Kubernetes v1.30.10 is live!

[Sascha Grunert]

Kubernetes Community,

Kubernetes v1.30.10 has been built and pushed using Golang version 1.22.12.

The release notes have been updated in CHANGELOG-1.30.md, with a pointer to them on GitHub:

---

v1.30.10

Downloads for v1.30.10

Source Code

filename	sha512 hash
kubernetes.tar.gz	61092f4103592c205655e54f3acac2c10b85e8d75b4fc5b139d73995ffaedbd079f04d8746ecd335b1714f663e533b7c7535866e940e75f7919e3cd1c76740e8
kubernetes-src.tar.gz	6345483f0d81394d4cfa28760f07477a0f1414d2a4e6f44470d129bfcb9beb2c5e2ced5ac11ef00cb893bf2daef030505039d586baa4e9f69b63c2427514d6b8

Client Binaries

filename	sha512 hash
kubernetes-client-darwin-amd64.tar.gz	0cfd4f7d599a0fc92b9a02308d56e743ec91873b2b77137174463b47f00df3b2d7977959b3592d06936293f716c6eee89dad665cade56ff7f8d604756d67848e
kubernetes-client-darwin-arm64.tar.gz	a1389a9323eb0d96a38c6fe9c801c3e88d81d4703bb21344dce04a7c318721d7fe51d117c9b19201a1c608e53bc0c9a4b85e0ebb10a1e4b585b2b9198975728c
kubernetes-client-linux-386.tar.gz	b7975691524583d531e9c01b17fceb4c6c6ce23ee1498eb833db8edd5bf69419a942f1a9faa89f69280a9406c229a65492cfbe868878f0515a2f684ebd6a6019
kubernetes-client-linux-amd64.tar.gz	1d575cf29fc6514565ef76329f2b7008a3d7c7e7dfa853a70e9bd65784b653a3338260325c2a7bc8e80427cb3829bf6407aba6a39fb4bf73c30da775d3aad2c8
kubernetes-client-linux-arm.tar.gz	90cc2797c1528779e89655343ed1eec2541c425e27279022049419f45401f30c6a7b91de7a45ca80cb99ceceeb5b0fc441e5c412819978f897c6098f08878fe0
kubernetes-client-linux-arm64.tar.gz	3111d0842d92a1b26d6115d9346b780d3552732d46ee233f7ffb34122b50addb0717032cf85a6ff80317d0ad88e3b4fd7f16628cad2d7a53eadf971fa8da0244
kubernetes-client-linux-ppc64le.tar.gz	02bc99c03a183174c23f8e567d44b2182277056f4ff3d744d0fbd9f3526630d87a177d93b58fddb1dd78a993b7f3a71c76cca3b6fcf899581a860378a8e81ef5
kubernetes-client-linux-s390x.tar.gz	22dabd9ad4a659b16f1eedb603e7b93289f6201a432cb2fdb9d750589527441e29915e635af3dee4fdfae266a9de670148e9bcad4134c9159c378d8993dd57f5
kubernetes-client-windows-386.tar.gz	baf3714a464930f713404dcdfb2b5eea8b97f1561e2eaf7dcd41beb3eead42b852c8c3dd52c306b77d61402c54bf745bff592698a6ea5cfa74bfff3dd0b8b879
kubernetes-client-windows-amd64.tar.gz	b0f69805d6186e65e6b1ac521a4e5066dd8fa8f91b5ddf3ce85ac4a0470a511d2d7c69aeb62b190b7d43522b4e665a1e5383d154d0f2267b8fcea4c610f4c50c
kubernetes-client-windows-arm64.tar.gz	a88a69782b0e0bc9ae28611c6dfb385485396d77dad79606bf7550fb52eb41d1be9946e9d58fd820aba95db348f79c4f165b4e6c4da884d139dfd5bee423b64c

