diff --git a/WORKSPACE b/WORKSPACE
index f214681c725..06198c62c3a 100644
--- a/WORKSPACE
+++ b/WORKSPACE
@@ -30,7 +30,7 @@ bind(
 )
 
 # When updating envoy sha manually please update the sha in istio.deps file also
-ENVOY_SHA = "a637506da5f55f0bec37701d9e0a04f1179a6bfb"
+ENVOY_SHA = "8607e912a1df840da1080b7b0d4a9ed6bc247c39"
 
 http_archive(
     name = "envoy",
diff --git a/istio.deps b/istio.deps
index f48e3b6294b..3538d282ef1 100644
--- a/istio.deps
+++ b/istio.deps
@@ -11,6 +11,6 @@
 		"name": "ENVOY_SHA",
 		"repoName": "envoyproxy/envoy",
 		"file": "WORKSPACE",
-		"lastStableSHA": "a637506da5f55f0bec37701d9e0a04f1179a6bfb"
+		"lastStableSHA": "8607e912a1df840da1080b7b0d4a9ed6bc247c39"
 	}
 ]