CVE Patch releases for 1.14.3

Release 1.14.3009

Released 6 October 2026

Packages in 1.14.3009

This release is made up of the following container images:

containers.dl.tetrate.io/aws-controller:1.14.3009
containers.dl.tetrate.io/bridge-migration:1.14.3009
containers.dl.tetrate.io/bridge-server:1.14.3009
containers.dl.tetrate.io/cert-manager-cainjector:v1.16.1-tetrate-v31
containers.dl.tetrate.io/cert-manager-controller:v1.16.1-tetrate-v31
containers.dl.tetrate.io/cert-manager-webhook:v1.16.1-tetrate-v31
containers.dl.tetrate.io/coraza-proxy-wasm:0.6.0
containers.dl.tetrate.io/eck-operator:2.11.1-tetrate-v25
containers.dl.tetrate.io/elasticsearch:8.19.19-tetrate-v2
containers.dl.tetrate.io/genistio-watcher:1.14.3009
containers.dl.tetrate.io/host-management-plane-server:v0.0.0-a8651a8
containers.dl.tetrate.io/iam-jwt:1.14.3009
containers.dl.tetrate.io/iam-server:1.14.3009
containers.dl.tetrate.io/install-cni:1.28.9-19388cabc4-distroless
containers.dl.tetrate.io/kube-rbac-proxy:v0.15.0-tetrate-v29
containers.dl.tetrate.io/kubectl:v1.22.9-tetrate-v25
containers.dl.tetrate.io/kubegres:v1.16.0-tetrate-v43
containers.dl.tetrate.io/mpc-server:1.14.3009
containers.dl.tetrate.io/n2ac-cluster-server:0.1.31
containers.dl.tetrate.io/nc-cmd:1.14.3009
containers.dl.tetrate.io/ngac-agent:0.1.4
containers.dl.tetrate.io/ngac-server:0.1.4
containers.dl.tetrate.io/oapr3:426dbee
containers.dl.tetrate.io/onboarding-agent:1.14.3009
containers.dl.tetrate.io/onboarding-operator-server:1.14.3009
containers.dl.tetrate.io/onboarding-package-istio-sidecar:1.28.9-19388cabc4
containers.dl.tetrate.io/onboarding-plane-server:1.14.3009
containers.dl.tetrate.io/onboarding-repository-server:1.14.3009
containers.dl.tetrate.io/otelcol:0.131.1
containers.dl.tetrate.io/otelcol:0.159.0
containers.dl.tetrate.io/package-repository-server:1.14.3009
containers.dl.tetrate.io/pilot:1.28.9-19388cabc4-distroless
containers.dl.tetrate.io/pkg-host-management-agent:v0.0.0-a8651a8
containers.dl.tetrate.io/pkg-service-discovery-agent:v0.0.0-f24abe2
containers.dl.tetrate.io/pkg-spm-agent:dce50abb50c6df8303ac1b4fcb57a6682c7ec84b
containers.dl.tetrate.io/postgres-exporter:v0.18.1-tetrate-v14
containers.dl.tetrate.io/postgres:14.24-alpine3.24-tetrate-v1
containers.dl.tetrate.io/proxyv2:1.28.9-19388cabc4-distroless
containers.dl.tetrate.io/proxyv2:1.28.9-19388cabc4-pv-distroless
containers.dl.tetrate.io/ratelimit:08808297
containers.dl.tetrate.io/redis:8.4.0-alpine3.22
containers.dl.tetrate.io/satellite:v46fd76846701dc6728901baf78cc644ffdbad7f7
containers.dl.tetrate.io/service-discovery-plane-server:v0.0.0-f24abe2
containers.dl.tetrate.io/spm-agent:dce50abb50c6df8303ac1b4fcb57a6682c7ec84b
containers.dl.tetrate.io/spm-central:f45cb36674dcc6d6d38e13f146a0c98088aa60f0
containers.dl.tetrate.io/spm-user:f45cb36674dcc6d6d38e13f146a0c98088aa60f0
containers.dl.tetrate.io/swck:24da58c2-go1.26.7-v0
containers.dl.tetrate.io/tcc-web-ui:1.14.3009
containers.dl.tetrate.io/tctl:1.14.3009
containers.dl.tetrate.io/teamsync-job:1.14.3009
containers.dl.tetrate.io/tetrate-openldap:2.6.8-debian-12-r13
containers.dl.tetrate.io/tsboperator-jobs:1.14.3009
containers.dl.tetrate.io/tsboperator-server:1.14.3009
containers.dl.tetrate.io/wasmfetcher-server:1.14.3009
containers.dl.tetrate.io/xcp-operator:v1.14.45013
containers.dl.tetrate.io/xcpd:v1.14.45013
containers.dl.tetrate.io/ztunnel:1.28.9-19388cabc4-distroless

