Buoyant Enterprise for Linkerd

October 26, 2026

The 2.20.5 stable point release adds official support for Kubernetes 1.37 and updates Golang to 1.26.9. This release also updates some dependencies to address reported CVEs in underlying components.

Previous release: enterprise-2.20.4.

Supported Kubernetes versions

For this release, the minimum supported Kubernetes version remains 1.31, and the maximum supported Kubernetes version has been increased to 1.37.

Who should upgrade?

Users running Kubernetes 1.37 should upgrade to this release.

Other users may upgrade to this release at their convenience to take advantage of the addressed CVEs.

Upgrade guidance

This is a stable point release designed to introduce minimal change. Please see the instructions in Upgrading BEL for how to upgrade.

To upgrade with BEL’s lifecycle automation operator, you will need Buoyant Extension v0.41.1 or later.

Changelog

• Add official support for Kubernetes 1.37.
• Update golang to remediate
  • GO-2026-6617
  • GO-2026-6613
  • GO-2026-6612
  • GO-2026-6611
  • GO-2026-6610
  • GO-2026-6609
  • GO-2026-6608
  • GO-2026-6607
  • GO-2026-6605
  • GO-2026-6604
  • GO-2026-6603
  • GO-2026-6600
  • GO-2026-6599
• Update helm.sh/helm/v3 dependency to remediate
  • GHSA-pg57-6jwg-q645
• Update ca-certificates-bundle to remediate
  • CVE-2026-111943
• Update libcrypt1 to remediate
  • CVE-2026-95818
  • CVE-2026-89092
  • CVE-2026-86805
  • CVE-2026-8674
• Update hickory-resolver to remediate
  • GHSA-6w6g-hm98-mhgm
  • GHSA-6f2x-v7q7-m7m5
  • GHSA-5j98-2g5x-46v6 (maps to CVE-2026-93657)