CHANGELOG: Update directory for v1.31.12 release

This commit is contained in:
Kubernetes Release Robot
2025-08-13 14:47:57 +00:00
parent 8311c1d3d7
commit 81affffa1b

View File

@@ -1,315 +1,445 @@
<!-- BEGIN MUNGE: GENERATED_TOC -->
- [v1.31.11](#v13111)
- [Downloads for v1.31.11](#downloads-for-v13111)
- [v1.31.12](#v13112)
- [Downloads for v1.31.12](#downloads-for-v13112)
- [Source Code](#source-code)
- [Client Binaries](#client-binaries)
- [Server Binaries](#server-binaries)
- [Node Binaries](#node-binaries)
- [Container Images](#container-images)
- [Changelog since v1.31.10](#changelog-since-v13110)
- [Changelog since v1.31.11](#changelog-since-v13111)
- [Important Security Information](#important-security-information)
- [CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference](#cve-2025-5187-nodes-can-delete-themselves-by-adding-an-ownerreference)
- [Changes by Kind](#changes-by-kind)
- [Feature](#feature)
- [Bug or Regression](#bug-or-regression)
- [Dependencies](#dependencies)
- [Added](#added)
- [Changed](#changed)
- [Removed](#removed)
- [v1.31.10](#v13110)
- [Downloads for v1.31.10](#downloads-for-v13110)
- [v1.31.11](#v13111)
- [Downloads for v1.31.11](#downloads-for-v13111)
- [Source Code](#source-code-1)
- [Client Binaries](#client-binaries-1)
- [Server Binaries](#server-binaries-1)
- [Node Binaries](#node-binaries-1)
- [Container Images](#container-images-1)
- [Changelog since v1.31.9](#changelog-since-v1319)
- [Changelog since v1.31.10](#changelog-since-v13110)
- [Changes by Kind](#changes-by-kind-1)
- [Feature](#feature)
- [Bug or Regression](#bug-or-regression-1)
- [Other (Cleanup or Flake)](#other-cleanup-or-flake)
- [Dependencies](#dependencies-1)
- [Added](#added-1)
- [Changed](#changed-1)
- [Removed](#removed-1)
- [v1.31.9](#v1319)
- [Downloads for v1.31.9](#downloads-for-v1319)
- [v1.31.10](#v13110)
- [Downloads for v1.31.10](#downloads-for-v13110)
- [Source Code](#source-code-2)
- [Client Binaries](#client-binaries-2)
- [Server Binaries](#server-binaries-2)
- [Node Binaries](#node-binaries-2)
- [Container Images](#container-images-2)
- [Changelog since v1.31.8](#changelog-since-v1318)
- [Changelog since v1.31.9](#changelog-since-v1319)
- [Changes by Kind](#changes-by-kind-2)
- [Feature](#feature-1)
- [Bug or Regression](#bug-or-regression-2)
- [Other (Cleanup or Flake)](#other-cleanup-or-flake)
- [Dependencies](#dependencies-2)
- [Added](#added-2)
- [Changed](#changed-2)
- [Removed](#removed-2)
- [v1.31.8](#v1318)
- [Downloads for v1.31.8](#downloads-for-v1318)
- [v1.31.9](#v1319)
- [Downloads for v1.31.9](#downloads-for-v1319)
- [Source Code](#source-code-3)
- [Client Binaries](#client-binaries-3)
- [Server Binaries](#server-binaries-3)
- [Node Binaries](#node-binaries-3)
- [Container Images](#container-images-3)
- [Changelog since v1.31.7](#changelog-since-v1317)
- [Changelog since v1.31.8](#changelog-since-v1318)
- [Changes by Kind](#changes-by-kind-3)
- [Feature](#feature-2)
- [Bug or Regression](#bug-or-regression-3)
- [Dependencies](#dependencies-3)
- [Added](#added-3)
- [Changed](#changed-3)
- [Removed](#removed-3)
- [v1.31.7](#v1317)
- [Downloads for v1.31.7](#downloads-for-v1317)
- [v1.31.8](#v1318)
