AWS Security ChangesHomeSearch

AWS app-mesh: Update EC2 getting-started Envoy image to v1.39.4.0

Service: app-mesh · 2026-11-05 · Security-related medium

File: app-mesh/latest/userguide/getting-started-ec2.md

Summary

Updated the aws-appmesh-envoy container image version used in the EC2 getting-started docker run examples from v1.39.1.0-prod to v1.39.4.0-prod.

Security assessment

Example commands now pull the newer Envoy sidecar image, so users following the guide deploy a patched Envoy rather than the older v1.39.1.0 build. No specific vulnerability or CVE is named.

Evidence

+        -u 1337 --network host 840364872350.dkr.ecr.region-code.amazonaws.com/aws-appmesh-envoy:v1.39.4.0-prod

Diff

diff --git a/app-mesh/latest/userguide/getting-started-ec2.md b/app-mesh/latest/userguide/getting-started-ec2.md
index ac4bc45..f3dffe6 100644
--- a//app-mesh/latest/userguide/getting-started-ec2.md
+++ b//app-mesh/latest/userguide/getting-started-ec2.md
@@ -600 +600 @@ JSON
-        -u 1337 --network host 840364872350.dkr.ecr.region-code.amazonaws.com/aws-appmesh-envoy:v1.39.1.0-prod
+        -u 1337 --network host 840364872350.dkr.ecr.region-code.amazonaws.com/aws-appmesh-envoy:v1.39.4.0-prod
@@ -605 +605 @@ JSON
-        -u 1337 --network host 772975370895.dkr.ecr.me-south-1.amazonaws.com/aws-appmesh-envoy:v1.39.1.0-prod
+        -u 1337 --network host 772975370895.dkr.ecr.me-south-1.amazonaws.com/aws-appmesh-envoy:v1.39.4.0-prod
@@ -610 +610 @@ JSON
-        -u 1337 --network host 856666278305.dkr.ecr.ap-east-1.amazonaws.com/aws-appmesh-envoy:v1.39.1.0-prod
+        -u 1337 --network host 856666278305.dkr.ecr.ap-east-1.amazonaws.com/aws-appmesh-envoy:v1.39.4.0-prod