enterprise-2.19.5
March 9, 2026
The 2.19.5 stable point release updates some dependencies to address reported CVEs in underlying components.
Who should upgrade?
This is a CVE hygiene release and does not fix any known exploitable vulnerabilities with Linkerd. Users may upgrade to this release at their convenience.
Upgrade guidance
This is a stable point release designed to introduce minimal change. Please see the instructions in Upgrading BEL for how to upgrade.
To upgrade with BEL’s lifecycle automation operator, you will need Buoyant Extension version v0.39.0 or later.
Changelog
- Update
bytescrate to remediate CVE-2026-25541 - Update
timecrate to remediate CVE-2026-25727 - Update
aws-lc-syscrate to remediate - Update
golangto remediate - Update Debian to remediate