envoy

Summary of changes

Dynamic modules expansion

• Added support for network, listener, UDP listener, and access logger filters
• Introduced streaming HTTP callouts to HTTP filters
• Enhanced ABI for streaming body manipulation and header operations
• Added global module loading and improved module search path handling

HTTP and protocol enhancements

• Container-aware CPU detectio...

Summary of changes:

• Security updates:

  Resolve dependency CVEs:

  • c-ares/CVE-2025-0913: Use after free can crash Envoy due to malfunctioning or compromised DNS.

While a potentially severe bug in some cloud environments, this has limited exploitability as any attacker would require control of DNS.

Envoy advisory is here https://github.com/envoyproxy/envoy/security/advi...

Summary of changes:

• Security updates:

  Resolve dependency CVEs:

  • c-ares/CVE-2025-0913: Use after free can crash Envoy due to malfunctioning or compromised DNS.

While a potentially severe bug in some cloud environments, this has limited exploitability as any attacker would require control of DNS.

Envoy advisory is here https://github.com/envoyproxy/envoy/security/advi...

Summary of changes:

• Security updates:

  Resolve dependency CVEs:

  • c-ares/CVE-2025-0913: Use after free can crash Envoy due to malfunctioning or compromised DNS.

While a potentially severe bug in some cloud environments, this has limited exploitability as any attacker would require control of DNS.

Envoy advisory is here https://github.com/envoyproxy/envoy/security/advi...

Summary of changes:

• Security updates:

  Resolve dependency CVEs:

  • c-ares/CVE-2025-0913: Use after free can crash Envoy due to malfunctioning or compromised DNS.

While a potentially severe bug in some cloud environments, this has limited exploitability as any attacker would require control of DNS.

Envoy advisory is here https://github.com/envoyproxy/envoy/security/advi...