v1.35.2

envoyproxy/envoyv1.35.2Sep 3, 2025by publish-envoy[bot]

AI Summary

This release addresses critical security vulnerabilities including an OAuth cookie issue and a Use-After-Free (UAF) bug in DNS resolution.

Key Highlights

Fixed OAuth cookie issue (CVE-2025-55162)
Fixed UAF in DNS resolution (CVE-2025-54588)

Full Release Notes

**Summary of changes**:

* Security fixes:
  - Fix for OAuth cookie issue
[CVE-2025-55162](https://github.com/envoyproxy/envoy/security/advisories/GHSA-95j4-hw7f-v2rh).
  - Fix UAF in DNS resolution
[CVE-2025-54588](https://github.com/envoyproxy/envoy/security/advisories/GHSA-g9vw-6pvx-7gmw).

**Docker images**:
    https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.35.2
**Docs**:
    https://www.envoyproxy.io/docs/envoy/v1.35.2/
**Release notes**:
https://www.envoyproxy.io/docs/envoy/v1.35.2/version_history/v1.35/v1.35.2
**Full changelog**:
    https://github.com/envoyproxy/envoy/compare/v1.35.1...v1.35.2

Signed-off-by: yanavlasov <yavlasov@google.com>
Signed-off-by: Ryan Northey <ryan@synca.io>