Kubernetes v1.31.6 is live!

38 views

Skip to first unread message

Sascha Grunert

unread,

Feb 13, 2025, 5:49:56 AM2/13/25

to dev, kubernete...@googlegroups.com

Kubernetes Community,

Kubernetes v1.31.6 has been built and pushed using Golang version 1.22.12.

The release notes have been updated in CHANGELOG-1.31.md, with a pointer to them on GitHub:

v1.31.6

Downloads for v1.31.6

Source Code

filename	sha512 hash
kubernetes.tar.gz	d44dfa0602ff90852df2932696b4e49145657a6fd82c8faef91d09211e934da2c61435f008bbe0d7c68a07a6238027a9a1114fc33974f3a12aacc136da32d239
kubernetes-src.tar.gz	247a0226645c7918593a78491484a6a114e2af1184feeab27ed1db94cf1ecdc3477cf8425080ebcf10db6be21b0afe00fa8958c9add086df3e91e8669896c42c

Client Binaries

filename	sha512 hash
kubernetes-client-darwin-amd64.tar.gz	2acbdd746930f449f9949d3bf0a56faef809f0e05a704f5f23bc558399dead85ba5c501351275ce700d9caeecde8df23f7c152701a4be9415eb92947b049e5ff
kubernetes-client-darwin-arm64.tar.gz	d3d332c8b2a671158a3351851aaed4d7e0511aad5fa8f2ec556f55b7c7dd577beaa6128db8a1fc7c9537721d6ce4b355b0a140ffe05496288562fcede5a6b944
kubernetes-client-linux-386.tar.gz	1196836f490b8bddbb8e889e47c5e7452ed62753baaef755df83ae9cae8b0b22360388fb80de5ef9179f3de8123787fb2d95f0aa4043dc5e16944dde0052a0ff
kubernetes-client-linux-amd64.tar.gz	dd3d8723e7ff54aa4c8a1087d961c8f604b8dce5a6981357daea9b8e1882efbfaf9e226afc35cdc277e2ac06f6ef3bd9867c21158d9ae917d02ade7c245f8610
kubernetes-client-linux-arm.tar.gz	1166c348f6e67353f4a0745ef709cdecba101b31b095046bebb472eefc947eebd1b7d7f09226a647874f3738c6eb443c466db40ee48e3da17b540b3d0b1dee74
kubernetes-client-linux-arm64.tar.gz	6fef05cf595f6d10a355670b2509ae4aa85d036bb6793624e8a3362fbacc22825b410f852665b83c91c1e10c4d11a539ad8d695fc257808cd5198fd53c39a7be
kubernetes-client-linux-ppc64le.tar.gz	47efe6502a680751249aeecac4541dbdab628b0468add98f906a254845e89e3c7a4b7f88b5fe37cf488d7ea2cb4f9639acab9b69d4e7c824b0b9683f0172c0d4
kubernetes-client-linux-s390x.tar.gz	51494dcd56fcf36b0ae8022181554a8e9a52d5a7b40144c73013fd0c98e7fce4aa87cb1c937e3fe42f48874c80e6f466b579139788f67a899fd0e28e02a51d62
kubernetes-client-windows-386.tar.gz	61628aad8bb33a3c5db2ac2d6a42dc9425d1db2404a77443936ab408f65784c3145da903d29885a143df7b749bb3b8a49dc14cedfa1a04d8ebb79b5c4dbb80b4
kubernetes-client-windows-amd64.tar.gz	72408a679b0d88a814e1be0ea8ec3622fff5c8c804c6b2e36499d27b39dc76c074667e9b9732239c1f30da4bc2fb461506f3ade35ea269d95890d50d31279c40
kubernetes-client-windows-arm64.tar.gz	35c4c47f12196b8aa4f435203b52053d0fcbdbeef5b61adcb1e606471175786b340d0d95e788aaaeca8ee05c713983a26547e0b5571fe4fc4c2ba22f13d103d6

Server Binaries

filename	sha512 hash
kubernetes-server-linux-amd64.tar.gz	493e25dfe3aa5650af9d921c354b6d1153dee5bbbcabda06bbfd68f402b6c1c39ba002f559488a63c2ef5db60439ddcd1a2b25b414d6232bc61da89a3f7ffe93
kubernetes-server-linux-arm64.tar.gz	4052fce15bd6622a972f26e6e0603cc8a8532c2e9121f8c0e4ce7ec128b8ab7627bb9790d0efd47631f543103c09af1a9c4c60c6bacef6372402bdc38fa24b11
kubernetes-server-linux-ppc64le.tar.gz	f600849aa603c36d078484a9fa7f457bb3427af4da4a58fec853de8f90b50842fbddd76535b62d283ecb1ce13cfaa0ac32dd7256ca891da3bbaf0768ea632d79
kubernetes-server-linux-s390x.tar.gz	2f384c6df07483cf45637e5b3535023ebea5b2078ae5593c3def4a940bacddb4841c473e13d6b3283034606f487292a4d1090c7df226310b160a2455cbb55fcb

