October 27th, 2025

The following images are now rolling out for managed Cloud Service Mesh

Services

## Announcement The following images are now rolling out for managed Cloud Service Mesh: * 1.21.6-asm.4 is rolling out to the rapid release channel. * 1.20.8-asm.56 is rolling out to the regular release channel. * 1.19.10-asm.52 is rolling out to the stable release channel. CNI & MDPC versions 1.20.8-asm.56 are rolling out to all release channels. ## Fix These patches contain fixes for the following CVEs: **1.21.6-asm.4** | Name | Envoy Proxy | Envoy Proxy Distroless | Control plane | | ------------------------------------------------------------------------------ | ----------- | ---------------------- | ------------- | | [CVE-2025-4802](https://security-tracker.debian.org/tracker/CVE-2025-4802) | \- | Yes | \- | | [CVE-2025-8058](https://security-tracker.debian.org/tracker/CVE-2025-8058) | \- | Yes | \- | | [CVE-2023-4039](http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-4039) | Yes | \- | \- | | [CVE-2024-10041](http://people.ubuntu.com/~ubuntu-security/cve/CVE-2024-10041) | Yes | \- | \- | | [CVE-2025-32988](http://people.ubuntu.com/~ubuntu-security/cve/CVE-2025-32988) | Yes | \- | \- | | [CVE-2025-6395](http://people.ubuntu.com/~ubuntu-security/cve/CVE-2025-6395) | Yes | \- | \- | | [CVE-2025-48964](http://people.ubuntu.com/~ubuntu-security/cve/CVE-2025-48964) | Yes | \- | \- | | [CVE-2025-32989](http://people.ubuntu.com/~ubuntu-security/cve/CVE-2025-32989) | Yes | \- | \- | | [CVE-2025-47268](http://people.ubuntu.com/~ubuntu-security/cve/CVE-2025-47268) | Yes | \- | \- | | [CVE-2025-40909](http://people.ubuntu.com/~ubuntu-security/cve/CVE-2025-40909) | Yes | \- | \- | | [CVE-2025-32990](http://people.ubuntu.com/~ubuntu-security/cve/CVE-2025-32990) | Yes | \- | \- | **1.20.8-asm.55** | Name | Envoy Proxy | Envoy Proxy Distroless | Control plane | | ------------------------------------------------------------------------------ | ----------- | ---------------------- | ------------- | | [CVE-2023-4813](https://security-tracker.debian.org/tracker/CVE-2023-4813) | \- | Yes | \- | | [CVE-2025-8058](https://security-tracker.debian.org/tracker/CVE-2025-8058) | \- | Yes | \- | | [CVE-2023-4806](https://security-tracker.debian.org/tracker/CVE-2023-4806) | \- | Yes | \- | | [CVE-2025-32989](http://people.ubuntu.com/~ubuntu-security/cve/CVE-2025-32989) | Yes | \- | \- | | [CVE-2025-32988](http://people.ubuntu.com/~ubuntu-security/cve/CVE-2025-32988) | Yes | \- | \- | | [CVE-2025-48964](http://people.ubuntu.com/~ubuntu-security/cve/CVE-2025-48964) | Yes | \- | \- | | [CVE-2024-10041](http://people.ubuntu.com/~ubuntu-security/cve/CVE-2024-10041) | Yes | \- | \- | | [CVE-2025-40909](http://people.ubuntu.com/~ubuntu-security/cve/CVE-2025-40909) | Yes | \- | \- | | [CVE-2025-32990](http://people.ubuntu.com/~ubuntu-security/cve/CVE-2025-32990) | Yes | \- | \- | | [CVE-2025-47268](http://people.ubuntu.com/~ubuntu-security/cve/CVE-2025-47268) | Yes | \- | \- | | [CVE-2025-6395](http://people.ubuntu.com/~ubuntu-security/cve/CVE-2025-6395) | Yes | \- | \- | | [CVE-2023-4039](http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-4039) | Yes | \- | \- | **1.19.10-asm.52** | Name | Envoy Proxy | Envoy Proxy Distroless | Control plane | | ------------------------------------------------------------------------------ | ----------- | ---------------------- | ------------- | | [CVE-2023-4813](https://security-tracker.debian.org/tracker/CVE-2023-4813) | \- | Yes | \- | | [CVE-2025-8058](https://security-tracker.debian.org/tracker/CVE-2025-8058) | \- | Yes | \- | | [CVE-2023-4806](https://security-tracker.debian.org/tracker/CVE-2023-4806) | \- | Yes | \- | | [CVE-2025-32989](http://people.ubuntu.com/~ubuntu-security/cve/CVE-2025-32989) | Yes | \- | \- | | [CVE-2025-48964](http://people.ubuntu.com/~ubuntu-security/cve/CVE-2025-48964) | Yes | \- | \- | | [CVE-2024-10041](http://people.ubuntu.com/~ubuntu-security/cve/CVE-2024-10041) | Yes | \- | \- | | [CVE-2025-32988](http://people.ubuntu.com/~ubuntu-security/cve/CVE-2025-32988) | Yes | \- | \- | | [CVE-2025-40909](http://people.ubuntu.com/~ubuntu-security/cve/CVE-2025-40909) | Yes | \- | \- | | [CVE-2025-32990](http://people.ubuntu.com/~ubuntu-security/cve/CVE-2025-32990) | Yes | \- | \- | | [CVE-2025-47268](http://people.ubuntu.com/~ubuntu-security/cve/CVE-2025-47268) | Yes | \- | \- | | [CVE-2025-6395](http://people.ubuntu.com/~ubuntu-security/cve/CVE-2025-6395) | Yes | \- | \- | | [CVE-2023-4039](http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-4039) | Yes | \- | \- | **CNI & MDPC** | Name | CNI | MDPC | | ------------------------------------------------------------ | --- | ---- | | [CVE-2024-56406](https://ubuntu.com/security/CVE-2024-56406) | Yes | Yes | | [CVE-2025-1372](https://ubuntu.com/security/CVE-2025-1372) | Yes | Yes | | [CVE-2025-46836](https://ubuntu.com/security/CVE-2025-46836) | Yes | Yes | | [CVE-2025-30258](https://ubuntu.com/security/CVE-2025-30258) | Yes | Yes | | [CVE-2023-4039](https://ubuntu.com/security/CVE-2023-4039) | Yes | Yes | | [CVE-2025-4802](https://ubuntu.com/security/CVE-2025-4802) | Yes | Yes | | [CVE-2025-1377](https://ubuntu.com/security/CVE-2025-1377) | Yes | Yes | | [CVE-2025-4598](https://ubuntu.com/security/CVE-2025-4598) | Yes | Yes | | [CVE-2025-3576](https://ubuntu.com/security/CVE-2025-3576) | Yes | Yes |