Envoy Cloud-Native Edge Proxy v1.39.3 Release
Summary of changes : Security fixes: GHSA-8vc2-jrm4-835w : oauth2: crash on requests without a :path header (i.e.
Executive Summary
Summary of changes : Security fixes: GHSA-8vc2-jrm4-835w : oauth2: crash on requests without a :path header (i.e. The filter now rejects such requests with 400 . GHSA-47vj-9r25-wv5j : api_key_auth: crash when hide_credentials is enabled with a query key source and a request without a :path header (i.e. CONNECT) is authenticated via another key source. Docker images : https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.39.3 Docs : https://www.envoyproxy.io/docs/envoy/v1.39.3/ Release notes : https://www.envoyproxy.io/docs/envoy/v1.39.3/version_history/v1.39/v1.39.3 Full changelog : v1.39.2...v1.39.3 Signed-off-by: wbpcode [email protected] Signed-off-by: Ryan...
Cloud-Native Infrastructure & eBPF Networking Inspection
From an infrastructure engineering, cloud-native scale, and kernel networking standpoint: - **In-Kernel Observability:** Programmable eBPF bytecode enables zero-overhead telemetry and dynamic security policy enforcement directly in kernel space. - **Daemonless Isolation:** OCI-compliant runtime boundaries isolate container workloads without monolithic daemon dependencies. - **Service Mesh Telemetry:** Standardized ingress and proxy layers provide granular mutual TLS (mTLS) traffic steering at scale.
Impact on the Open Ecosystem
Bridges bare-metal efficiency with standardized, cloud-native orchestration protocols.