[1.14] Feb 8 CVEs bump envoy-gloo (#9151)

Co-authored-by: soloio-bulldozer[bot] <48420018+soloio-bulldozer[bot]@users.noreply.github.com>

Makefile

@@ -89,7 +89,7 @@ else
   endif
 endif
 
-ENVOY_GLOO_IMAGE ?= quay.io/solo-io/envoy-gloo:1.25.10-patch1
+ENVOY_GLOO_IMAGE ?= quay.io/solo-io/envoy-gloo:1.25.10-patch2
 
 # The full SHA of the currently checked out commit
 CHECKED_OUT_SHA := $(shell git rev-parse HEAD)

changelog/v1.14.29/envoy-gloo-cves.yaml

@@ -0,0 +1,9 @@
+changelog:
+- type: DEPENDENCY_BUMP
+  dependencyOwner: solo-io
+  dependencyRepo: envoy-gloo
+  dependencyTag: v1.25.10-patch2
+  issueLink: https://github.com/solo-io/solo-projects/issues/5778
+  resolvesIssue: false
+  description: >-
+    Bump envoy-gloo for fixes Envoy CVEs announced 8 Feb 2024.