diff --git a/Makefile b/Makefile
index 771313eb6de..b8f798cece6 100644
--- a/Makefile
+++ b/Makefile
@@ -62,7 +62,7 @@ secure-local: $(SECURE_LOCAL_BOOTSTRAP_CONFIG)
 		-it \
 		--mount type=bind,source=$(CURDIR),target=/config \
 		--net bridge \
-		docker.io/envoyproxy/envoy:v1.11.1 \
+		docker.io/envoyproxy/envoy:v1.11.2 \
 		envoy \
 		--config-path /config/$< \
 		--service-node node0 \
@@ -73,7 +73,7 @@ local: $(LOCAL_BOOTSTRAP_CONFIG)
 		-it \
 		--mount type=bind,source=$(CURDIR),target=/config \
 		--net bridge \
-		docker.io/envoyproxy/envoy:v1.11.1 \
+		docker.io/envoyproxy/envoy:v1.11.2 \
 		envoy \
 		--config-path /config/$< \
 		--service-node node0 \
diff --git a/examples/deployment-grpc-v2/02-contour.yaml b/examples/deployment-grpc-v2/02-contour.yaml
index 9b7547fae65..6c958960bc2 100644
--- a/examples/deployment-grpc-v2/02-contour.yaml
+++ b/examples/deployment-grpc-v2/02-contour.yaml
@@ -43,7 +43,7 @@ spec:
         - name: contour-config
           mountPath: /config
           readOnly: true
-      - image: docker.io/envoyproxy/envoy:v1.11.1
+      - image: docker.io/envoyproxy/envoy:v1.11.2
         name: envoy
         ports:
         - containerPort: 8080
diff --git a/examples/ds-grpc-v2/02-contour.yaml b/examples/ds-grpc-v2/02-contour.yaml
index f7e96323224..5ab0d8f2f3f 100644
--- a/examples/ds-grpc-v2/02-contour.yaml
+++ b/examples/ds-grpc-v2/02-contour.yaml
@@ -44,7 +44,7 @@ spec:
         - name: contour-config
           mountPath: /config
           readOnly: true
-      - image: docker.io/envoyproxy/envoy:v1.11.1
+      - image: docker.io/envoyproxy/envoy:v1.11.2
         name: envoy
         ports:
         - containerPort: 8080
diff --git a/examples/ds-hostnet-split/03-envoy.yaml b/examples/ds-hostnet-split/03-envoy.yaml
index afb27716f11..4d0e6d0aa33 100644
--- a/examples/ds-hostnet-split/03-envoy.yaml
+++ b/examples/ds-hostnet-split/03-envoy.yaml
@@ -31,7 +31,7 @@ spec:
         - --log-level info
         command:
         - envoy
-        image: docker.io/envoyproxy/envoy:v1.11.1
+        image: docker.io/envoyproxy/envoy:v1.11.2
         imagePullPolicy: IfNotPresent
         name: envoy
         env:
diff --git a/examples/ds-hostnet/02-contour.yaml b/examples/ds-hostnet/02-contour.yaml
index 966cf14323f..a732602b45f 100644
--- a/examples/ds-hostnet/02-contour.yaml
+++ b/examples/ds-hostnet/02-contour.yaml
@@ -48,7 +48,7 @@ spec:
         - name: contour-config
           mountPath: /config
           readOnly: true
-      - image: docker.io/envoyproxy/envoy:v1.11.1
+      - image: docker.io/envoyproxy/envoy:v1.11.2
         name: envoy
         ports:
         - containerPort: 8080
diff --git a/examples/render/daemonset-rbac.yaml b/examples/render/daemonset-rbac.yaml
index a135b95acff..7432ec0de2b 100644
--- a/examples/render/daemonset-rbac.yaml
+++ b/examples/render/daemonset-rbac.yaml
@@ -305,7 +305,7 @@ spec:
         - name: contour-config
           mountPath: /config
           readOnly: true
-      - image: docker.io/envoyproxy/envoy:v1.11.1
+      - image: docker.io/envoyproxy/envoy:v1.11.2
         name: envoy
         ports:
         - containerPort: 8080
diff --git a/examples/render/deployment-rbac.yaml b/examples/render/deployment-rbac.yaml
index 2b3266227ee..ffc6668f897 100644
--- a/examples/render/deployment-rbac.yaml
+++ b/examples/render/deployment-rbac.yaml
@@ -304,7 +304,7 @@ spec:
         - name: contour-config
           mountPath: /config
           readOnly: true
-      - image: docker.io/envoyproxy/envoy:v1.11.1
+      - image: docker.io/envoyproxy/envoy:v1.11.2
         name: envoy
         ports:
         - containerPort: 8080