE-2025-55162](https://github.com/envoyproxy/envoy/security/advisories/GHSA-95j4-hw7f-v2rh).
  - Fix UAF in DNS resolution
[CVE-2025-54588](https://github.com/envoyproxy/envoy/security/advisories/GHSA-g9vw-6pvx-7gmw).

**Docker images**:
    https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.34.6
**Docs**:
    https://www.envoyproxy.io/docs/envoy/v1.34.6/
**Release notes**:
    https://www.envoyproxy.io/docs/envoy/v1.34.6/version_history/v1.34/v1.34.6
**Full changelog**:
    https://github.com/envoyproxy/envoy/compare/v1.34.5...v1.34.6

Signed-off-by: yanavlasov <yavlasov@google.com>
Signed-off-by: Ryan Northey <ryan@synca.io>