Software1 hOctober 2, 2026, 19:00

Envoy Gateway 1.9.1 tightens security and complicates upgrade from 1.9.0

Envoy Gateway 1.9.1 restores the 15-second initial SDS/RDS fetch timeout that v1.9.0 set to zero, enables AES-256-GCM for OAuth2/OIDC session cookies and fixes CVE-2026-47775. Users on v1.9.0 are advised to follow a careful rolling-update strategy, since SDS config changes can leave TLS proxies without certificates.

InfoQ

Open source

Initial SDS/RDS fetch timeout restored to 15 seconds from zero in v1.9.0
AES-256-GCM enabled for OAuth2/OIDC cookies, CVE-2026-47775 fixed
Implicit HTTPS-to-HTTP fallback removed for OCI Wasm image pulls
Per-phase tracing spans added for Gateway API and xDS translation

#EnvoyGateway

Google Search /goto Redirects Could Complicate GA4 Organic Attribution

Policy

EU AI envoy tells commissioners to focus on using AI, not building models

Policy

Former US State Department envoy says US-China AI safety talks will not yield a breakthrough treaty as Beijing is prioritizing its strategic advantage (New York Times)

Policy

Envoy Gateway 1.9.1 tightens security and complicates upgrade from 1.9.0

Google Search /goto Redirects Could Complicate GA4 Organic Attribution

EU AI envoy tells commissioners to focus on using AI, not building models

Former US State Department envoy says US-China AI safety talks will not yield a breakthrough treaty as Beijing is prioritizing its strategic advantage (New York Times)

Thousands of diesel generators complicate Texas's AI data center crackdown