enterprise-2.18.7
December 15, 2025
The 2.18.7 stable point release fixes an issue with TLS algorithm negotiation that may affect connection establishment with other FIPS-validated proxy versions, and includes additional dependency upgrades.
Previous release: enterprise-2.18.5.
Supported Kubernetes versions
For this release, the minimum supported Kubernetes version remains 1.22, and the maximum supported Kubernetes version remains 1.32.
Who should upgrade?
This is an important FIPS update and users who run the FIPS-validated version of Linkerd should upgrade to this release as soon as possible. Users without FIPS-validated Linkerd can upgrade or skip this release at their convenience.
Upgrade guidance
This is a stable point release designed to introduce minimal change. Please see the instructions in Upgrading BEL for how to upgrade.
To upgrade with BEL’s lifecycle automation operator, you will need Buoyant Extension version v0.38.0 or later.
Changelog
- Fix an issue with TLS algorithm negotiation that may affect connection establishment with other FIPS-validated proxy versions
- Update
golangto remediate CVE-2025-61727 and CVE-2025-61729