- [Downloads for v1.31.8](#downloads-for-v1318)
- [Source Code](#source-code-4)
- [Client Binaries](#client-binaries-4)
- [Server Binaries](#server-binaries-4)
- [Node Binaries](#node-binaries-4)
- [Container Images](#container-images-4)
- [Changelog since v1.31.6](#changelog-since-v1316)
- [Changelog since v1.31.7](#changelog-since-v1317)
- [Changes by Kind](#changes-by-kind-4)
- [Bug or Regression](#bug-or-regression-4)
- [Other (Cleanup or Flake)](#other-cleanup-or-flake-1)
- [Dependencies](#dependencies-4)
- [Added](#added-4)
- [Changed](#changed-4)
- [Removed](#removed-4)
- [v1.31.6](#v1316)
- [Downloads for v1.31.6](#downloads-for-v1316)
- [v1.31.7](#v1317)
- [Downloads for v1.31.7](#downloads-for-v1317)
- [Source Code](#source-code-5)
- [Client Binaries](#client-binaries-5)
- [Server Binaries](#server-binaries-5)
- [Node Binaries](#node-binaries-5)
- [Container Images](#container-images-5)
- [Changelog since v1.31.5](#changelog-since-v1315)
- [Important Security Information](#important-security-information)
- [CVE-2025-0426: Node Denial of Service via Kubelet Checkpoint API](#cve-2025-0426-node-denial-of-service-via-kubelet-checkpoint-api)
- [Changelog since v1.31.6](#changelog-since-v1316)
- [Changes by Kind](#changes-by-kind-5)
- [Feature](#feature-2)
- [Bug or Regression](#bug-or-regression-5)
- [Other (Cleanup or Flake)](#other-cleanup-or-flake-2)
- [Other (Cleanup or Flake)](#other-cleanup-or-flake-1)
- [Dependencies](#dependencies-5)
- [Added](#added-5)
- [Changed](#changed-5)
- [Removed](#removed-5)
- [v1.31.5](#v1315)
- [Downloads for v1.31.5](#downloads-for-v1315)
- [v1.31.6](#v1316)
- [Downloads for v1.31.6](#downloads-for-v1316)
- [Source Code](#source-code-6)
- [Client Binaries](#client-binaries-6)
- [Server Binaries](#server-binaries-6)
- [Node Binaries](#node-binaries-6)
- [Container Images](#container-images-6)
- [Changelog since v1.31.4](#changelog-since-v1314)
- [Changelog since v1.31.5](#changelog-since-v1315)
- [Important Security Information](#important-security-information-1)
- [CVE-2024-9042: Command Injection affecting Windows nodes via nodes/*/logs/query API](#cve-2024-9042-command-injection-affecting-windows-nodes-via-nodeslogsquery-api)
- [CVE-2025-0426: Node Denial of Service via Kubelet Checkpoint API](#cve-2025-0426-node-denial-of-service-via-kubelet-checkpoint-api)
- [Changes by Kind](#changes-by-kind-6)
- [API Change](#api-change)
- [Feature](#feature-3)
- [Bug or Regression](#bug-or-regression-6)
- [Other (Cleanup or Flake)](#other-cleanup-or-flake-2)
- [Dependencies](#dependencies-6)
- [Added](#added-6)
- [Changed](#changed-6)
- [Removed](#removed-6)
- [v1.31.4](#v1314)
- [Downloads for v1.31.4](#downloads-for-v1314)
- [v1.31.5](#v1315)
- [Downloads for v1.31.5](#downloads-for-v1315)
- [Source Code](#source-code-7)
- [Client Binaries](#client-binaries-7)
- [Server Binaries](#server-binaries-7)
- [Node Binaries](#node-binaries-7)
- [Container Images](#container-images-7)
- [Changelog since v1.31.3](#changelog-since-v1313)
- [Changelog since v1.31.4](#changelog-since-v1314)
- [Important Security Information](#important-security-information-2)
- [CVE-2024-9042: Command Injection affecting Windows nodes via nodes/*/logs/query API](#cve-2024-9042-command-injection-affecting-windows-nodes-via-nodeslogsquery-api)
