AI-analyzed release notes for CNCF graduated and incubating projects.
A maintenance release with correctness fixes and a security-related dependency update. The dependency update is recorded in the manifest and has no standalone operator impact.
Action needed (1)
securitySecurity updates for golang. and golang.
The dependency manifest updates golang. and golang. to include security updates.
A maintenance release with a Go toolchain update that includes disclosed CVE fixes, an ACL-check bypass correction, and changes to operator-visible defaults. It also adds features and corrects defects across the DNS server.
Action needed (1)
securityhighGo 1. security fixes
The release is built with Go 1., including fixes for CVE-2026-56865, CVE-2026-56864, and CVE-2026-33818.
Check if affected (3)
securityplugin/acl autopath ACL checks
Applies if you use plugin/acl and autopath.
breakingplugin/forward default connection attempts
Applies if you use plugin/forward.
breakingplugin/hosts unsupported-type fallthrough
Applies if you use plugin/hosts.
A maintenance release with correctness fixes and dependency updates tied to GO advisories. The changes affect Helm users through both general fixes and updated Go dependencies.
Action needed (2)
securitymediumThe go. dependency upgrade for GO-2026-5158
go. was upgraded to v1.44.0 for advisory GO-2026-5158.
securityThe google. dependency upgrade for GO-2026-6061
google. was upgraded from 1.80.0 to 1.82.1 for advisory GO-2026-6061.
This cri-o release includes a fix for a disclosed security vulnerability alongside runtime behavior, monitoring configuration, metric, and dependency updates. It is most relevant to deployments affected by the HOME environment-variable issue or the related observability and CNI configuration changes.
Action needed (1)
securityhighCVE-2026-15809 HOME environment-variable injection fix
cri-o v1.36.3 fixes CVE-2026-15809. The vulnerability allowed a bypass of the CVE-2022-4318 fix, enabling /etc/passwd injection through newline characters in the HOME environment variable.
