AWS app-mesh: Bump recommended App Mesh Envoy image to v1.39.4.0
Summary
Updated the recommended aws-appmesh-envoy container image version from v1.39.1.0-prod to v1.39.4.0-prod in the vulnerability-analysis guidance, instructing users to update their microservices to the newer image.
Security assessment
This page exists to remediate vulnerable Envoy sidecar images; moving the recommended image from v1.39.1.0 to v1.39.4.0 pushes users onto a patched Envoy build, reducing exposure to known Envoy vulnerabilities. No specific CVE is cited in the diff, so severity is medium rather than high.
Evidence
+ 840364872350.dkr.ecr.region-code.amazonaws.com/aws-appmesh-envoy:v1.39.4.0-prod
Diff
diff --git a/app-mesh/latest/userguide/configuration-vulnerability-analysis.md b/app-mesh/latest/userguide/configuration-vulnerability-analysis.md index a1a6ecb..b47735a 100644 --- a//app-mesh/latest/userguide/configuration-vulnerability-analysis.md +++ b//app-mesh/latest/userguide/configuration-vulnerability-analysis.md @@ -18 +18 @@ You must update your microservices to use the updated container image version. F - 840364872350.dkr.ecr.region-code.amazonaws.com/aws-appmesh-envoy:v1.39.1.0-prod + 840364872350.dkr.ecr.region-code.amazonaws.com/aws-appmesh-envoy:v1.39.4.0-prod