- [Changes by Kind](#changes-by-kind-7)
- [API Change](#api-change)
- [Feature](#feature-4)
- [Bug or Regression](#bug-or-regression-7)
- [Dependencies](#dependencies-7)
- [Added](#added-7)
- [Changed](#changed-7)
- [Removed](#removed-7)
- [v1.31.3](#v1313)
- [Downloads for v1.31.3](#downloads-for-v1313)
- [v1.31.4](#v1314)
- [Downloads for v1.31.4](#downloads-for-v1314)
- [Source Code](#source-code-8)
- [Client Binaries](#client-binaries-8)
- [Server Binaries](#server-binaries-8)
- [Node Binaries](#node-binaries-8)
- [Container Images](#container-images-8)
- [Changelog since v1.31.2](#changelog-since-v1312)
- [Changelog since v1.31.3](#changelog-since-v1313)
- [Changes by Kind](#changes-by-kind-8)
- [Feature](#feature-5)
- [Bug or Regression](#bug-or-regression-8)
- [Dependencies](#dependencies-8)
- [Added](#added-8)
- [Changed](#changed-8)
- [Removed](#removed-8)
- [v1.31.2](#v1312)
- [Downloads for v1.31.2](#downloads-for-v1312)
- [v1.31.3](#v1313)
- [Downloads for v1.31.3](#downloads-for-v1313)
- [Source Code](#source-code-9)
- [Client Binaries](#client-binaries-9)
- [Server Binaries](#server-binaries-9)
- [Node Binaries](#node-binaries-9)
- [Container Images](#container-images-9)
- [Changelog since v1.31.1](#changelog-since-v1311)
- [Changelog since v1.31.2](#changelog-since-v1312)
- [Changes by Kind](#changes-by-kind-9)
- [Feature](#feature-5)
- [Bug or Regression](#bug-or-regression-9)
- [Other (Cleanup or Flake)](#other-cleanup-or-flake-3)
- [Uncategorized](#uncategorized)
- [Dependencies](#dependencies-9)
- [Added](#added-9)
- [Changed](#changed-9)
- [Removed](#removed-9)
- [v1.31.1](#v1311)
- [Downloads for v1.31.1](#downloads-for-v1311)
- [v1.31.2](#v1312)
- [Downloads for v1.31.2](#downloads-for-v1312)
- [Source Code](#source-code-10)
- [Client Binaries](#client-binaries-10)
- [Server Binaries](#server-binaries-10)
- [Node Binaries](#node-binaries-10)
- [Container Images](#container-images-10)
- [Changelog since v1.31.0](#changelog-since-v1310)
- [Changelog since v1.31.1](#changelog-since-v1311)
- [Changes by Kind](#changes-by-kind-10)
- [Deprecation](#deprecation)
- [API Change](#api-change-1)
- [Feature](#feature-6)
- [Bug or Regression](#bug-or-regression-10)
- [Other (Cleanup or Flake)](#other-cleanup-or-flake-4)
- [Other (Cleanup or Flake)](#other-cleanup-or-flake-3)
- [Uncategorized](#uncategorized)
- [Dependencies](#dependencies-10)
- [Added](#added-10)
- [Changed](#changed-10)
- [Removed](#removed-10)
- [v1.31.0](#v1310)
- [Downloads for v1.31.0](#downloads-for-v1310)
- [v1.31.1](#v1311)
- [Downloads for v1.31.1](#downloads-for-v1311)
- [Source Code](#source-code-11)
- [Client Binaries](#client-binaries-11)
- [Server Binaries](#server-binaries-11)
- [Node Binaries](#node-binaries-11)
- [Container Images](#container-images-11)
- [Changelog since v1.30.0](#changelog-since-v1300)
- [Urgent Upgrade Notes](#urgent-upgrade-notes)
- [(No, really, you MUST read this before you upgrade)](#no-really-you-must-read-this-before-you-upgrade)
- [Changelog since v1.31.0](#changelog-since-v1310)
- [Changes by Kind](#changes-by-kind-11)
- [Deprecation](#deprecation-1)
