diff --git a/WORKSPACE b/WORKSPACE
index 618b21547e0..b0a0c0d40c5 100644
--- a/WORKSPACE
+++ b/WORKSPACE
@@ -30,7 +30,7 @@ bind(
 )
 
 # When updating envoy sha manually please update the sha in istio.deps file also
-ENVOY_SHA = "c1cc68dda009452e90d485da22ee9c74c08b328d"
+ENVOY_SHA = "28d5f4118d60f828b1453cd8ad25033f2c8e38ab"
 
 http_archive(
     name = "envoy",
diff --git a/istio.deps b/istio.deps
index 71d8dc56648..61a505606ad 100644
--- a/istio.deps
+++ b/istio.deps
@@ -11,6 +11,6 @@
 		"name": "ENVOY_SHA",
 		"repoName": "envoyproxy/envoy",
 		"file": "WORKSPACE",
-		"lastStableSHA": "c1cc68dda009452e90d485da22ee9c74c08b328d"
+		"lastStableSHA": "28d5f4118d60f828b1453cd8ad25033f2c8e38ab"
 	}
 ]