From 26d8de17e82b86a339896f6eff0c09561ee4ce1e Mon Sep 17 00:00:00 2001
From: Jacob Bohanon <jacob.bohanon@solo.io>
Date: Fri, 9 Feb 2024 16:05:41 -0500
Subject: [PATCH] bump envoy-gloo

---
 Makefile                                | 2 +-
 changelog/v1.13.36/envoy-gloo-cves.yaml | 9 +++++++++
 2 files changed, 10 insertions(+), 1 deletion(-)
 create mode 100644 changelog/v1.13.36/envoy-gloo-cves.yaml

diff --git a/Makefile b/Makefile
index 713805c4507..7a992ee11ef 100644
--- a/Makefile
+++ b/Makefile
@@ -81,7 +81,7 @@ else
   endif
 endif
 
-ENVOY_GLOO_IMAGE ?= quay.io/solo-io/envoy-gloo:1.23.12-patch3
+ENVOY_GLOO_IMAGE ?= quay.io/solo-io/envoy-gloo:1.23.12-patch4
 
 # The full SHA of the currently checked out commit
 CHECKED_OUT_SHA := $(shell git rev-parse HEAD)
diff --git a/changelog/v1.13.36/envoy-gloo-cves.yaml b/changelog/v1.13.36/envoy-gloo-cves.yaml
new file mode 100644
index 00000000000..00d1797d256
--- /dev/null
+++ b/changelog/v1.13.36/envoy-gloo-cves.yaml
@@ -0,0 +1,9 @@
+changelog:
+- type: DEPENDENCY_BUMP
+  dependencyOwner: solo-io
+  dependencyRepo: envoy-gloo
+  dependencyTag: v1.23.12-patch4
+  issueLink: https://github.com/solo-io/solo-projects/issues/5778
+  resolvesIssue: false
+  description: >-
+    Bump envoy-gloo for fixes Envoy CVEs announced 8 Feb 2024.