- [API Change](#api-change-2)
- [Deprecation](#deprecation)
- [API Change](#api-change-1)
- [Feature](#feature-7)
- [Failing Test](#failing-test)
- [Bug or Regression](#bug-or-regression-11)
- [Other (Cleanup or Flake)](#other-cleanup-or-flake-5)
- [Other (Cleanup or Flake)](#other-cleanup-or-flake-4)
- [Dependencies](#dependencies-11)
- [Added](#added-11)
- [Changed](#changed-11)
- [Removed](#removed-11)
- [v1.31.0-rc.1](#v1310-rc1)
- [Downloads for v1.31.0-rc.1](#downloads-for-v1310-rc1)
- [v1.31.0](#v1310)
- [Downloads for v1.31.0](#downloads-for-v1310)
- [Source Code](#source-code-12)
- [Client Binaries](#client-binaries-12)
- [Server Binaries](#server-binaries-12)
- [Node Binaries](#node-binaries-12)
- [Container Images](#container-images-12)
- [Changelog since v1.31.0-rc.0](#changelog-since-v1310-rc0)
- [Changelog since v1.30.0](#changelog-since-v1300)
- [Urgent Upgrade Notes](#urgent-upgrade-notes)
- [(No, really, you MUST read this before you upgrade)](#no-really-you-must-read-this-before-you-upgrade)
- [Changes by Kind](#changes-by-kind-12)
- [API Change](#api-change-3)
- [Deprecation](#deprecation-1)
- [API Change](#api-change-2)
- [Feature](#feature-8)
- [Failing Test](#failing-test)
- [Bug or Regression](#bug-or-regression-12)
- [Other (Cleanup or Flake)](#other-cleanup-or-flake-5)
- [Dependencies](#dependencies-12)
- [Added](#added-12)
- [Changed](#changed-12)
- [Removed](#removed-12)
- [v1.31.0-rc.0](#v1310-rc0)
- [Downloads for v1.31.0-rc.0](#downloads-for-v1310-rc0)
- [v1.31.0-rc.1](#v1310-rc1)
- [Downloads for v1.31.0-rc.1](#downloads-for-v1310-rc1)
- [Source Code](#source-code-13)
- [Client Binaries](#client-binaries-13)
- [Server Binaries](#server-binaries-13)
- [Node Binaries](#node-binaries-13)
- [Container Images](#container-images-13)
- [Changelog since v1.31.0-beta.0](#changelog-since-v1310-beta0)
- [Urgent Upgrade Notes](#urgent-upgrade-notes-1)
- [(No, really, you MUST read this before you upgrade)](#no-really-you-must-read-this-before-you-upgrade-1)
- [Changelog since v1.31.0-rc.0](#changelog-since-v1310-rc0)
- [Changes by Kind](#changes-by-kind-13)
- [Deprecation](#deprecation-2)
- [API Change](#api-change-4)
- [API Change](#api-change-3)
- [Feature](#feature-9)
- [Failing Test](#failing-test-1)
- [Bug or Regression](#bug-or-regression-13)
- [Other (Cleanup or Flake)](#other-cleanup-or-flake-6)
- [Dependencies](#dependencies-13)
- [Added](#added-13)
- [Changed](#changed-13)
- [Removed](#removed-13)
- [v1.31.0-beta.0](#v1310-beta0)
- [Downloads for v1.31.0-beta.0](#downloads-for-v1310-beta0)
- [v1.31.0-rc.0](#v1310-rc0)
- [Downloads for v1.31.0-rc.0](#downloads-for-v1310-rc0)
- [Source Code](#source-code-14)
- [Client Binaries](#client-binaries-14)
- [Server Binaries](#server-binaries-14)
- [Node Binaries](#node-binaries-14)
- [Container Images](#container-images-14)
- [Changelog since v1.31.0-alpha.3](#changelog-since-v1310-alpha3)
- [Changelog since v1.31.0-beta.0](#changelog-since-v1310-beta0)
- [Urgent Upgrade Notes](#urgent-upgrade-notes-1)
- [(No, really, you MUST read this before you upgrade)](#no-really-you-must-read-this-before-you-upgrade-1)
- [Changes by Kind](#changes-by-kind-14)
- [API Change](#api-change-5)