Server Binaries

filename	sha512 hash
kubernetes-server-linux-amd64.tar.gz	9610ac7c0ff2c4c9bf9d54aaa08738e5c0fdc1155867966a77dd2ae26a12d8764005beccc162f636d20f5934d809abd95e4ad634bad9ee6aadda8bef6d937f1b
kubernetes-server-linux-arm64.tar.gz	fa24a3dfd12ceaba3b955f895e51751733241b5e05f54ee5e37037d9b20dafdeaddb62a8ee9ee2f7e5ad6656074f56ef17e92efb7bae130897b3ee25e3b435c5
kubernetes-server-linux-ppc64le.tar.gz	b9664e21e3789af9f3456f4158a2494d1620b87db74d611789bd513f5260061adf99e20d6bd9bbdee85ed24ae378be4e486caf23334c93bd7fd275833a314438
kubernetes-server-linux-s390x.tar.gz	6dd1dd75c7bc056a2d7ea7d8a990d2fe867b26662bf88ac6f3cf7c9e89fc8a2aaeb4984a6e00f7cda5296044b7c7e99ac1bb94d10de5da64d2a2d311ce8a16b7

Node Binaries

filename	sha512 hash
kubernetes-node-linux-amd64.tar.gz	fa7915afbec6479f444593e6fa37af9ccb9deee0bdd35a3b81a03accd126f573a034af9dde1c7c895b8050b8e4927f3c5c3c5408d2d2472a47752266052fcfeb
kubernetes-node-linux-arm64.tar.gz	9b8c80a41e9f548fbc428a98793c3f2a5e95b252dc6d7cd2db44c6530fbdc2c6ce78b88627eb69016756a57f66936146c63dfc293b9bc8fa36cd7cf772d12ef4
kubernetes-node-linux-ppc64le.tar.gz	1dfd7a986ab6608244c170a216b1a1e686f0f67e313c1ad503340ae2765c92fee37a77a5a6fe2747ffdf447df7edd2079a4af81c968a1182f10e0108a793c5f6
kubernetes-node-linux-s390x.tar.gz	5d953c0904a0835c86133a9810dc5820f99df9304e2d5cb68fb85aed24617fe0f8a03791d103f5ae91e5c21054a60693b0816fdc1d50dd2a57b79a663a51ceba
kubernetes-node-windows-amd64.tar.gz	223b53241f663c583dd12151162914b611efcd5aca680403435c0640acf932ad302fbdc84403950dfcb7a76336c1f60883d7df7ceafda4413e48c3a3b7f9a328

Container Images

All container images are available as manifest lists and support the described architectures. It is also possible to pull a specific architecture directly by adding the "-$ARCH" suffix to the container image name.

name	architectures
registry.k8s.io/conformance:v1.30.10	amd64, arm64, ppc64le, s390x
registry.k8s.io/kube-apiserver:v1.30.10	amd64, arm64, ppc64le, s390x
registry.k8s.io/kube-controller-manager:v1.30.10	amd64, arm64, ppc64le, s390x
registry.k8s.io/kube-proxy:v1.30.10	amd64, arm64, ppc64le, s390x
registry.k8s.io/kube-scheduler:v1.30.10	amd64, arm64, ppc64le, s390x
registry.k8s.io/kubectl:v1.30.10	amd64, arm64, ppc64le, s390x

Changelog since v1.30.9

Important Security Information

This release contains changes that address the following vulnerabilities:

CVE-2025-0426: Node Denial of Service via Kubelet Checkpoint API

A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk.

Affected Versions:

• kubelet kubelet v1.30.0 to v1.30.9
• kubelet v1.31.0 to v1.31.5
• kubelet v1.32.0 to v1.32.1

Fixed Versions:

• kubelet 1.29.14
• kubelet 1.30.10
• kubelet 1.31.6
• kubelet 1.32.2

This vulnerability was reported and fixed by Tim Allclair @tallclair from Google.

CVSS Rating: Medium (6.2) CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Changes by Kind

Feature

• Bump cAdvisor to v0.49.2 (#129133, @cwangVT) [SIG Node]
• Kubernetes is now built with go 1.22.11 (#129964, @cpanato) [SIG Release and Testing]
• Kubernetes is now built with go 1.22.12 (#130076, @cpanato) [SIG Release and Testing]

Bug or Regression

• Kubeadm: fixed the bug where the v1beta4 Timeouts.EtcdAPICall field was not respected in etcd client operations, and the default timeout of 2 minutes was always used. (#129860, @neolit123) [SIG Cluster Lifecycle]

Other (Cleanup or Flake)

• NONE (#130012, @tallclair) [SIG Node]

Dependencies

Added

Nothing has changed.

Changed

• github.com/google/cadvisor: v0.49.0 → v0.49.2

Removed

Nothing has changed.

---

Contributors, the CHANGELOG-1.30.md has been bootstrapped with v1.30.10 release notes and you may edit now as needed.

Published by your Kubernetes Release Managers.