Plan
active
Envoy v1.40.2 patches eMudhra CA compromise in distroless image
- Platform/SRE — Plan: Envoy v1.40.1’s distroless image ships an unpatched ca-certificates bundle that still trusts roots tied to the compromised eMudhra intermediate CA; v1.40.2 corrects this. If operating v1.40.1 as a service mesh or ingress proxy doing TLS validation, schedule an upgrade to v1.40.2 this sprint — no active-exploitation signal warrants emergency treatment, but the CA trust exposure is real.
- CI/CD — Skip
- Leader — Skip
- Signals: Envoy 1.40 EOL 2027-10-13
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.