diff --git a/WORKSPACE b/WORKSPACE
index b864fa6513a..d4b43afca6e 100644
--- a/WORKSPACE
+++ b/WORKSPACE
@@ -38,7 +38,7 @@ git_repository(
 )
 
 # When updating envoy sha manually please update the sha in istio.deps file also
-ENVOY_SHA = "2b2c299144600fb9e525d21aabf39bf48e64fb1f"
+ENVOY_SHA = "cf0cbc58a02996b53c63e41bfdcd76c02fece84e"
 
 http_archive(
     name = "envoy",
diff --git a/istio.deps b/istio.deps
index 9287d5c106e..639a285b066 100644
--- a/istio.deps
+++ b/istio.deps
@@ -11,6 +11,6 @@
 		"name": "ENVOY_SHA",
 		"repoName": "envoyproxy/envoy",
 		"file": "WORKSPACE",
-		"lastStableSHA": "2b2c299144600fb9e525d21aabf39bf48e64fb1f"
+		"lastStableSHA": "cf0cbc58a02996b53c63e41bfdcd76c02fece84e"
 	}
-]
\ No newline at end of file
+]