Changes

• Fixed the following CVEs: CVE-2026-37236, CVE-2026-53493, CVE-2026-56131, CVE-2026-56132, CVE-2026-56406, CVE-2026-56407, CVE-2026-56409, CVE-2026-56410, CVE-2026-56411, CVE-2026-66046, CVE-2026-72522, CVE-2026-76641, CVE-2026-76957, CVE-2026-84939, CVE-2026-85747, CVE-2026-89425, CVE-2026-91776, CVE-2026-91777, CVE-2026-95838, XRAY-1032964, XRAY-1032965.

Release 1.14.3008

Released 22 September 2026

Packages in 1.14.3008

This release is made up of the following container images:

containers.dl.tetrate.io/aws-controller:1.14.3008
containers.dl.tetrate.io/bridge-migration:1.14.3008
containers.dl.tetrate.io/bridge-server:1.14.3008
containers.dl.tetrate.io/cert-manager-cainjector:v1.16.1-tetrate-v31
containers.dl.tetrate.io/cert-manager-controller:v1.16.1-tetrate-v31
containers.dl.tetrate.io/cert-manager-webhook:v1.16.1-tetrate-v31
containers.dl.tetrate.io/coraza-proxy-wasm:0.6.0
containers.dl.tetrate.io/eck-operator:2.11.1-tetrate-v25
containers.dl.tetrate.io/elasticsearch:8.19.9-tetrate-v4
containers.dl.tetrate.io/genistio-watcher:1.14.3008
containers.dl.tetrate.io/host-management-plane-server:v0.0.0-a8651a8
containers.dl.tetrate.io/iam-jwt:1.14.3008
containers.dl.tetrate.io/iam-server:1.14.3008
containers.dl.tetrate.io/install-cni:1.28.9-19388cabc4-distroless
containers.dl.tetrate.io/kube-rbac-proxy:v0.15.0-tetrate-v29
containers.dl.tetrate.io/kubectl:v1.22.9-tetrate-v25
containers.dl.tetrate.io/kubegres:v1.16.0-tetrate-v43
containers.dl.tetrate.io/mpc-server:1.14.3008
containers.dl.tetrate.io/n2ac-cluster-server:0.1.31
containers.dl.tetrate.io/nc-cmd:1.14.3008
containers.dl.tetrate.io/ngac-agent:0.1.4
containers.dl.tetrate.io/ngac-server:0.1.4
containers.dl.tetrate.io/oapr3:426dbee
containers.dl.tetrate.io/onboarding-agent:1.14.3008
containers.dl.tetrate.io/onboarding-operator-server:1.14.3008
containers.dl.tetrate.io/onboarding-package-istio-sidecar:1.28.9-19388cabc4
containers.dl.tetrate.io/onboarding-plane-server:1.14.3008
containers.dl.tetrate.io/onboarding-repository-server:1.14.3008
containers.dl.tetrate.io/otelcol:0.131.1
containers.dl.tetrate.io/otelcol:0.159.0
containers.dl.tetrate.io/package-repository-server:1.14.3008
containers.dl.tetrate.io/pilot:1.28.9-19388cabc4-distroless
containers.dl.tetrate.io/pkg-host-management-agent:v0.0.0-a8651a8
containers.dl.tetrate.io/pkg-service-discovery-agent:v0.0.0-f24abe2
containers.dl.tetrate.io/pkg-spm-agent:dce50abb50c6df8303ac1b4fcb57a6682c7ec84b
containers.dl.tetrate.io/postgres-exporter:v0.18.1-tetrate-v14
containers.dl.tetrate.io/postgres:14.24-alpine3.24-tetrate-v1
containers.dl.tetrate.io/proxyv2:1.28.9-19388cabc4-distroless
containers.dl.tetrate.io/proxyv2:1.28.9-19388cabc4-pv-distroless
containers.dl.tetrate.io/ratelimit:08808297
containers.dl.tetrate.io/redis:8.4.0-alpine3.22
containers.dl.tetrate.io/satellite:v46fd76846701dc6728901baf78cc644ffdbad7f7
containers.dl.tetrate.io/service-discovery-plane-server:v0.0.0-f24abe2
containers.dl.tetrate.io/spm-agent:dce50abb50c6df8303ac1b4fcb57a6682c7ec84b
containers.dl.tetrate.io/spm-central:f499a228270f1469dff9130f0b8937af5768b67c
containers.dl.tetrate.io/spm-user:f499a228270f1469dff9130f0b8937af5768b67c
containers.dl.tetrate.io/swck:3e97d8a-go1.26.6-v0
containers.dl.tetrate.io/tcc-web-ui:1.14.3008
containers.dl.tetrate.io/tctl:1.14.3008
containers.dl.tetrate.io/teamsync-job:1.14.3008
containers.dl.tetrate.io/tetrate-openldap:2.6.8-debian-12-r13
containers.dl.tetrate.io/tsboperator-jobs:1.14.3008
containers.dl.tetrate.io/tsboperator-server:1.14.3008
containers.dl.tetrate.io/wasmfetcher-server:1.14.3008
containers.dl.tetrate.io/xcp-operator:v1.14.45012
containers.dl.tetrate.io/xcpd:v1.14.45012
containers.dl.tetrate.io/ztunnel:1.28.9-19388cabc4-distroless

