Download Latest Version v1.40.0 source code.zip (59.3 MB) Google Add to Preferred Sources
Home / v1.38.7
Name Modified Size InfoDownloads / Week
Parent folder
envoy-1.38.7-linux-x86_64 2026-10-12 102.1 MB
debs.tar.gz 2026-10-12 352.2 MB
checksums.txt.asc 2026-10-12 1.4 kB
envoy-contrib-1.38.7-linux-aarch_64 2026-10-12 152.6 MB
envoy-contrib-1.38.7-linux-x86_64 2026-10-12 161.5 MB
envoy-1.38.7-linux-aarch_64 2026-10-12 98.8 MB
README.md 2026-10-12 1.5 kB
v1.38.7 source code.tar.gz 2026-10-12 46.4 MB
v1.38.7 source code.zip 2026-10-12 54.0 MB
Totals: 9 Items   967.6 MB 0

Summary of changes:

  • Upstream security fixes:
  • wasm: bumped wasmtime to 24.0.10 to resolve CVE-2026-54786.

  • Bug fixes:

  • aws: fixed a race where the route-level configuration of the AWS request signing and AWS Lambda filters could be destroyed on a worker thread when an RDS update replaced the route configuration.
  • dynamic_modules: fixed a bug where the per-route config destroy hook could run on a worker thread, and the module could be unloaded there, when an RDS update replaced the route configuration.
  • local_ratelimit: fixed a race where the share provider manager owned by a local rate limit route-level configuration could be destroyed on a worker thread.
  • sds: fixed a race where a generic secret provider shared with worker threads could be destroyed on a worker thread.
  • stats: fixed a bug introduced in 1.38.0 that exported Prometheus native histogram bucket indices one bucket too low, causing consumers to decode observations into lower value ranges and underreport quantiles.

Docker images: https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.38.7 Docs: https://www.envoyproxy.io/docs/envoy/v1.38.7/ Release notes:

https://www.envoyproxy.io/docs/envoy/v1.38.7/version_history/v1.38/v1.38.7 Full changelog: https://github.com/envoyproxy/envoy/compare/v1.38.6...v1.38.7

Signed-off-by: Jonh Wendell jwendell@redhat.com Signed-off-by: Ryan Northey ryan@synca.io

Source: README.md, updated 2026-10-12