CVE Patch releases for 1.12.15

Release 1.12.15002

Released 10 September 2026

• Fixed the following CVEs: CVE-2026-56855, CVE-2026-78662, CVE-2026-81870

Packages in 1.12.15002

This release is made up of the following container images:

containers.dl.tetrate.io/aws-controller:1.12.15002
containers.dl.tetrate.io/bridge-migration:1.12.15002
containers.dl.tetrate.io/bridge-server:1.12.15002
containers.dl.tetrate.io/cert-manager-cainjector:v1.16.1-tetrate-v30
containers.dl.tetrate.io/cert-manager-controller:v1.16.1-tetrate-v30
containers.dl.tetrate.io/cert-manager-webhook:v1.16.1-tetrate-v30
containers.dl.tetrate.io/coraza-proxy-wasm:0.6.0
containers.dl.tetrate.io/eck-operator:2.11.1-tetrate-v24
containers.dl.tetrate.io/elasticsearch:8.19.19-tetrate-v0
containers.dl.tetrate.io/genistio-watcher:1.12.15002
containers.dl.tetrate.io/host-management-plane-server:v0.0.0-a8651a8
containers.dl.tetrate.io/iam-jwt:1.12.15002
containers.dl.tetrate.io/iam-server:1.12.15002
containers.dl.tetrate.io/install-cni:1.24.6-433a181a14-distroless
containers.dl.tetrate.io/kube-rbac-proxy:v0.15.0-tetrate-v28
containers.dl.tetrate.io/kubectl:v1.22.9-tetrate-v26
containers.dl.tetrate.io/kubegres:v1.16.0-tetrate-v42
containers.dl.tetrate.io/mpc-server:1.12.15002
containers.dl.tetrate.io/n2ac-cluster-server:0.1.29
containers.dl.tetrate.io/nc-cmd:1.12.15002
containers.dl.tetrate.io/ngac-agent:0.1.3
containers.dl.tetrate.io/ngac-server:0.1.3
containers.dl.tetrate.io/oapr3:d583942
containers.dl.tetrate.io/onboarding-agent:1.12.15002
containers.dl.tetrate.io/onboarding-operator-server:1.12.15002
containers.dl.tetrate.io/onboarding-package-istio-sidecar:1.24.6-433a181a14
containers.dl.tetrate.io/onboarding-plane-server:1.12.15002
containers.dl.tetrate.io/onboarding-repository-server:1.12.15002
containers.dl.tetrate.io/otelcol:0.131.1
containers.dl.tetrate.io/otelcol:0.157.0
containers.dl.tetrate.io/package-repository-server:1.12.15002
containers.dl.tetrate.io/pilot:1.24.6-433a181a14-distroless
containers.dl.tetrate.io/pkg-host-management-agent:v0.0.0-a8651a8
containers.dl.tetrate.io/pkg-service-discovery-agent:v0.0.0-f24abe2
containers.dl.tetrate.io/pkg-spm-agent:9d146f8bcbb54715eccdffa33ed0d53f812d788c
containers.dl.tetrate.io/postgres-exporter:v0.18.1-tetrate-v12
containers.dl.tetrate.io/postgres:14.23-alpine3.22-tetrate-v4
containers.dl.tetrate.io/proxyv2:1.24.6-433a181a14-distroless
containers.dl.tetrate.io/proxyv2:1.24.6-433a181a14-pv-distroless
containers.dl.tetrate.io/ratelimit:5bdf61cf
containers.dl.tetrate.io/redis:8.2.3
containers.dl.tetrate.io/satellite:v7bb08020d4dfbed5ec0e88c6c94fac3067fb8638
containers.dl.tetrate.io/service-discovery-plane-server:v0.0.0-f24abe2
containers.dl.tetrate.io/spm-agent:9d146f8bcbb54715eccdffa33ed0d53f812d788c
containers.dl.tetrate.io/spm-central:994894cdd2370ef6716e96fa8114215a8ed94403
containers.dl.tetrate.io/spm-user:994894cdd2370ef6716e96fa8114215a8ed94403
containers.dl.tetrate.io/swck:3e97d8a-go1.26.5-v0
containers.dl.tetrate.io/tcc-web-ui:1.12.15002
containers.dl.tetrate.io/tctl:1.12.15002
containers.dl.tetrate.io/teamsync-job:1.12.15002
containers.dl.tetrate.io/tetrate-openldap:2.6.13-alpine3.23-tetrate-v2
containers.dl.tetrate.io/tsboperator-jobs:1.12.15002
containers.dl.tetrate.io/tsboperator-server:1.12.15002
containers.dl.tetrate.io/wasmfetcher-server:1.12.15002
containers.dl.tetrate.io/xcp-guard:v1.12.90007
containers.dl.tetrate.io/xcp-operator:v1.12.90007
containers.dl.tetrate.io/xcpd:v1.12.90007
containers.dl.tetrate.io/ztunnel:1.24.6-433a181a14-distroless

Release 1.12.15001

Released 31 August 2026

• Fixed the following CVEs: CVE-2026-33818, CVE-2026-39821, CVE-2026-46600, CVE-2026-56853, CVE-2026-56854, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860, CVE-2026-56862, CVE-2026-56864, CVE-2026-56865, XRAY-1057284, XRAY-1057286.