Kubernetes v1.26.11 is live!

842 views
Skip to first unread message

Marko Mudrinić

unread,
Nov 15, 2023, 3:52:01 PM11/15/23
to kubernetes-announce, dev
Kubernetes Community,

Kubernetes v1.26.11 has been built and pushed using Golang version 1.20.11.

The release notes have been updated in CHANGELOG-1.26.md, with a pointer to them on GitHub:

v1.26.11

Downloads for v1.26.11

Source Code

filename sha512 hash
kubernetes.tar.gz 9d7c09342c624b37e6a6515a5789be1a1a5cfd76c6049a2d499ac463da982ca813820dc2dd7e7b32aecedd8f4184180e5eb4dcb2e29662c7e79d8279780830c9
kubernetes-src.tar.gz 7633059e42c5e549ea31851b082df6c267f0144f0cb4b0078cc29f054fc563fca4868390289c123e9a2f36b6dd772f2257935a7188c0457b388f7fce4904152c

Client Binaries

filename sha512 hash
kubernetes-client-darwin-amd64.tar.gz 43a35e810b5efd2f84cc7afd7de6efc8861f4b10df733d66545cf21418c02147bef04f57fbd097f7b2fbd66cb258d4a435a534a29f94c7453228eabac21676e6
kubernetes-client-darwin-arm64.tar.gz e4b35a54991dd1d0fcd037cc3788047539988e7c1b192b0a18fe7fca39c6f19b9732eff18e30ab21d9880c78228beda4994945326c817d4c855ea5c5ffbcc23f
kubernetes-client-linux-386.tar.gz 95602931d52164e1ec0f97037cedaa80b27f576db35b24f26e0ab29f38e0dfd53ae5fca08393162eaba0666860eca16993e25bbb34d95fbc164d6486d8eec38a
kubernetes-client-linux-amd64.tar.gz 4b0ef8bf7d60868af3942a20d6920dddd1adbe938dcafbd88ea4ba1ffe2d81c3b6a0ab1d8f363a117d72e4564766aad12feac061bce6a9a5741f01b135a54bb8
kubernetes-client-linux-arm.tar.gz 32b6d640cf51ab6578f0f4101357f94803cec2d26cfb04c1551642952d95b3944f48db642961223858800af656d3630853158dcb520ac7d546ae35461556e431
kubernetes-client-linux-arm64.tar.gz 071f036a4ae1c3ee7d7e414926f9f3469c529044ecf5e4d07917451e5a131c76c5a9ed596751641c18a4b702cb348e25eb4f2ae60bbcbe8de0152c6fe3308049
kubernetes-client-linux-ppc64le.tar.gz 084d724e7cc4d533f025db1e4e04da6b41c91206506c92e36b904292ad22062fbb856bb281700c03a0b3cce27de50120d3bc5d95b6cc9b9695a89d517395f678
kubernetes-client-linux-s390x.tar.gz efad89957869d6131a9482d2571b5ee56b8beeb8e20dd2dadacdc37d2dd374e8d1c525adaa94fed76a8bd41fd3f8b4b87699087da06032af8c93b00ad96518db
kubernetes-client-windows-386.tar.gz 98e0807b98bfbee69a12ba6b0bee14e51c1441193a53c5d40f4a2efb8ef7f086df43f0595d4d79b573c55a347c8c45a0f0def5cda9af9ed5c649044146503dc8
kubernetes-client-windows-amd64.tar.gz 84f5f8c01b4b9b22b5bfbc6dff3cc011c3a00c874372b14f3b5d646b45b034489523832a02ec3c0b651a61fcd3fef3733b11bcec7c182307eefd47ee8af64f0f
kubernetes-client-windows-arm64.tar.gz 639ae348e47f8c5cf17c13cb26cab4c1a6aad43fe060c28500f178dfbbfc32c0bc6439031e1d0bf1c43d6fdcd349b14a5dfdb23205a1a19752e10454363733c7

Server Binaries

filename sha512 hash
kubernetes-server-linux-amd64.tar.gz d0734b4fbd078d764cf906badbc731f8a4c3a6259952b6087838bcbd3329b7dddecb7f7291263414ed8f7021945e3ae0774f2983f7998ebc79ddae85ede87b80
kubernetes-server-linux-arm.tar.gz 7accb3c3b3941764023f28dc5d78292f957ada83b4fdee7ebe43224016ef259e898cd7aa2005c5a6cf415beceff9169c57e4abd918db7e1ae31b40e72a42355a
kubernetes-server-linux-arm64.tar.gz a809cf3ffc79709e5048c73d56c0c8b9dceaf05a9fa205207ffb226faf21727a7e7587afb083d5ccd7c985588a2057c2351f3a628553c5f7efa4c88eace599bb
kubernetes-server-linux-ppc64le.tar.gz 6c651f782f151890ccf3d7ef88b2c63b955b5fa2e4af5ac0e385eb4c4c2e0d320b7551bc34214f06adf7b7c5e45010f89ddf04b952701d1882d1ed6e57acab54
kubernetes-server-linux-s390x.tar.gz d53cee526c4b6d32f9b3a49ec1ec102417f018bbbcd2cb3b4e451e4c93b7729f1695296890f7b851df6a5597438d741ac14c96a9a4da15d99397cce4a3a0487b

