Envoy releases [1.33.14,1.34.12,1.35.8,1.36.4] available - fixing c-ares CVE-2025-62408

10 views
Skip to first unread message

Yan Avlasov

unread,
Dec 10, 2025, 11:20:28 AM (12 days ago) Dec 10
to envoy-a...@googlegroups.com, envoy-users, envoy-dev, Envoy-maintainers, envoy-security
Hello Envoy community,

We've recently released the following Envoy versions:

- 1.33.14
- 1.34.12
- 1.35.8
- 1.36.4

Full information about all our releases is available from our releases
page:

https://github.com/envoyproxy/envoy/releases

NOTE: This set of releases includes a fix for a moderate security vulnerability disclosed in the c-ares dependency:

https://github.com/envoyproxy/envoy/security/advisories/GHSA-fg9g-pvc4-776f

Thanks,

Yan Avlasov (@yanavlasov)
Boteng Yao (@botengyao)
Ryan Northey (@phlax)

on behalf of the Envoy maintainer and security teams.
Reply all
Reply to author
Forward
0 new messages