[NET-10290] Update ENVOY_VERSIONS (#21524)

* [NET-10290] Update ENVOY_VERSIONS * Add changelog entry * Link to CVE for more info in changelog entry Co-authored-by: Deniz Onur Duzgun <[email protected]> --------- Co-authored-by: Deniz Onur Duzgun <[email protected]>
hashicorp · Jul 8, 2024 · 8d2370d · 8d2370d
1 parent dce6241
commit 8d2370d
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 3 deletions.
diff --git a/.changelog/21524.txt b/.changelog/21524.txt
@@ -0,0 +1,3 @@
+```release-note:security
+Upgrade envoy module dependencies to version 1.27.7, 1.28.5 and 1.29.7 or higher to resolve [CVE-2024-39305](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39305)
+```
diff --git a/envoyextensions/xdscommon/ENVOY_VERSIONS b/envoyextensions/xdscommon/ENVOY_VERSIONS
@@ -8,7 +8,7 @@
 #
 # See https://www.consul.io/docs/connect/proxies/envoy#supported-versions for more information on Consul's Envoy
 # version support.
-1.29.5
-1.28.4
-1.27.6
+1.29.7
+1.28.5
+1.27.7
 1.26.8