Node Binaries

filename sha512 hash
kubernetes-node-linux-amd64.tar.gz ff241a02aa8380c35feeb0955f3c9aed92ba341d5e7bf83f08c1878454daa3c31fedaea6ea48496c3b28ecac69d64ced5d285d40ebdc07d18a25b12190e3aa64
kubernetes-node-linux-arm.tar.gz 22b13cac5f4c320b2322525d5a8a275cb4f21fa0293000af66985f1d227bfa55f172f96a4e0f9942e253d09a90fa5b65337104aa12a802ee54894fffb3d1afc6
kubernetes-node-linux-arm64.tar.gz 9e9044e4fa5c909b4586332fde0d18b5a431f504e73871177eb4981182eca626d42290f05c700e58c430915e866b08ecffc448b7ae5e59617ecf8ba17aee4d7b
kubernetes-node-linux-ppc64le.tar.gz 855d8356448ea1a940816d7352e97d6759fe8424209a645b6bafbc996a8fe75fbba6627b28e6af9bf593c468b604bf56480f9cca79fd2cdb9ebd7aeec2542128
kubernetes-node-linux-s390x.tar.gz 5decc3817266cebd12fa5469b7a4e1fb1dcf4a3a6119ac6ad3a95bb7a7366ad6ba1c16ea14f58fc9ec77012f773bf984fbdb7e0059d6af0cb49608e85da5176d
kubernetes-node-windows-amd64.tar.gz 1868f3f763bb31873daa323db0e078f845c3bd972fe0f73524a41bae88f7dd43724a255ae3da27e6618cae954710bf5ef70a0ee2aaa9ddc4bd64529233c944cd

Container Images

All container images are available as manifest lists and support the described architectures. It is also possible to pull a specific architecture directly by adding the "-$ARCH" suffix to the container image name.

name architectures
registry.k8s.io/conformance:v1.26.11 amd64, arm, arm64, ppc64le, s390x
registry.k8s.io/kube-apiserver:v1.26.11 amd64, arm, arm64, ppc64le, s390x
registry.k8s.io/kube-controller-manager:v1.26.11 amd64, arm, arm64, ppc64le, s390x
registry.k8s.io/kube-proxy:v1.26.11 amd64, arm, arm64, ppc64le, s390x
registry.k8s.io/kube-scheduler:v1.26.11 amd64, arm, arm64, ppc64le, s390x

Changelog since v1.26.10

Important Security Information

This release contains changes that address the following vulnerabilities:

CVE-2023-5528: Insufficient input sanitization in in-tree storage plugin leads to privilege escalation on Windows nodes

A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they are using an in-tree storage plugin for Windows nodes.

Affected Versions:

  • kubelet >= v1.8.0

Fixed Versions:

  • kubelet v1.28.4
  • kubelet v1.27.8
  • kubelet v1.26.11
  • kubelet v1.25.16

This vulnerability was reported by Tomer Peled @tomerpeled92"

CVSS Rating: High (7.2) CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Changes by Kind

API Change

  • Retry NodeStageVolume calls if CSI node driver is not running (#120330, @rohitssingh) [SIG Apps, Storage and Testing]

Feature

  • Kubernetes is now built with Go 1.20.11 (#121810, @cpanato) [SIG Release and Testing]

Bug or Regression

  • Fix 121094 by re-introducing the readiness predicate for externalTrafficPolicy: Local services. (#121116, @alexanderConstantinescu) [SIG Cloud Provider and Network]
  • Fixed a regression in default 1.26 configurations, which enabled PodDisruptionConditions by default, that prevented the control plane's pod garbage collector from deleting pods that contained duplicated field keys (env. variables with repeated keys or container ports). (#121381, @mimowo) [SIG Apps, Auth, Scheduling and Testing]
  • Fixes calculating the requeue time in the cronjob controller, which results in properly handling failed/stuck jobs (#121540, @soltysh) [SIG Apps]
  • Service Controller: update load balancer hosts after node's ProviderID is updated (#121483, @code-elinka) [SIG Cloud Provider and Network]

Dependencies

Added

Changed

Removed

Nothing has changed.


Contributors, the CHANGELOG-1.26.md has been bootstrapped with v1.26.11 release notes and you may edit now as needed.



Published by your Kubernetes Release Managers.

Reply all
Reply to author
Forward
0 new messages