2.26.3 (2026-10-22)
Bug Fixes
Security / CVE Fixes
Updates gcr.io/distroless/static:nonroot and alpine:3 container base image digests to remove distrusted emSign ECC Root CA - G3 and AAA Certificate Services root certificates (ca-certificates), and rebuilds the proxy binaries with Go 1.27.3 / 1.26.10:
| Advisory | CVE | Description | Affected Component | Fixed Version |
|---|---|---|---|---|
| GO-2026-6809 | CVE-2026-111943 | Distrust compromised intermediate certificates in crypto/x509 and container OS root CA bundle (ca-certificates)
| crypto/x509 (stdlib), gcr.io/distroless/static:nonroot, alpine:3
| go1.26.10 / go1.27.3, distroless@d620678, alpine:3.24.3@71e9b7b
|
| filename | sha256 hash |
|---|---|
| cloud-sql-proxy.darwin.amd64 | 93692e362bb466a308882361219b625e77f6c3ba7ab2dea7d6ce4fc678e4380e |
| cloud-sql-proxy.darwin.arm64 | 356101e7f1cd298c04151bcb35c8e5980344d86787a1f242255cfc4828f23f91 |
| cloud-sql-proxy.linux.386 | 4b99a26c62dba65ddb653c00af51d089d1cbb26c32f77945278e7ba81feddbb6 |
| cloud-sql-proxy.linux.amd64 | 5533a05cdbf12f8a0cb46db34c775847a496e181d47f863284d3d02b0fad49fa |
| cloud-sql-proxy.linux.arm64 | 75273ebeba06cf82ed72726a662b89e6a886b72e7b507a4fcaade4703c4a0d2d |
| cloud-sql-proxy.x64.exe | 8c9cf8656f899caa09d76e9f3fdab853a313554842cd6a4f987d5086d63fd092 |
| cloud-sql-proxy.x86.exe | aeb0e535cca1177ea47b6cfe75e7758f68dfdebc99d8b4524be682cb4084dabe |