RATATOSKRATATOSK
Sign in

Releases

AI-analyzed release notes for CNCF graduated and incubating projects.

May 2026Clear ×Project: etcdClear ×
etcdv3.6.11Kubernetes CoreMay 1, 2026

A maintenance release with a correctness fix, an RBAC authorization bypass fix, and a security-related dependency update for GO-2026-4962. It also records Go 1.25.9 as the toolchain used to build the binaries.

Action needed (1)

  • securitymediumgolang.org/x/image update for GO-2026-4962

    The release updates golang.org/x/image to v0.39.0 to resolve GO-2026-4962.

Check if affected (1)

  • securityRBAC authorization bypass in nested Put requests

    Applies if you use RBAC.

    The release fixes an RBAC authorization bypass that could allow read access through PrevKv or lease attachment in Put requests nested in etcd transactions.

Source
etcdv3.5.30Kubernetes CoreMay 1, 2026

A maintenance release with a security fix for an RBAC authorization bypass in transaction handling. It also includes an ordinary correctness fix and a Go toolchain dependency update.

Action needed (1)

  • securityRBAC authorization bypass in nested etcd transactions

    The release fixes an RBAC authorization bypass that allowed read access through PrevKv or lease attachment in Put requests nested in etcd transactions. The fix ships in this release.

Source
etcdv3.4.44Kubernetes CoreMay 1, 2026

A security maintenance release fixes an RBAC authorization bypass. It also updates the Go toolchain used to compile binaries to go 1.25.9.

Check if affected (1)

  • securityRBAC authorization bypass fix

    Applies if you use RBAC.

    The RBAC authorization path is fixed for read access through PrevKv or lease attachment in Put requests nested in etcd transactions. The correction ships in this release.

Source
Browse by month