[Zero-Day] [Envoy] Upcoming security release of Envoy for a memory leak fix in nghttp2 codec

[Boteng Yao]

Hello Envoy Community,

We are announcing a fix for a zero day related to a memory leak in the nghttp2 codec. Here is the CVE-2023-35945.

The patches can be seen here, we are working to publish releases for all supported branches soon. Will keep the community posted.

Thanks,
Boteng (on behalf of the Envoy security team and maintainers)