Kubernetes v1.30.9 is live!

[Marko Mudrinić]

Kubernetes Community,

Kubernetes v1.30.9 has been built and pushed using Golang version 1.22.10.

The release notes have been updated in CHANGELOG-1.30.md, with a pointer to them on GitHub:

---

v1.30.9

Downloads for v1.30.9

Source Code

filename	sha512 hash
kubernetes.tar.gz	ee856a4e03610666fef2e8b88a15f205186f9954114807f751929de8f208f351ae70ca16696a5268a4112be711df80f26580f419b87fb39db91e090543dd7e7f
kubernetes-src.tar.gz	272f476891d94b226c536e4decc367028584c9cf1b465acfbd5df5f95945a0bd968ef8ab3d83720868ad1dfed35317512ffeace5b2897999b71936722c05dc97

Client Binaries

filename	sha512 hash
kubernetes-client-darwin-amd64.tar.gz	df1981295a97260f9c9127922ddd2782c3f3c4f4a1cf357acf98da8cd2623a305759f016e316251f23da7089b91625cc8b475c11fa9be9d348e72baa29a62bf2
kubernetes-client-darwin-arm64.tar.gz	63e49b7c828ee2eddf820ea5367e508ca0311339b00fc33f5c214b9b9e680af893f29bf626cacdaf4deabcb6e7557558af96c78f153e2fc0f68d878ced330ef3
kubernetes-client-linux-386.tar.gz	59bda28c00437e989623f9be332f5a494df13db8023a986ef64a68b3878bc9ca09cfe7a1799cba058a92310deaebd621203495dc64ec213961732182502a065b
kubernetes-client-linux-amd64.tar.gz	1f554284c530d56893afbcca214ec0539a725e572a43c9370a4011d7483291a7f7b2ee1aa7d4db3e0d48ea2b2498540a828c62106f42bf9d0dd1bd3dc3898b8d
kubernetes-client-linux-arm.tar.gz	c82ceec2b35b0ab0ec45933d1bf606e163d2a5ab5f5cb0ebe429a40880002c79d6b563a4d7ab949e91729f369d8fef21da464a2659a454b01573a2d92a1d8a86
kubernetes-client-linux-arm64.tar.gz	b5443648c101b59b50abcbf3a9a06d0b798fc02319f0566aaea1bc73924a8e824e5cafbfb59b8709d79ba71f30f6e246512bffad0fe39b7233f008f99dd35bc0
kubernetes-client-linux-ppc64le.tar.gz	9165682d04e537d02fb00bd916003ad4e4d8b919b7bdf6634c2e346666e502234183b1425bc63f1733ae36df2e384b5ab98addd3b94fc694d79a6c3b4b01b697
kubernetes-client-linux-s390x.tar.gz	74996716c2e87f2c422fd29c983e5620ffcec82d0b0520c3c90174e26731ea960c0093fa1288cc693b74b19e5606478dc8a3f42bfa5de2abc876f529ba8a9fb7
kubernetes-client-windows-386.tar.gz	5731c53f53dec995973bc89956a6ffa1c051d4f9f87bd06006952d752e4f304b95fb973c74e167fdaf720057b7d335ddaf3e32d569ece69ec0c7dab8fc2d884c
kubernetes-client-windows-amd64.tar.gz	1228687afa8390f13c5a1bf22edfdf317a2019f3a460415794a236f069c2af7f7c999c0f8780f6270d9ea777a05284fe17cb862b6c43ca0e810294277e650ffa
kubernetes-client-windows-arm64.tar.gz	d6935d8e06890e2494d9cbf5647792ee8ee6126b378529b0c5c3e5c83c9d15ff3115948c688a4b0a01466499f4c70f608fa972e7a473173b90f55a049c583f3b

Server Binaries

filename	sha512 hash
kubernetes-server-linux-amd64.tar.gz	a80aa58418d6f25e4fa82f54762033a6634b310446226dda4852924cf19766268e97ead6f1a93ad72d89d3a519073658b12be0709b3277d4f0e470e26f5e606d
kubernetes-server-linux-arm64.tar.gz	2a2c74ce44349bb017684d4259cd317b4b0bc49f5f3f66c7b16d4fc7b6a96549e3448517b2e980e4610bf35d742bd633e73264e52d16076c4162ae2bd4124a6f
kubernetes-server-linux-ppc64le.tar.gz	24cf04baef9404ab520104118e0025280bc25643e35a1540644dd2406eb20c584807ccc9d7588311648d389479acb728ba4bd278de22af334c398cec41a6858a
kubernetes-server-linux-s390x.tar.gz	016201b29ada6a7456d47ad95b48d404ca74d2577d3a561f8d23a7cbed2afcc9e26465afe6bb6ca46ee848c8fc476bfe3f7f15f08ebb133472c8f399aec4b6c4

