envoyproxy/envoy v1.37.11

on GitHub

Summary of changes:

• Upstream security fixes:
  • eMudhra intermediate CA compromise:
    release: the distroless docker image now uses the patched ca-certificates package
    (20250419~deb12u2) from Debian bookworm, so it no longer trusts the roots of the
    compromised eMudhra intermediate CAs. The distroless image released in 1.37.10 still
    shipped the unpatched bundle.

Docker images:
https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.37.11
Docs:
https://www.envoyproxy.io/docs/envoy/v1.37.11/
Release notes:
https://www.envoyproxy.io/docs/envoy/v1.37.11/version_history/v1.37/v1.37.11
Full changelog:
v1.37.10...v1.37.11

Signed-off-by: Jonh Wendell jwendell@redhat.com
Signed-off-by: Ryan Northey ryan@synca.io