Changes

• Fixed the following CVEs: CVE-2026-56391, CVE-2026-56864, CVE-2026-56865, XRAY-1074968, XRAY-1074970, XRAY-1074971, XRAY-1074975, XRAY-1074976, XRAY-1074977, XRAY-1074980, XRAY-1074981, XRAY-1074984, XRAY-1074985, XRAY-1074993, XRAY-1074996, XRAY-1074997, XRAY-1074999

Release 1.14.3006

Released 10 September 2026

• Fixed the following CVEs: CVE-2025-47273, CVE-2026-14680, CVE-2026-16241, CVE-2026-23949, CVE-2026-50163, CVE-2026-50813, CVE-2026-56746, CVE-2026-56854, CVE-2026-56855, CVE-2026-61711, CVE-2026-61712, CVE-2026-78662, CVE-2026-81870, CVE-2026-84445, GHSA-6v7p-g79w-8964

Packages in 1.14.3006

This release is made up of the following container images:

containers.dl.tetrate.io/aws-controller:1.14.3006
containers.dl.tetrate.io/bridge-migration:1.14.3006
containers.dl.tetrate.io/bridge-server:1.14.3006
containers.dl.tetrate.io/cert-manager-cainjector:v1.16.1-tetrate-v31
containers.dl.tetrate.io/cert-manager-controller:v1.16.1-tetrate-v31
containers.dl.tetrate.io/cert-manager-webhook:v1.16.1-tetrate-v31
containers.dl.tetrate.io/coraza-proxy-wasm:0.6.0
containers.dl.tetrate.io/eck-operator:2.11.1-tetrate-v25
containers.dl.tetrate.io/elasticsearch:8.19.9-tetrate-v4
containers.dl.tetrate.io/genistio-watcher:1.14.3006
containers.dl.tetrate.io/host-management-plane-server:v0.0.0-a8651a8
containers.dl.tetrate.io/iam-jwt:1.14.3006
containers.dl.tetrate.io/iam-server:1.14.3006
containers.dl.tetrate.io/install-cni:1.28.9-19388cabc4-distroless
containers.dl.tetrate.io/kube-rbac-proxy:v0.15.0-tetrate-v29
containers.dl.tetrate.io/kubectl:v1.22.9-tetrate-v25
containers.dl.tetrate.io/kubegres:v1.16.0-tetrate-v40
containers.dl.tetrate.io/mpc-server:1.14.3006
containers.dl.tetrate.io/n2ac-cluster-server:0.1.31
containers.dl.tetrate.io/nc-cmd:1.14.3006
containers.dl.tetrate.io/ngac-agent:0.1.4
containers.dl.tetrate.io/ngac-server:0.1.4
containers.dl.tetrate.io/oapr3:426dbee
containers.dl.tetrate.io/onboarding-agent:1.14.3006
containers.dl.tetrate.io/onboarding-operator-server:1.14.3006
containers.dl.tetrate.io/onboarding-package-istio-sidecar:1.28.9-19388cabc4
containers.dl.tetrate.io/onboarding-plane-server:1.14.3006
containers.dl.tetrate.io/onboarding-repository-server:1.14.3006
containers.dl.tetrate.io/otelcol:0.131.1
