RATATOSKRATATOSK
Sign in

SPIRE

v1.15.4Security
Oct 15, 2026

OTHER 5

A feature and maintenance release adds configurable TLS listener policies and fixes defects in PROXY protocol handling and the agent's SDS v3 API. It also updates the Go toolchain and dependencies without introducing operator-breaking changes.

All 5 other recorded changesfixes 2 · value changes 2 · additions 1

fixes (2)

  • Fixed an issue where the server, when PROXY protocol support is enabled, accepted PROXY protocol headers carrying non-TCP source addresses (e.g. UDP or Unix socket addresses). Headers from trusted proxies may now only replace the connection's source address with a TCP address. Thank you Eviatar Gerzi for reporting this issue.
  • Fixed a crash in the agent's SDS v3 API when a client sent a DiscoveryRequest whose node user agent build version had no Version field set. Thank you Eviatar Gerzi for reporting this issue.

value changes (2)

  • Updated the Go toolchain to 1.26.9.
  • Updated golang.org/x/crypto to v0.58.0, golang.org/x/net to v0.61.0, google.golang.org/grpc to v1.84.0, and other dependencies reported by govulncheck.

additions (1)

  • Support for configuring TLS policies to be applied to TLS listeners.
Add SPIRE to your stack

A weekly email arrives when a release needs action. Weeks with nothing to act on, like this one, send no email.

Add to stack →
Official release note ↗All SPIRE releases →