bump envoy

hashicorp · Jul 5, 2024 · 255cd9f · 255cd9f
1 parent 1904f74
commit 255cd9f
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/.changelog/579.txt b/.changelog/579.txt
@@ -0,0 +1,3 @@
+```release-note:security
+Upgrade envoy version to 1.27.7 to address [CVE-2024-39305](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39305)
+```
diff --git a/Dockerfile b/Dockerfile
@@ -7,7 +7,7 @@
 # envoy-binary pulls in the latest Envoy binary, as Envoy don't publish
 # prebuilt binaries in any other form.
 ARG GOLANG_VERSION
-FROM envoyproxy/envoy-distroless:v1.27.6 as envoy-binary
+FROM envoyproxy/envoy-distroless:v1.27.7 as envoy-binary
 
 # Modify the envoy binary to be able to bind to privileged ports (< 1024).
 FROM debian:bullseye-slim AS setcap-envoy-binary