Buoyant Enterprise for Linkerd | Release notes

enterprise-2.17.11

Fri, 05 Jun 2026 00:00:00 +0000

The 2.17.11 stable point release updates some dependencies to address reported CVEs in underlying components.

Supported Kubernetes versions

For this release, the minimum supported Kubernetes version remains 1.22, and the maximum supported Kubernetes version remains 1.32.

Who should upgrade?

This is a CVE hygiene release and does not fix any known exploitable vulnerabilities with Linkerd. Users may upgrade to this release at their convenience.

Upgrade guidance

This is a stable point release designed to introduce minimal change. Please see the instructions in Upgrading BEL for how to upgrade.

To upgrade with BEL’s lifecycle automation operator, you will need Buoyant Extension version v0.39.2 or later.

Changelog

Update golang to remediate
Update github.com/containerd/containerd dependency to remediate
- GHSA-fqw6-gf59-qr4w

enterprise-2.18.11

Fri, 05 Jun 2026 00:00:00 +0000

The 2.18.11 stable point release updates some dependencies to address reported CVEs in underlying components.

FIPS users who are upgrading from 2.18 to 2.19 must follow a specific sequence to preserve zero-downtime upgrades. You must first upgrade to 2.18.7 or later, and then to 2.19.4 or later.

Previous release: enterprise-2.18.10.

Supported Kubernetes versions

For this release, the minimum supported Kubernetes version remains 1.22, and the maximum supported Kubernetes version remains 1.32.

Who should upgrade?

This is a CVE hygiene release and does not fix any known exploitable vulnerabilities with Linkerd. Users may upgrade to this release at their convenience.

Upgrade guidance

This is a stable point release designed to introduce minimal change. Please see the instructions in Upgrading BEL for how to upgrade.

To upgrade with BEL’s lifecycle automation operator, you will need Buoyant Extension version v0.39.2 or later.

Changelog

Update golang to remediate
Update github.com/containerd/containerd dependency to remediate
- GHSA-fqw6-gf59-qr4w

enterprise-2.19.8

Fri, 05 Jun 2026 00:00:00 +0000

The 2.19.8 stable point release updates some dependencies to address reported CVEs in underlying components.

FIPS users who are upgrading from 2.18 to 2.19 must follow a specific sequence to preserve zero-downtime upgrades. You must first upgrade to 2.18.7 or later, and then to 2.19.4 or later.

Previous release: enterprise-2.19.7.

Supported Kubernetes versions

For this release, the minimum supported Kubernetes version remains 1.29, and the maximum supported Kubernetes version remains 1.35.

Who should upgrade?

This is a CVE hygiene release and does not fix any known exploitable vulnerabilities with Linkerd. Users may upgrade to this release at their convenience.

Upgrade guidance

This is a stable point release designed to introduce minimal change. Please see the instructions in Upgrading BEL for how to upgrade.

To upgrade with BEL’s lifecycle automation operator, you will need Buoyant Extension version v0.39.2 or later.

Changelog

Update golang to remediate
Update github.com/containerd/containerd dependency to remediate
- GHSA-fqw6-gf59-qr4w
Update rustls-webpki dependency to remediate
- GHSA-82j2-j2ch-gfr8

enterprise-2.17.10

Tue, 19 May 2026 00:00:00 +0000

The 2.17.10 stable point release updates some dependencies to address reported CVEs in underlying components.

Previous release: enterprise-2.17.9.

Supported Kubernetes versions

For this release, the minimum supported Kubernetes version remains 1.22, and the maximum supported Kubernetes version remains 1.32.

Who should upgrade?

This is a CVE hygiene release and does not fix any known exploitable vulnerabilities with Linkerd. Users may upgrade to this release at their convenience.

Upgrade guidance

This is a stable point release designed to introduce minimal change. Please see the instructions in Upgrading BEL for how to upgrade.

To upgrade with BEL’s lifecycle automation operator, you will need Buoyant Extension version v0.39.0 or later.

Changelog

Update go.opentelemetry.io/otel dependency to remediate
- GHSA-mh2q-q3fh-2475
Update golang to remediate
Update github.com/moby/spdystream dependency to remediate
- GHSA-pc3f-x583-g7j2
Update musl-utils dependency to remediate
- CVE-2026-6042
- CVE-2026-40200
Update libcap2 dependency to remediate
- CVE-2026-4878
Update helm.sh/helm/v3 dependency to remediate
- GHSA-hr2v-4r36-88hr
Update libssl3 dependency to remediate
Update libc dependency to remediate

enterprise-2.18.10

Tue, 19 May 2026 00:00:00 +0000

The 2.18.10 stable point release updates some dependencies to address reported CVEs in underlying components.

FIPS users who are upgrading from 2.18 to 2.19 must follow a specific sequence to preserve zero-downtime upgrades. You must first upgrade to 2.18.7 or later, and then to 2.19.4 or later.

Previous release: enterprise-2.18.9.

Supported Kubernetes versions

For this release, the minimum supported Kubernetes version remains 1.22, and the maximum supported Kubernetes version remains 1.32.

Who should upgrade?

This is a CVE hygiene release and does not fix any known exploitable vulnerabilities with Linkerd. Users may upgrade to this release at their convenience.

Upgrade guidance

This is a stable point release designed to introduce minimal change. Please see the instructions in Upgrading BEL for how to upgrade.

To upgrade with BEL’s lifecycle automation operator, you will need Buoyant Extension version v0.39.0 or later.

Changelog

Update go.opentelemetry.io/otel dependency to remediate
- GHSA-mh2q-q3fh-2475
Update golang to remediate
Update github.com/moby/spdystream dependency to remediate
- GHSA-pc3f-x583-g7j2
Update musl-utils dependency to remediate
- CVE-2026-6042
- CVE-2026-40200
Update libcap2 dependency to remediate
- CVE-2026-4878
Update helm.sh/helm/v3 dependency to remediate
- GHSA-hr2v-4r36-88hr
Update libssl3 dependency to remediate
Update libc dependency to remediate