Kubernetes v1.31.5 is live!

37 views

Skip to first unread message

Marko Mudrinić

unread,

Jan 15, 2025, 5:01:54 PM1/15/25

to kubernetes-announce, dev

Kubernetes Community,

Kubernetes v1.31.5 has been built and pushed using Golang version 1.22.10.

The release notes have been updated in CHANGELOG-1.31.md, with a pointer to them on GitHub:

v1.31.5

Downloads for v1.31.5

Source Code

filename	sha512 hash
kubernetes.tar.gz	708b6b758ad755d967df3df3e412dc9b11678a5bb8fd9dcfa37802fb50e79f769941df91c6c633ffaaeee9388d5137fa0c23f754c1cd021c7427ce0a69723b6d
kubernetes-src.tar.gz	0e79a1be9f9d26b91e36b4597193a81b49f61d51b574ed9a460e963acc395f8ed362ddd24fa9c2cf6706ba39a82da85ee7187611bca031064ec53cb32671f3c6

Client Binaries

filename	sha512 hash
kubernetes-client-darwin-amd64.tar.gz	a693da65fb9adb1f1b8a8ea86e60346771da809d9c831f6ca1c6ec26da9d5bcb9823b55a7a344fdf9f7f55e8a29cfe1f1d1d5bd31c40acdcf205baa8141cfbe4
kubernetes-client-darwin-arm64.tar.gz	27a9941c09cf983fca68143c7aab1f5f07f543944abb523de7270af8f6d870f1701ebb4911804c7f770bbbd70bff90734027a5f22179d56d64e7a4127bd72c9b
kubernetes-client-linux-386.tar.gz	4eba7e802df0c9ca140772f80779b805f21bc5dc1895969663955e5a056a4266c9470fb171371e181088eb68da91490bb9cbda4097d61ce69cfc368957f9e8df
kubernetes-client-linux-amd64.tar.gz	de866a5841bff9b9e6666e0065c2bfd0a8420d8fa2cb3b62ea6191105a2d8661dc44250c0d5e5ad4ed1a34348c75b25e55f25d78dc15cc4d3681946f71d59121
kubernetes-client-linux-arm.tar.gz	a13d41dac87f4d308b6c4e755838f741e93dde74904cecf4467baa652fdd429fa268dc663260c567c3329a5f5be3cc1a8350b59019c31974d66484ccab40a79c
kubernetes-client-linux-arm64.tar.gz	8a153744680dc8a8e6aedbd1ba49d67ecdb93dd86990e4b1e7a90ddb095d123ab23ec7620c5a1933fa3d8b7d992f23fd9ca6196e5e70e5aa940220dd75d768de
kubernetes-client-linux-ppc64le.tar.gz	ad699a1f704797af4d011c510a00c724aa13642686ec411d6d02fd2955a60aa6cc6550a61e2a334fffc708e6ef4d88c53279d95d8059cf1e74e08a01355d5f3b
kubernetes-client-linux-s390x.tar.gz	254c9fab17de70d03b626cb1157bdd6951624b9a6067bd7f3e742b9a9561cef3a4b8863bfdc9e1b724a97b0c5a3c9748f7a3532e983f53025b8458355191e663
kubernetes-client-windows-386.tar.gz	39ad453dd12b93310fd8f03cfa8deffcef7d48d724a5d48a40d313a6dd3bdc52feb23913c9209961a9a7334ba60c55a7d94766038c5f0511e1fc972839e5bdba
kubernetes-client-windows-amd64.tar.gz	2a55dcea705cc70eef84e9e76ed78381c253e0c386a23bc5f48af55eb4100cd7ea7bd5bdf068fb38fb8153ed02784952258230a31f4a7511801759dd02a4dd0c
kubernetes-client-windows-arm64.tar.gz	4065a7887dceb24d4c0ac38800874d22a51bcc4b875dd5d6310f1d266977b498de9151e9d8f7485c11d4ca264f1851f04a6460658e0572253e423c714951cb69

Server Binaries

filename	sha512 hash
kubernetes-server-linux-amd64.tar.gz	25ff26ce3dca4dd9d5dca2eb3626ece19acbec0306cbe2bd1a89b09469d00dd339b8e5b6852bcb024a82963c9c2760b28cf15b83bf5f7b2fc29c32c3837038ab
kubernetes-server-linux-arm64.tar.gz	bf0a78c84861517eb70af84db4574c70747402263d7afccca49e0c464fa3246a7793ed67f7e38429c50c6975de4db686984bcdbeb5fac1c734534951a5547bfd
kubernetes-server-linux-ppc64le.tar.gz	b2dbe5d000443c6ee5a532d78006f62ee0fa844d48d6b08dc60de2c12144940604e34e2b03c892f4916a0c6249eeff54c4f08f5d28412571d3552d8bacebde78
kubernetes-server-linux-s390x.tar.gz	bfe358586992d471f64ce02df665334f8761f16ac3edcfd4744b15c5d4460ed71298698ceb0a25f34eca6e10f75dbce2ab915ad21380493dd3a66f468eee2bf0