- [Deprecation](#deprecation-2)
- [API Change](#api-change-4)
- [Feature](#feature-10)
- [Failing Test](#failing-test-1)
- [Bug or Regression](#bug-or-regression-14)
- [Other (Cleanup or Flake)](#other-cleanup-or-flake-7)
- [Other (Cleanup or Flake)](#other-cleanup-or-flake-6)
- [Dependencies](#dependencies-14)
- [Added](#added-14)
- [Changed](#changed-14)
- [Removed](#removed-14)
- [v1.31.0-alpha.3](#v1310-alpha3)
- [Downloads for v1.31.0-alpha.3](#downloads-for-v1310-alpha3)
- [v1.31.0-beta.0](#v1310-beta0)
- [Downloads for v1.31.0-beta.0](#downloads-for-v1310-beta0)
- [Source Code](#source-code-15)
- [Client Binaries](#client-binaries-15)
- [Server Binaries](#server-binaries-15)
- [Node Binaries](#node-binaries-15)
- [Container Images](#container-images-15)
- [Changelog since v1.31.0-alpha.2](#changelog-since-v1310-alpha2)
- [Changelog since v1.31.0-alpha.3](#changelog-since-v1310-alpha3)
- [Changes by Kind](#changes-by-kind-15)
- [API Change](#api-change-6)
- [API Change](#api-change-5)
- [Feature](#feature-11)
- [Bug or Regression](#bug-or-regression-15)
- [Other (Cleanup or Flake)](#other-cleanup-or-flake-8)
- [Other (Cleanup or Flake)](#other-cleanup-or-flake-7)
- [Dependencies](#dependencies-15)
- [Added](#added-15)
- [Changed](#changed-15)
- [Removed](#removed-15)
- [v1.31.0-alpha.2](#v1310-alpha2)
- [Downloads for v1.31.0-alpha.2](#downloads-for-v1310-alpha2)
- [v1.31.0-alpha.3](#v1310-alpha3)
- [Downloads for v1.31.0-alpha.3](#downloads-for-v1310-alpha3)
- [Source Code](#source-code-16)
- [Client Binaries](#client-binaries-16)
- [Server Binaries](#server-binaries-16)
- [Node Binaries](#node-binaries-16)
- [Container Images](#container-images-16)
- [Changelog since v1.31.0-alpha.1](#changelog-since-v1310-alpha1)
- [Urgent Upgrade Notes](#urgent-upgrade-notes-2)
- [(No, really, you MUST read this before you upgrade)](#no-really-you-must-read-this-before-you-upgrade-2)
- [Changelog since v1.31.0-alpha.2](#changelog-since-v1310-alpha2)
- [Changes by Kind](#changes-by-kind-16)
- [API Change](#api-change-7)
- [API Change](#api-change-6)
- [Feature](#feature-12)
- [Failing Test](#failing-test-2)
- [Bug or Regression](#bug-or-regression-16)
- [Other (Cleanup or Flake)](#other-cleanup-or-flake-9)
- [Other (Cleanup or Flake)](#other-cleanup-or-flake-8)
- [Dependencies](#dependencies-16)
- [Added](#added-16)
- [Changed](#changed-16)
- [Removed](#removed-16)
- [v1.31.0-alpha.1](#v1310-alpha1)
- [Downloads for v1.31.0-alpha.1](#downloads-for-v1310-alpha1)
- [v1.31.0-alpha.2](#v1310-alpha2)
- [Downloads for v1.31.0-alpha.2](#downloads-for-v1310-alpha2)
- [Source Code](#source-code-17)
- [Client Binaries](#client-binaries-17)
- [Server Binaries](#server-binaries-17)
- [Node Binaries](#node-binaries-17)
- [Container Images](#container-images-17)
- [Changelog since v1.30.0](#changelog-since-v1300-1)
- [Urgent Upgrade Notes](#urgent-upgrade-notes-3)
- [(No, really, you MUST read this before you upgrade)](#no-really-you-must-read-this-before-you-upgrade-3)
- [Changelog since v1.31.0-alpha.1](#changelog-since-v1310-alpha1)
- [Urgent Upgrade Notes](#urgent-upgrade-notes-2)
- [(No, really, you MUST read this before you upgrade)](#no-really-you-must-read-this-before-you-upgrade-2)