Node Binaries

filename	sha512 hash
kubernetes-node-linux-amd64.tar.gz	2895a5f08101cccfa39c250486ad3b90a248a3c10de6a1bc0f53df8631046fb941da1f7715be7f52bdfd5edce6fe990d053a61a0a65fe47b5321d75c1fe6b6e9
kubernetes-node-linux-arm64.tar.gz	6487209c0d3d270e7991b45bd7d9263561537614cb215ea408e3b131aad468d2b6c2b34a3aba3f5e0d0e967aa2a741781ae96d22a15c44a4ffd9409d5e85b766
kubernetes-node-linux-ppc64le.tar.gz	6f5b351ce262e0ca60955c5ac1abd2fad9d72fdf54b0af5a2251ce150e00fa5f4a6b1318d9a0f6a4cb01aa74969bc47163657e24e4a71e98b8eef27cfd809301
kubernetes-node-linux-s390x.tar.gz	47921d11f9bb2991c78b17f51249dfa1743b5065e4015939ba9fbe193c06fa3762bd0f1d2896abd9745b6980f878149054b9e7a996c511b3c9cfaf62665b5e8a
kubernetes-node-windows-amd64.tar.gz	1c8eb3d42527290f7f38b267d339332ef4c20196264002d2b42fa2ee47f86d68701a312fdbc1f4c3ff580f7d46903acdcc6e5dcf7b69053c63a7b4911c2f64f8

Container Images

All container images are available as manifest lists and support the described architectures. It is also possible to pull a specific architecture directly by adding the "-$ARCH" suffix to the container image name.

name	architectures
registry.k8s.io/conformance:v1.31.6	amd64, arm64, ppc64le, s390x
registry.k8s.io/kube-apiserver:v1.31.6	amd64, arm64, ppc64le, s390x
registry.k8s.io/kube-controller-manager:v1.31.6	amd64, arm64, ppc64le, s390x
registry.k8s.io/kube-proxy:v1.31.6	amd64, arm64, ppc64le, s390x
registry.k8s.io/kube-scheduler:v1.31.6	amd64, arm64, ppc64le, s390x
registry.k8s.io/kubectl:v1.31.6	amd64, arm64, ppc64le, s390x

Changelog since v1.31.5

Important Security Information

This release contains changes that address the following vulnerabilities:

CVE-2025-0426: Node Denial of Service via Kubelet Checkpoint API

A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk.

Affected Versions:

kubelet kubelet v1.30.0 to v1.30.9
kubelet v1.31.0 to v1.31.5
kubelet v1.32.0 to v1.32.1

Fixed Versions:

kubelet 1.29.14
kubelet 1.30.10
kubelet 1.31.6
kubelet 1.32.2

This vulnerability was reported and fixed by Tim Allclair @tallclair from Google.

CVSS Rating: Medium (6.2) CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Changes by Kind

Feature

Kubernetes is now built with go 1.22.11 (#129965, @cpanato) [SIG Release and Testing]
Kubernetes is now built with go 1.22.12 (#130077, @cpanato) [SIG Release and Testing]

Bug or Regression

Fix nil pointer panic in BuildOpenAPIV2 and BuildOpenAPIV3 utilities, used by kube-apiserver's openAPI controller, when a CRD is missing version the requested version. (#128940, @jpbetz) [SIG API Machinery]
Fixed in-tree to CSI migration for Portworx volumes, in clusters where Portworx security feature is enabled (it's a Portworx feature, not Kubernetes feature). It required secret data from the secret mentioned in-tree SC, to be passed in CSI requests which was not happening before this fix. (#129675, @gohilankit) [SIG Storage]
Kubeadm: fixed a bug where an image is not pulled if there is an error with the sandbox image from CRI. (#129607, @neolit123) [SIG Cluster Lifecycle]
Kubeadm: fixed the bug where the v1beta4 Timeouts.EtcdAPICall field was not respected in etcd client operations, and the default timeout of 2 minutes was always used. (#129861, @neolit123) [SIG Cluster Lifecycle]

Other (Cleanup or Flake)

NONE (#130011, @tallclair) [SIG Node]

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Contributors, the CHANGELOG-1.31.md has been bootstrapped with v1.31.6 release notes and you may edit now as needed.