Releases

AI-analyzed release notes for CNCF graduated and incubating projects.

URGENCY

All Action needed Check if affected Plan ahead

KIND

Category

All AI & ML CI/CD & App Delivery Kubernetes Core Networking & Messaging Observability Orchestration & Management Provisioning & Runtime Security Storage & Data

May 2026Clear ×Project: etcdClear ×

etcdv3.6.11Kubernetes CoreMay 1, 2026

ACTION 1CHECK 1OTHER 2View full analysis

A maintenance release with a correctness fix, an RBAC authorization bypass fix, and a security-related dependency update for GO-2026-4962. It also records Go 1.25.9 as the toolchain used to build the binaries.

Action needed (1)

securitymediumgolang.org/x/image update for GO-2026-4962
The release updates golang.org/x/image to v0.39.0 to resolve GO-2026-4962.

Check if affected (1)

securityRBAC authorization bypass in nested Put requests
Applies if you use RBAC.
The release fixes an RBAC authorization bypass that could allow read access through PrevKv or lease attachment in Put requests nested in etcd transactions.

Source ↗

etcdv3.4.44Kubernetes CoreMay 1, 2026

CHECK 1OTHER 1View full analysis

A security maintenance release fixes an RBAC authorization bypass. It also updates the Go toolchain used to compile binaries to go 1.25.9.

Check if affected (1)

securityRBAC authorization bypass fix
Applies if you use RBAC.
The RBAC authorization path is fixed for read access through PrevKv or lease attachment in Put requests nested in etcd transactions. The correction ships in this release.

Source ↗

Browse by month