- [Changes by Kind](#changes-by-kind-17)
- [Deprecation](#deprecation-3)
- [API Change](#api-change-8)
- [API Change](#api-change-7)
- [Feature](#feature-13)
- [Failing Test](#failing-test-3)
- [Failing Test](#failing-test-2)
- [Bug or Regression](#bug-or-regression-17)
- [Other (Cleanup or Flake)](#other-cleanup-or-flake-10)
- [Other (Cleanup or Flake)](#other-cleanup-or-flake-9)
- [Dependencies](#dependencies-17)
- [Added](#added-17)
- [Changed](#changed-17)
- [Removed](#removed-17)
- [v1.31.0-alpha.1](#v1310-alpha1)
- [Downloads for v1.31.0-alpha.1](#downloads-for-v1310-alpha1)
- [Source Code](#source-code-18)
- [Client Binaries](#client-binaries-18)
- [Server Binaries](#server-binaries-18)
- [Node Binaries](#node-binaries-18)
- [Container Images](#container-images-18)
- [Changelog since v1.30.0](#changelog-since-v1300-1)
- [Urgent Upgrade Notes](#urgent-upgrade-notes-3)
- [(No, really, you MUST read this before you upgrade)](#no-really-you-must-read-this-before-you-upgrade-3)
- [Changes by Kind](#changes-by-kind-18)
- [Deprecation](#deprecation-3)
- [API Change](#api-change-8)
- [Feature](#feature-14)
- [Failing Test](#failing-test-3)
- [Bug or Regression](#bug-or-regression-18)
- [Other (Cleanup or Flake)](#other-cleanup-or-flake-10)
- [Dependencies](#dependencies-18)
- [Added](#added-18)
- [Changed](#changed-18)
- [Removed](#removed-18)
<!-- END MUNGE: GENERATED_TOC -->
# v1.31.12
## Downloads for v1.31.12
### Source Code
filename | sha512 hash
-------- | -----------
[kubernetes.tar.gz](https://dl.k8s.io/v1.31.12/kubernetes.tar.gz) | 1bb78510433324484aa337e1fa45106428c1568fda2c0164919390a63de9fd83ebdcc89e10fea050653b9e62d2625a67bb37b528a6d87ecd286f956220bed13a
[kubernetes-src.tar.gz](https://dl.k8s.io/v1.31.12/kubernetes-src.tar.gz) | 9d04b2d2922af2c4f73028fc444cb22e5a11a80f32271f8f37ea079b24da1128a5f3e4688563b509f9df3ff1271ac2fb1d78064e3487957fa140570755ddb756
### Client Binaries
filename | sha512 hash
-------- | -----------
[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.31.12/kubernetes-client-darwin-amd64.tar.gz) | ce201aad62761c2f5efce91a0f827e4eca0b8aae4ab43b95e8375b1aa2126397fd373e46385fa2f074bc213112764564c29ade3bf9d0d5b1d2fe8afaff88618a
[kubernetes-client-darwin-arm64.tar.gz](https://dl.k8s.io/v1.31.12/kubernetes-client-darwin-arm64.tar.gz) | dd6990ef2cd7106288fac48663fcbfb7ec7956c5f9d7c7cd5410e11ad8a9d06cdde481d6222c362d7560d97e0c5a0c7b1ae8f9215ec2f0b87419bc836592ac0a
[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.31.12/kubernetes-client-linux-386.tar.gz) | 9894e20ea1b32d840346a7d58cac276bf21a3540934659b0c9cafec5e544a2a77b63f20abe6f055399f2d0166b8c8229e91ec9a89687eb79f4b791f6c5a97d14
[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.31.12/kubernetes-client-linux-amd64.tar.gz) | 85cdbe26033d7cebd449e3bfa369fb28b6f511760b3c39bb353288465b8a33bff1339563bf9fbe8126757ee403eedb7c8169d4801ddfc5cc48e7baded0621a4d
[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.31.12/kubernetes-client-linux-arm.tar.gz) | 556d63665c77ed51983a391e8f5db3a878e98d4d3ddd406f610c56adcbf402cfa7081884eb2b7771557fb23dd018d98a55523d4a3d590c25d66b043441258024