Node Binaries

filename	sha512 hash
kubernetes-node-linux-amd64.tar.gz	b183f2869d3beb4370cfc9666d0dff23612bc9c7d36d74bbfe3aa426cdb511e6e23dd8ff3cbbc9cdf3ef269d7396ff1e5a7d85356fccbeedecd0ef0f61598c8b
kubernetes-node-linux-arm64.tar.gz	2dc130400670691fa47bb564c2e66b520f25881fd8f11ca270629e174f16ae08b7af549fd4b1ca4f03d6d21d638e8d013e8bd97918778c440e691a45041acfca
kubernetes-node-linux-ppc64le.tar.gz	52ef3ad2a75fcc222e9f383c4036ed3a712700c4b4d91583c25fc4c1302cbd55032ee578bdb30d3b3d1d72187252e66c2fc699931483b0871c3be3580503b92f
kubernetes-node-linux-s390x.tar.gz	33dd02a2e594eca81729999f67488cb7705be8fb8c6caf950576fa103aa5c406a5d708446ccace4dca8363b1bf166f5cc7a33ad180bde9ead9feb7185060c352
kubernetes-node-windows-amd64.tar.gz	5b059c9a7b3fd1a137998910939e2af0bd186a6906dbdf7d2f003a38bc36d8e5da046e8efbdba4c1f53fc8916ab3dbde7b2d76093058f9e888934b3039cc8182

Container Images

All container images are available as manifest lists and support the described architectures. It is also possible to pull a specific architecture directly by adding the "-$ARCH" suffix to the container image name.

name	architectures
registry.k8s.io/conformance:v1.31.5	amd64, arm64, ppc64le, s390x
registry.k8s.io/kube-apiserver:v1.31.5	amd64, arm64, ppc64le, s390x
registry.k8s.io/kube-controller-manager:v1.31.5	amd64, arm64, ppc64le, s390x
registry.k8s.io/kube-proxy:v1.31.5	amd64, arm64, ppc64le, s390x
registry.k8s.io/kube-scheduler:v1.31.5	amd64, arm64, ppc64le, s390x
registry.k8s.io/kubectl:v1.31.5	amd64, arm64, ppc64le, s390x

Changelog since v1.31.4

Important Security Information

This release contains changes that address the following vulnerabilities:

CVE-2024-9042: Command Injection affecting Windows nodes via nodes/*/logs/query API

A security vulnerability has been discovered in Kubernetes windows nodes that could allow a user with the ability to query a node's '/logs' endpoint to execute arbitrary commands on the host.

Affected Versions:

kubelet <= v1.29.12
kubelet <= v1.30.8
kubelet <= v1.31.4
kubelet = v1.32.0

Fixed Versions:

kubelet 1.29.13
kubelet 1.30.9
kubelet 1.31.5
kubelet 1.32.1

This vulnerability was reported by Peled, Tomer and mitigated by Aravindh Puthiyaprambil.

CVSS Rating: Medium (5.9) CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N

Changes by Kind

API Change

NONE (#129599, @aravindhp) [SIG API Machinery and Node]

Feature

Kubernetes is now built with go 1.22.10 (#129424, @cpanato) [SIG Release and Testing]

Bug or Regression

Fixed a storage bug around multipath. iSCSI and Fibre Channel devices attached to nodes via multipath now resolve correctly if partitioned. (#129181, @RomanBednar) [SIG Storage]
Fixes a panic in kube-controller-manager handling StatefulSet objects when revisionHistoryLimit is negative (#129323, @ardaguclu) [SIG Apps]
Kubeadm: fix a bug where the 'node.skipPhases' in UpgradeConfiguration is not respected by 'kubeadm upgrade node' command (#129454, @neolit123) [SIG Cluster Lifecycle]
Kubelet: Fix the volume manager didn't check the device mount state in the actual state of the world before marking the volume as detached. It may cause a pod to be stuck in the Terminating state due to the above issue when it was deleted. (#129062, @carlory) [SIG Node]

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Contributors, the CHANGELOG-1.31.md has been bootstrapped with v1.31.5 release notes and you may edit now as needed.