v1.40.2
2026-11-04T08:52:16Z•9c66cf9cd396c21a5098444abfd9b3f0a2b96dd49d08883137896fbf801b4d5d
DNS-over-HTTPSDNS-over-TLSDockerEnvoyEnvoy MobilePKITLScertificate-authority-compromisedistrolesseMudhrasecurity-updatesoftware-releasetrust-store
What happened
Envoy security releases v1.37.10 through v1.40.2 address the eMudhra intermediate CA compromise. The updates remove compromised eMudhra trust anchors from Envoy Docker and mobile bundles, update Rust web PKI roots used by the Hickory DNS-over-TLS/HTTPS resolver, and refresh distroless images with patched Debian ca-certificates packages. The affected prior releases retained trust in compromised certificate authorities.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- envoyproxy_envoy_releases
- Record identifier
- 9c66cf9cd396c21a5098444abfd9b3f0a2b96dd49d08883137896fbf801b4d5d
- Enrichment time
- 2026-11-04T08:52:16Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.