Skip to main content

MTE Relay v5.0.5: Azure Marketplace and security fixes

· 2 min read
Trevor Blackman
Trevor Blackman
Engineering Director

MTE Relay 5.0.5 is a patch release of MTE Relay Server and MTE API Relay. It covers everything since 5.0.1: both servers on the Azure Marketplace, a preset first configuration for the control plane, and security fixes. v5 clients and configuration work unchanged.

Azure Marketplace​

  • Both servers install from the Azure Marketplace as an AKS cluster extension. A portal wizard creates a cluster or uses yours, asks for your backend's address, and installs the control plane and relays with that first route already set.
  • The offer bills through your Azure subscription for every running relay pod and the control plane pod.
  • See MTE Relay Server on Azure and MTE API Relay on Azure.

Preset control plane configuration​

  • CONTROL_PLANE_INITIAL_CONFIG hands the control plane its first configuration, so a deployment template can skip the setup wizard. On an empty data directory the control plane stores it as version 1 and generates a client_id_secret for each host without one. Once a configuration exists, it ignores the variable. See Preset configuration instead of the wizard.

Security​

  • MPTCP is off on every listener. Go opens Linux listen sockets as MPTCP when the kernel supports it, and CVE-2026-98432 is a kernel use after free reachable through MPTCP listeners.
  • The runtime images moved to Debian 13 distroless, which drops the Debian 12 libssl3 vulnerability CVE-2026-84782.
  • Built with Go 1.27.3 and golang.org/x/net 0.60.0, which fix CVE-2026-78667, CVE-2026-78669, CVE-2026-97031, and crypto/x509 issues.

Upgrading​

Change the image tag to 5.0.5 on the control plane and every relay, control plane first. Relays keep serving their last configuration while it restarts.