containers.dl.tetrate.io/otelcol:0.159.0
containers.dl.tetrate.io/package-repository-server:1.14.3006
containers.dl.tetrate.io/pilot:1.28.9-19388cabc4-distroless
containers.dl.tetrate.io/pkg-host-management-agent:v0.0.0-a8651a8
containers.dl.tetrate.io/pkg-service-discovery-agent:v0.0.0-f24abe2
containers.dl.tetrate.io/pkg-spm-agent:7a22e6ff34948420493c8e5b2b4c3bf241a84964
containers.dl.tetrate.io/postgres-exporter:v0.18.1-tetrate-v14
containers.dl.tetrate.io/postgres:14.24-alpine3.24-tetrate-v1
containers.dl.tetrate.io/proxyv2:1.28.9-19388cabc4-distroless
containers.dl.tetrate.io/proxyv2:1.28.9-19388cabc4-pv-distroless
containers.dl.tetrate.io/ratelimit:08808297
containers.dl.tetrate.io/redis:8.4.0-alpine3.22
containers.dl.tetrate.io/satellite:v46fd76846701dc6728901baf78cc644ffdbad7f7
containers.dl.tetrate.io/service-discovery-plane-server:v0.0.0-f24abe2
containers.dl.tetrate.io/spm-agent:7a22e6ff34948420493c8e5b2b4c3bf241a84964
containers.dl.tetrate.io/spm-central:e09e50e36f7051fa2102f4f3e4fcc4a942a29584
containers.dl.tetrate.io/spm-user:e09e50e36f7051fa2102f4f3e4fcc4a942a29584
containers.dl.tetrate.io/swck:3e97d8a-go1.26.6-v0
containers.dl.tetrate.io/tcc-web-ui:1.14.3006
containers.dl.tetrate.io/tctl:1.14.3006
containers.dl.tetrate.io/teamsync-job:1.14.3006
containers.dl.tetrate.io/tetrate-openldap:2.6.8-debian-12-r13
containers.dl.tetrate.io/tsboperator-jobs:1.14.3006
containers.dl.tetrate.io/tsboperator-server:1.14.3006
containers.dl.tetrate.io/wasmfetcher-server:1.14.3006
containers.dl.tetrate.io/xcp-operator:v1.14.45011
containers.dl.tetrate.io/xcpd:v1.14.45011
containers.dl.tetrate.io/ztunnel:1.28.9-19388cabc4-distroless

Release 1.14.3005

Released 31 August 2026

• Fixed the following CVEs: CVE-2026-13595, CVE-2026-27456, CVE-2026-33818, CVE-2026-39821, CVE-2026-39822, CVE-2026-42505, CVE-2026-46600, CVE-2026-48586, CVE-2026-53612, CVE-2026-53613, CVE-2026-53614, CVE-2026-53615, CVE-2026-55969, CVE-2026-56852, CVE-2026-56853, CVE-2026-56854, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860, CVE-2026-56862, CVE-2026-56864, CVE-2026-56865, GHSA-gcjh-h69q-9w9g, GHSA-hrxh-6v49-42gf, GHSA-w67g-5rqw-f597, GO-2026-6061, XRAY-1032218, XRAY-1032959, XRAY-1032960, XRAY-1033007, XRAY-1035464, XRAY-1057284, XRAY-1057286