[NET-10290] Update ENVOY_VERSIONS (#21524)

* [NET-10290] Update ENVOY_VERSIONS * Add changelog entry * Link to CVE for more info in changelog entry Co-authored-by: Deniz Onur Duzgun <59659739+dduzgun-security@users.noreply.github.com> --------- Co-authored-by: Deniz Onur Duzgun <59659739+dduzgun-security@users.noreply.github.com>
hashicorp · Jul 8, 2024 · 8d2370d · 8d2370d
1 parent dce6241
commit 8d2370d
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 3 deletions.
diff --git a/.changelog/21524.txt b/.changelog/21524.txt
@@ -0,0 +1,3 @@
+```release-note:security
+Upgrade envoy module dependencies to version 1.27.7, 1.28.5 and 1.29.7 or higher to resolve [CVE-2024-39305](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39305)
+```
diff --git a/envoyextensions/xdscommon/ENVOY_VERSIONS b/envoyextensions/xdscommon/ENVOY_VERSIONS
@@ -8,7 +8,7 @@
 #
 # See https://www.consul.io/docs/connect/proxies/envoy#supported-versions for more information on Consul's Envoy
 # version support.
-1.29.5
-1.28.4
-1.27.6
+1.29.7
+1.28.5
+1.27.7
 1.26.8
-Original file line number
+Diff line change
@@ Expand Up / @@ -8,7 +8,7 @@ @@
     #
     # See https://www.consul.io/docs/connect/proxies/envoy#supported-versions for more information on Consul's Envoy
     # version support.
-.29.5
-.28.4
-.27.6
+.29.7
+.28.5
+.27.7
 .26.8