Release Notes

Added

• Added support for Gateway API HTTPRoute and ListenerSet resources for the proxy service.

  • Gateway API support can be used as an alternative to Ingress and an Ingress controller.

  • Gateway resources are not created by this chart and must be managed separately.

Updates

• Updated the Redis dependency to use 8.6.4-alpine image.

• Updated the Realtime container and GPU Transcription Inference Container version to 15.14.0. For more information, see the 15.14.0 container release notes.

• Updated the sessiongroups CustomResourceDefinitions and controller.

  • Refer to the sm-realtime Helm chart RELEASE_NOTES.md for upgrade details.

Deprecated

• Deprecated the proxy.ingress.url Helm value in favour of proxy.ingress.hostname for configuring the Ingress hostname.

  • Existing deployments remain compatible: if proxy.ingress.hostname is not set, the chart will continue to use proxy.ingress.url as a fallback.

Security fixes

Vulnerability Management

• Software Bill of Materials (SBOM) is available for download from the corresponding release page in our Support Portal.

• OpenVEX statements are also available for each image, download from the corresponding release page in our Support Portal. These encode our assessment of CVEs that don't affect this release.

Non-Applicable CVEs

The following vulnerabilities were reviewed and determined to have no security impact on this release due to specific configurations or the use of closed, trusted environments.

The control-plane components and bundled Redis image were also scanned (Medium severity and above) and no High or Critical vulnerabilities were identified.

Updates

• Updates Redis dependency to use 8.6.3-alpine image.

  • Redis is deployed using community image from a dependent helm chart (“sm-redis”) instead of Bitnami image and helm chart.

• Updates Realtime container version to 15.7.0. For more information, see the 15.7.0 container release notes.

• Updates sessiongroups CustomResourceDefinitions and controller. Refer to the sm-realtime Helm chart RELEASE_NOTES.md for upgrade details.

Security fixes

Vulnerability Management

• Software Bill of Materials (SBOM) is available for download from the corresponding release page in our Support Portal.

• libgstreamer (CVE-2025-3887): This component has been manually patched to address CVE-2025-3887. Note: Security scanners may still flag this component as vulnerable because the base version string remains unchanged

Non-Applicable CVEs

The following vulnerabilities were reviewed and determined to have no security impact on this release due to specific configurations or the use of closed, trusted environments:

Updates

• Enables repopulation to automatically restore cluster state in the event of Redis data loss.

• Supports language and operating-point based model cost generation for the custom inference server recipe. Refer to the sm-realtime Helm chart README.md for configuration details.

• Updates Realtime container version to 15.0.0. For more information, see the 15.0.0 container release notes.

Security fixes

Vulnerability Management

• Software Bill of Materials (SBOM) is available for download from the corresponding release page in our Support Portal.

• libgstreamer (CVE-2025-3887): This component has been manually patched to address CVE-2025-3887. Note: Security scanners may still flag this component as vulnerable because the base version string remains unchanged

• Redis versioning: This release by default uses Redis version 8.2.1 with publicly disclosed security vulnerabilities (CVEs) that have been assessed to not impact this product. Users who require additional security controls or remediation for these CVEs can choose to deploy a different Redis version which remediates issues of concern.

Non-Applicable CVEs

The following vulnerabilities (including those reported for the third-party package Redis version) were reviewed and determined to have no security impact on this release due to specific configurations or the use of closed, trusted environments: