Kubernetes v1.27.16 is live!

[Carlos Tadeu Panato Jr]

Kubernetes Community,

Kubernetes v1.27.16 has been built and pushed using Golang version 1.22.5.

The release notes have been updated in CHANGELOG-1.27.md, with a pointer to them on GitHub:

---

v1.27.16

Downloads for v1.27.16

Source Code

filename	sha512 hash
kubernetes.tar.gz	0939ac0ac9badaedb600b3f0900c51da29236485f03b7bbb073d62cafc6e672de9218c09ed0089566241dfe273188ef2e11206a93994ff824d213d83f43c63fc
kubernetes-src.tar.gz	fba641f745b5eef6f17e16501025959e570ae88912d79e2e08b4c79d18475430b879f98947d516871407feb297d5dac9b2fbc4ca565d3770c600d9550f3cffac

Client Binaries

filename	sha512 hash
kubernetes-client-darwin-amd64.tar.gz	8c4a574dfa1140600c1b74b071aac5f893a609917652793e84cc344aa5b1fc8b9578109953203e6f968183f5b798144efa33cdc36c4a5df58489c8553f508e2f
kubernetes-client-darwin-arm64.tar.gz	6d175b2a884d09ce5a4b645c71200a92df4b2c8ef1a3890f36a672912d1c76e4ed9b159d538fb37892665d44d2314c537bd6ab98b2571330a3d47b516ddf7243
kubernetes-client-linux-386.tar.gz	8c00094792edccae78abeb697e206a2a6e6d3d335a9d91ef6bf9dfc3b122b36ef9a781420eb08f835eb78b7c3d3768a5eb1426a041375ff4570a34313126c87b
kubernetes-client-linux-amd64.tar.gz	19a757de6428ea418e55d8520b3cfaf4ce8a432dfb923714cfc1411d5f8d5d3b3b1d77819571ddc2c2c6c5e7a37e54bcfe8a062dd86e45c263a01f1cc2f39290
kubernetes-client-linux-arm.tar.gz	de7ae9f784b5aeb68fd6bc85388c2f026a9e369c8ce4e880a1bfd31682e7988d87c9ead970a05100b708dec277de32c358a362b6615f0e17f004e65cd70f947c
kubernetes-client-linux-arm64.tar.gz	3bb8cceb0e47744c7ddb143f3def61c442ac6b3408f0e2d68768a28604eb76d8d03cced58d8c36d2d58d52e2be9008737015ddeeb823fa2ea492b003533b1b3b
kubernetes-client-linux-ppc64le.tar.gz	779db2eb3b9e740c5357c240b1a2b8ca156a6fc3a27e7dc4ebdf58c18a4b1e919622e4a7be708489343d10675fc2d64a49ec5cb282f7e09541dbf7f7dbb6218f
kubernetes-client-linux-s390x.tar.gz	0edcc792305e7f4fc63aead6018866c2f908c583080c4d4065476384bbb71ead01c08a9b3502e506bca3d201fa4ee2f1b8005c1e207acf798c58a698b4484cda
kubernetes-client-windows-386.tar.gz	2250c887fa139cb7411618c210a56f2e65ccf23c516e6d073779547890569577dce3f3bf16b42396dd00a7fa7ecb08c588bbbafc76750856d56da8a903395802
kubernetes-client-windows-amd64.tar.gz	9291fb5fb48e877d6d03937defb0c52cbe2af2fb762e30475a0849e89f0dc46318ed21a598b3d119f0cfb639ec38b8a7403b82263f7d0d28b634ac3921325c1a
kubernetes-client-windows-arm64.tar.gz	7f1e08bc17590bfece171a64aee3f34c7f519e7d11acb8b0afc1578bf2168f644ff8b9e57b0b0263f2387af238f3558585b1842f4e1880dc50ce2d7987a52345

Server Binaries

filename	sha512 hash
kubernetes-server-linux-amd64.tar.gz	cbcb0591a3a84f98cf2c7abe11c5531e7f79850714abdd957be52049afed14031d0ab9c584c2e54775bceedf8833a500148d5d01335474b33cbb8b30b7ce51b3
kubernetes-server-linux-arm64.tar.gz	a608c476d32cbab392419095cc24dff36ffe8b75f6d3150b3a7e4351f3b38c67e659692941ce79a0428febab2e7dc0a255af33b4ac0f82465456ea2bf66c7240
kubernetes-server-linux-ppc64le.tar.gz	027ec52d46116616ee4a89584add4d696f0384ef705a9b79b690144fa47109f6dcc9d89aa48ebb64f9aaee9def5174eb7943d879b3dbc643ee64eda9ad0c5772
kubernetes-server-linux-s390x.tar.gz	bae6ab6f82c35068f5835866d02c873a1efcb5824022b174d1c19b55cbf10d5b68c5028da0d7dd34aa2308ed6de6c9c78a84d4c31442431d17ce15f0e40ab8e0

Node Binaries

filename	sha512 hash
kubernetes-node-linux-amd64.tar.gz	55532060b056be6c499b8d8cb5884827ae9b25d953d03611880264d96c164f3648c662e5b2b653d081242eb407811ecd873637c38ab0678654339a60774b1016
kubernetes-node-linux-arm64.tar.gz	c8dea73d480b85ad25f34166b89a095f53cdbf41b5ef83570710421ed444ee9f6a6507d0dbea52a58ffb70b50840cbd9304b149434b0abdf4cbca85b04b3ddde
kubernetes-node-linux-ppc64le.tar.gz	c7c4f7afa9aa039f9b3d3cf1c290e5f1765af919d0c87a69cf3416fd2051e3dc5d98a961cce3e15e56dc37094731f335d283dc48e3d371667dd7eaddaf5b2755
kubernetes-node-linux-s390x.tar.gz	7aeeddd496b0b5ef4437029a03eb20ee8f3f95fe9cac082ef8ae2d377cfa049d3c0dee702c9b2a646ed79e3ed1ac4f5481fa1f3ff8944b425fef6bf3f1ecdd2f
kubernetes-node-windows-amd64.tar.gz	8aa07111a478ee24d79001d93e4d1170b409883824077f9b6d95d49ab584595fdc285d05a71c2537668dcf6639c51ca9f35cc39e6d17a9937ca4862c0184e7ad

Container Images

All container images are available as manifest lists and support the described architectures. It is also possible to pull a specific architecture directly by adding the "-$ARCH" suffix to the container image name.

name	architectures
registry.k8s.io/conformance:v1.27.16	amd64, arm64, ppc64le, s390x
registry.k8s.io/kube-apiserver:v1.27.16	amd64, arm64, ppc64le, s390x
registry.k8s.io/kube-controller-manager:v1.27.16	amd64, arm64, ppc64le, s390x
registry.k8s.io/kube-proxy:v1.27.16	amd64, arm64, ppc64le, s390x
registry.k8s.io/kube-scheduler:v1.27.16	amd64, arm64, ppc64le, s390x

Changelog since v1.27.15

Important Security Information

This release contains changes that address the following vulnerabilities:

CVE-2024-5321: Incorrect permissions on Windows containers logs

A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs.

Affected Versions:

• kubelet <= 1.27.15
• kubelet <= 1.28.11
• kubelet <= 1.29.6
• kubelet <= 1.30.2

Fixed Versions:

• kubelet 1.27.16
• kubelet 1.28.12
• kubelet 1.29.7
• kubelet 1.30.3

This vulnerability was reported by Paulo Gomes @pjbgf from SUSE.

CVSS Rating: Medium (6.1) CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Changes by Kind

Feature

• Kubernetes is now built with go 1.22.4 (#125701, @cpanato) [SIG Release and Testing]
• Kubernetes is now built with go 1.22.5 (#125898, @cpanato) [SIG Release and Testing]

Bug or Regression

• NONE (#126126, @cji) [SIG Node and Windows]

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

---

Contributors, the CHANGELOG-1.27.md has been bootstrapped with v1.27.16 release notes and you may edit now as needed.

Published by your Kubernetes Release Managers.

[Carlos Tadeu Panato Jr]

Kubernetes Community,

Please note that this is the last patch release for the v1.27 version stream. This release stream is now EOL.

On Wednesday, July 17, 2024 at 12:33:18 PM UTC+2 Carlos Tadeu Panato Jr wrote:

Kubernetes Community,

Kubernetes v1.27.16 has been built and pushed using Golang version 1.22.5.

The release notes have been updated in CHANGELOG-1.27.md, with a pointer to them on GitHub:

---

v1.27.16Downloads for v1.27.16Source Codefilenamesha512 hashkubernetes.tar.gz0939ac0ac9badaedb600b3f0900c51da29236485f03b7bbb073d62cafc6e672de9218c09ed0089566241dfe273188ef2e11206a93994ff824d213d83f43c63fckubernetes-src.tar.gzfba641f745b5eef6f17e16501025959e570ae88912d79e2e08b4c79d18475430b879f98947d516871407feb297d5dac9b2fbc4ca565d3770c600d9550f3cffacClient Binariesfilenamesha512 hashkubernetes-client-darwin-amd64.tar.gz8c4a574dfa1140600c1b74b071aac5f893a609917652793e84cc344aa5b1fc8b9578109953203e6f968183f5b798144efa33cdc36c4a5df58489c8553f508e2fkubernetes-client-darwin-arm64.tar.gz6d175b2a884d09ce5a4b645c71200a92df4b2c8ef1a3890f36a672912d1c76e4ed9b159d538fb37892665d44d2314c537bd6ab98b2571330a3d47b516ddf7243kubernetes-client-linux-386.tar.gz8c00094792edccae78abeb697e206a2a6e6d3d335a9d91ef6bf9dfc3b122b36ef9a781420eb08f835eb78b7c3d3768a5eb1426a041375ff4570a34313126c87bkubernetes-client-linux-amd64.tar.gz19a757de6428ea418e55d8520b3cfaf4ce8a432dfb923714cfc1411d5f8d5d3b3b1d77819571ddc2c2c6c5e7a37e54bcfe8a062dd86e45c263a01f1cc2f39290kubernetes-client-linux-arm.tar.gzde7ae9f784b5aeb68fd6bc85388c2f026a9e369c8ce4e880a1bfd31682e7988d87c9ead970a05100b708dec277de32c358a362b6615f0e17f004e65cd70f947ckubernetes-client-linux-arm64.tar.gz3bb8cceb0e47744c7ddb143f3def61c442ac6b3408f0e2d68768a28604eb76d8d03cced58d8c36d2d58d52e2be9008737015ddeeb823fa2ea492b003533b1b3bkubernetes-client-linux-ppc64le.tar.gz779db2eb3b9e740c5357c240b1a2b8ca156a6fc3a27e7dc4ebdf58c18a4b1e919622e4a7be708489343d10675fc2d64a49ec5cb282f7e09541dbf7f7dbb6218fkubernetes-client-linux-s390x.tar.gz0edcc792305e7f4fc63aead6018866c2f908c583080c4d4065476384bbb71ead01c08a9b3502e506bca3d201fa4ee2f1b8005c1e207acf798c58a698b4484cdakubernetes-client-windows-386.tar.gz2250c887fa139cb7411618c210a56f2e65ccf23c516e6d073779547890569577dce3f3bf16b42396dd00a7fa7ecb08c588bbbafc76750856d56da8a903395802kubernetes-client-windows-amd64.tar.gz9291fb5fb48e877d6d03937defb0c52cbe2af2fb762e30475a0849e89f0dc46318ed21a598b3d119f0cfb639ec38b8a7403b82263f7d0d28b634ac3921325c1akubernetes-client-windows-arm64.tar.gz7f1e08bc17590bfece171a64aee3f34c7f519e7d11acb8b0afc1578bf2168f644ff8b9e57b0b0263f2387af238f3558585b1842f4e1880dc50ce2d7987a52345Server Binariesfilenamesha512 hashkubernetes-server-linux-amd64.tar.gzcbcb0591a3a84f98cf2c7abe11c5531e7f79850714abdd957be52049afed14031d0ab9c584c2e54775bceedf8833a500148d5d01335474b33cbb8b30b7ce51b3kubernetes-server-linux-arm64.tar.gza608c476d32cbab392419095cc24dff36ffe8b75f6d3150b3a7e4351f3b38c67e659692941ce79a0428febab2e7dc0a255af33b4ac0f82465456ea2bf66c7240kubernetes-server-linux-ppc64le.tar.gz027ec52d46116616ee4a89584add4d696f0384ef705a9b79b690144fa47109f6dcc9d89aa48ebb64f9aaee9def5174eb7943d879b3dbc643ee64eda9ad0c5772kubernetes-server-linux-s390x.tar.gzbae6ab6f82c35068f5835866d02c873a1efcb5824022b174d1c19b55cbf10d5b68c5028da0d7dd34aa2308ed6de6c9c78a84d4c31442431d17ce15f0e40ab8e0Node Binariesfilenamesha512 hashkubernetes-node-linux-amd64.tar.gz55532060b056be6c499b8d8cb5884827ae9b25d953d03611880264d96c164f3648c662e5b2b653d081242eb407811ecd873637c38ab0678654339a60774b1016kubernetes-node-linux-arm64.tar.gzc8dea73d480b85ad25f34166b89a095f53cdbf41b5ef83570710421ed444ee9f6a6507d0dbea52a58ffb70b50840cbd9304b149434b0abdf4cbca85b04b3dddekubernetes-node-linux-ppc64le.tar.gzc7c4f7afa9aa039f9b3d3cf1c290e5f1765af919d0c87a69cf3416fd2051e3dc5d98a961cce3e15e56dc37094731f335d283dc48e3d371667dd7eaddaf5b2755kubernetes-node-linux-s390x.tar.gz7aeeddd496b0b5ef4437029a03eb20ee8f3f95fe9cac082ef8ae2d377cfa049d3c0dee702c9b2a646ed79e3ed1ac4f5481fa1f3ff8944b425fef6bf3f1ecdd2fkubernetes-node-windows-amd64.tar.gz8aa07111a478ee24d79001d93e4d1170b409883824077f9b6d95d49ab584595fdc285d05a71c2537668dcf6639c51ca9f35cc39e6d17a9937ca4862c0184e7adContainer Images

All container images are available as manifest lists and support the described architectures. It is also possible to pull a specific architecture directly by adding the "-$ARCH" suffix to the container image name.

namearchitecturesregistry.k8s.io/conformance:v1.27.16amd64, arm64, ppc64le, s390xregistry.k8s.io/kube-apiserver:v1.27.16amd64, arm64, ppc64le, s390xregistry.k8s.io/kube-controller-manager:v1.27.16amd64, arm64, ppc64le, s390xregistry.k8s.io/kube-proxy:v1.27.16amd64, arm64, ppc64le, s390xregistry.k8s.io/kube-scheduler:v1.27.16amd64, arm64, ppc64le, s390xChangelog since v1.27.15Important Security Information