Skip to main content

Changelog for Ory Oathkeeper OEL

v25.3.5​

Change of base image​

The base image for OEL images is now set to "gcr.io/distroless/static-debian12:nonroot". Previously, it was "gcr.io/distroless/static-debian12:debug-nonroot", which included BusyBox (a minimal shell and basic debugging utilities). Debug images are still available using the "-debug" tag suffix.

25.3.4

No changes requiring changelog in the 25.3.4.

25.3.3

No changes requiring changelog in the 25.3.3.

2025-05-08​

Initial Ory Oathkeeper OEL release​

Changes:

  • fix security vulnerability classified as critical CVE-2025-22871
  • fix security vulnerability classified as high CVE-2025-30204 (GHSA-mh63-6h87-95cp)

No specific upgrade steps are required for this release. The Ory Kratos OEL image is now available in the Ory Enterprise Docker Registry.