Node Binaries

filename	sha512 hash
kubernetes-node-linux-amd64.tar.gz	a38f00c2fbfa6b1da700557583d13d0f5333d11dd7ef6f39b5a0d1ead38fad5a0f56f96586fafd71927ce1d2005fe833f67164aed8e1aa4127593758601e07ef
kubernetes-node-linux-arm64.tar.gz	8030ecfd7045c69ae7d638fe63ff4f907c9477b00dfbec3027fe8c42da2ffa4ef28f2668a83c430acc1804f4f6df7cc5987e3ec9b41b40f09c4c1f712a7ee0b2
kubernetes-node-linux-ppc64le.tar.gz	13dc241f519f2726635322005f91acb400e0212465c0b79d31138c6ccbf309e58312943b6a43fabc811efbfc1b986dcb1a9eecd4d9862f0ca9517a8e55004944
kubernetes-node-linux-s390x.tar.gz	9e434e2e26c4e17054c380aae91770c2f4fafdb82c39bd1025fed56579d3b0ad56a739750ae80ea19277af8d2c5313b8f99645ce9eedd27bf8a26450317c8fb5
kubernetes-node-windows-amd64.tar.gz	ec2ee27f025b5fb961fc791bce82403d26ee5846667117a4d1f42c80f0b3c078f0d97c707a2729e8dc9905101e41f6481e068c962b7b7d3bc9df14daa464cdda

Container Images

All container images are available as manifest lists and support the described architectures. It is also possible to pull a specific architecture directly by adding the "-$ARCH" suffix to the container image name.

name	architectures
registry.k8s.io/conformance:v1.30.9	amd64, arm64, ppc64le, s390x
registry.k8s.io/kube-apiserver:v1.30.9	amd64, arm64, ppc64le, s390x
registry.k8s.io/kube-controller-manager:v1.30.9	amd64, arm64, ppc64le, s390x
registry.k8s.io/kube-proxy:v1.30.9	amd64, arm64, ppc64le, s390x
registry.k8s.io/kube-scheduler:v1.30.9	amd64, arm64, ppc64le, s390x
registry.k8s.io/kubectl:v1.30.9	amd64, arm64, ppc64le, s390x

Changelog since v1.30.8

Important Security Information

This release contains changes that address the following vulnerabilities:

CVE-2024-9042: Command Injection affecting Windows nodes via nodes/*/logs/query API

A security vulnerability has been discovered in Kubernetes windows nodes that could allow a user with the ability to query a node's '/logs' endpoint to execute arbitrary commands on the host.

Affected Versions:

• kubelet <= v1.29.12
• kubelet <= v1.30.8
• kubelet <= v1.31.4
• kubelet = v1.32.0

Fixed Versions:

• kubelet 1.29.13
• kubelet 1.30.9
• kubelet 1.31.5
• kubelet 1.32.1

This vulnerability was reported by Peled, Tomer and mitigated by Aravindh Puthiyaprambil.

CVSS Rating: Medium (5.9) CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N

Changes by Kind

API Change

• NONE (#129602, @aravindhp) [SIG API Machinery and Node]

Feature

• Kubernetes is now built with go 1.22.10 (#129425, @cpanato) [SIG Release and Testing]

Bug or Regression

• Fix kubelet on Windows fails if a pod has SecurityContext with RunAsUser (#129507, @carlory) [SIG Storage, Testing and Windows]
• Fixed a storage bug around multipath. iSCSI and Fibre Channel devices attached to nodes via multipath now resolve correctly if partitioned. (#129182, @RomanBednar) [SIG Storage]
• Fixes a panic in kube-controller-manager handling StatefulSet objects when revisionHistoryLimit is negative (#129324, @ardaguclu) [SIG Apps]
• Kubelet: Fix the volume manager didn't check the device mount state in the actual state of the world before marking the volume as detached. It may cause a pod to be stuck in the Terminating state due to the above issue when it was deleted. (#129063, @carlory) [SIG Node]

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

---

Contributors, the CHANGELOG-1.30.md has been bootstrapped with v1.30.9 release notes and you may edit now as needed.

Published by your Kubernetes Release Managers.