Releases

AI-analyzed release notes for CNCF graduated and incubating projects.

URGENCY

All Action needed Check if affected Plan ahead

KIND

Category

All AI & ML CI/CD & App Delivery Kubernetes Core Networking & Messaging Observability Orchestration & Management Provisioning & Runtime Security Storage & Data

Jun 2026Clear ×

Limav2.1.3Kubernetes CoreJun 19, 2026

CHECK 5OTHER 2View full analysis

A maintenance release that changes several defaults, updates dependencies, and fixes multiple security vulnerabilities. It also includes a fallback to scp for remote sources and destinations in auto mode.

Check if affected (5)

securitycriticalcontainerd v2.3.2 security fixes
Applies if you use containerd.
securityhighCVE-2026-53657 and GHSA-2j9v-p4xj-cjw2 guest agent socket fix
Applies if you run a QEMU VM that uses the guest agent socket.
breakingcontainerd.user default on non-Linux guests
Applies if you run non-Linux guests.
+ 2 more on the release page

Source ↗

containerdv2.1.9Kubernetes CoreJun 18, 2026

ACTION 5OTHER 7View full analysis

containerd v2.1.9 includes security fixes alongside checkpoint-restore and image-label behavior changes, plus updates to bundled runc and the Go toolchain. The security fixes require the v2.1.9 release, while the other changes matter when their affected behavior is in use.

Action needed (5)

securitycriticalCVE-2026-53488 security fix
The CVE-2026-53488 security issue is corrected in containerd v2.1.9 and is tracked as GHSA-xhf5-7wjv-pqxp.
securityhighCVE-2026-53492 security fix
The CVE-2026-53492 security issue is corrected in containerd v2.1.9 and is tracked as GHSA-33vj-92qq-66hc.
securityhighCVE-2026-53489 security fix
The CVE-2026-53489 security issue is corrected in containerd v2.1.9 and is tracked as GHSA-rgh6-rfwx-v388.
securitymediumCVE-2026-50195 security fix
The CVE-2026-50195 security issue is corrected in containerd v2.1.9 and is tracked as GHSA-cvxm-645q-p574.
securitymediumCVE-2026-47262 security fix
The CVE-2026-47262 security issue is corrected in containerd v2.1.9 and is tracked as GHSA-jpcc-p29g-p8mq.

Source ↗

containerdv1.7.33Kubernetes CoreJun 18, 2026

ACTION 2OTHER 4View full analysis

containerd v1.7.33 includes security updates for containerd and go-jose, along with runtime and toolchain dependency updates. It also changes file-read bounds and image-config label propagation.

Action needed (2)

securitycriticalcontainerd security updates for CVE-2026-53488 and CVE-2026-47262
containerd ships security updates associated with CVE-2026-53488 and CVE-2026-47262. The release also includes GHSA-jpcc-p29g-p8mq and GHSA-xhf5-7wjv-pqxp.
securityhighgo-jose/go-jose/v3 updated to v3.0.5
go-jose/go-jose/v3 is updated to v3.0.5 to fix GHSA-78h2-9frx-2jm8 and CVE-2026-34986.

Source ↗

containerdv2.0.10Kubernetes CoreJun 18, 2026

ACTION 1OTHER 4View full analysis

This release includes containerd security changes, behavior changes, and updates to the bundled runc binary and Go toolchain. The security advisories and runtime updates concern deployments that use the affected container runtime components.

Action needed (1)

securitycriticalcontainerd security fixes, including CVE-2026-53488
The containerd change is associated with CVE-2026-53488, CVE-2026-47262, GHSA-jpcc-p29g-p8mq, and GHSA-xhf5-7wjv-pqxp.

Source ↗

containerdv2.3.2Kubernetes CoreJun 18, 2026

ACTION 1OTHER 11View full analysis

containerd v2.3.2 is a maintenance release with disclosed security fixes, correctness and behavior changes, and dependency and toolchain updates. The security fixes are the main concern for operators, while the other changes matter where the affected behavior is in use.

Action needed (1)

securitycriticalThe containerd security fixes
containerd v2.3.2 includes a security fix identified as CVE-2026-50195 and associated with CVE-2026-47262, CVE-2026-53488, CVE-2026-53489, CVE-2026-53492, GHSA-33vj-92qq-66hc, GHSA-cvxm-645q-p574, GHSA-jpcc-p29g-p8mq, GHSA-rgh6-rfwx-v388, and GHSA-xhf5-7wjv-pqxp.

Source ↗

containerdv2.2.5Kubernetes CoreJun 18, 2026

ACTION 2OTHER 7View full analysis

A maintenance release with disclosed security fixes, dependency and toolchain updates, and changes to checkpoint and image-processing behavior. User-database reads are bounded in openUserFile, which may reject inputs that previously worked.

Action needed (2)

securitycriticalSecurity fixes for five disclosed CVEs
The release includes fixes for CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, and CVE-2026-47262, along with the associated GHSA-33vj-92qq-66hc, GHSA-cvxm-645q-p574, GHSA-jpcc-p29g-p8mq, GHSA-rgh6-rfwx-v388, and GHSA-xhf5-7wjv-pqxp advisories.
breakingBounded openUserFile user-database reads
User-database file reads in openUserFile are now bounded, so inputs that previously worked may be rejected.

Source ↗

Helmv4.2.1Kubernetes CoreJun 12, 2026

ACTION 1OTHER 11View full analysis

Helm v4.2.1 is a maintenance release with correctness fixes and dependency updates. It includes an update to golang.org/x/net that addresses GO-2026-5026.

Action needed (1)

securitycriticalThe golang.org/x/net dependency update for GO-2026-5026
Helm v4.2.1 updates golang.org/x/net to v0.55.0 to address GO-2026-5026.

Source ↗

Helmv3.21.1Kubernetes CoreJun 12, 2026

ACTION 1OTHER 17View full analysis

Helm v3.21.1 includes dependency and toolchain updates alongside fixes for correctness issues. The disclosed dependency update affects releases using golang.org/x/net.

Action needed (1)

securitycriticalThe golang.org/x/net dependency, updated for GO-2026-5026
Helm v3.21.1 bumps golang.org/x/net to v0.55.0 to address GO-2026-5026.

Source ↗

containerdv2.1.8Kubernetes CoreJun 2, 2026

ACTION 1OTHER 4View full analysis

containerd v2.1.8 includes a disclosed security correction identified by CVE-2026-46680 and GHSA-fqw6-gf59-qr4w. The release also contains operator-facing runtime and snapshotter changes in its broader changelog.

Action needed (1)

securityhighCVE-2026-46680 security correction
containerd v2.1.8 includes a correction for CVE-2026-46680, associated with GHSA-fqw6-gf59-qr4w.

Source ↗

etcdv3.5.31Kubernetes CoreJun 1, 2026

ACTION 1OTHER 3View full analysis

A maintenance release with correctness fixes and dependency updates. The golang.org/x/crypto update addresses GO-2026-5026.

Action needed (1)

securitycriticalThe golang.org/x/crypto dependency update for GO-2026-5026
The golang.org/x/crypto dependency is updated to v0.52.0 to address GO-2026-5026.

Source ↗

Browse by month