[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.31.12/kubernetes-client-linux-arm64.tar.gz) | 5bb5b32c03bea3941547e855bb53326cb812a4bd0a4e0f947555d28ab4c0dd70c3861adfa3a1970b9e63bdbf32007a6e0dd0da224b4e59694a2da6067aec15e3
[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.31.12/kubernetes-client-linux-ppc64le.tar.gz) | fe63d4e33d42f7258d7120e4282027fe0ece3219ad48c2ab1a59bc6a182a35a96b71dc42b356a3344edbb6a40713ce3bd29b277fb594e7e83cb51929d5492e08
[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.31.12/kubernetes-client-linux-s390x.tar.gz) | 43412deb2b9681f239759a5d50cde6198111e4d69680d07050f3dff233dfa16187bd446bfa81c280a9a6f9a3b1c6a3afeee19eaaf6174dc3b6047e80a0bc13fe
[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.31.12/kubernetes-client-windows-386.tar.gz) | 159a5ecdb5172e99d17b2066f79eff230e4e9cd98eea352ea7cf9426dbc06d95100feb6c74cdc2229068d09978c90413aa93b5991850e0e14e360fae3ebe7c0c
[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.31.12/kubernetes-client-windows-amd64.tar.gz) | 3c34158dcdf62e0fee66a3eb4cb160c048cdcbbac5329ca8d66ebca24e84f264cf996ab941b908e0248f47dce2fe9e16613144bc278cc05073bd94494fd3cbff
[kubernetes-client-windows-arm64.tar.gz](https://dl.k8s.io/v1.31.12/kubernetes-client-windows-arm64.tar.gz) | 2503dfe38bb058307d0fa3251fea5aeab44238eb8cebf880b3495ce859e2df1710092bdc1b32c6a9f99c9c6bbd4175573a0918d19f6e4c9843877dac2befab2e
### Server Binaries
filename | sha512 hash
-------- | -----------
[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.31.12/kubernetes-server-linux-amd64.tar.gz) | cd65a2f717635583ab12dc9dd2cda6a5d4d479b8b46e38e95b0d9b84355236d6f64e3a1fb7dd62f6429d51a7f33518c9b76ce6fcdc8d934a7ae317af1c4c226c
[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.31.12/kubernetes-server-linux-arm64.tar.gz) | ee18612e01b9e295db3cafbd032b127a5cc21fb97486fb5d35c5ab395a0d0e6d95acc216a1495a7f738d895c8837e16e79ab95332d4e248b294bca5c2aa317b5
[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.31.12/kubernetes-server-linux-ppc64le.tar.gz) | 0caad6993bdd8adfd05c14c32787869a40c0b1e67f837355e09bc4dbca2ba6b42409d54ad074685f385b4ab87c1b842796064a97d20845be9e57a35206d2fab0
[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.31.12/kubernetes-server-linux-s390x.tar.gz) | cffd5a06efd1098ebc4debb3f35c9fed3a07db66439ef2b961965a053a6755165d8a3f03b4ee335966b478b7ce1f212707c2f70cb551f890d8a0813a95365022
### Node Binaries
filename | sha512 hash
-------- | -----------
[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.31.12/kubernetes-node-linux-amd64.tar.gz) | 17e6290eb983b623fb61e7707cfde4ad57d181372e10a400001bacceb07c35739c5e7d51d521f5bf5776d4fe15786b09ad0a7d37b26197fdaf4cea293f20b88f
[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.31.12/kubernetes-node-linux-arm64.tar.gz) | bdaca1e71569efa2947bf57d89cd8bffda6811f96475a5af50306bf2a566a3a2748058f0a9885acf4d2944aa864eeb5d2bf7ef2c8c821da4bb4c3c04381abe2a
[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.31.12/kubernetes-node-linux-ppc64le.tar.gz) | dba2b0c127e828f0d2f0c83fcf87b6e437765d5b01fd54e1d579560008b43abda044585594b001a1bb88b96c895ffb28b5d26c6e20675acdc3e3e038477a66de
[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.31.12/kubernetes-node-linux-s390x.tar.gz) | 8e8b6b56059fc75f8f70bdfbdb1bd096c5139d841524c4b9435063dd8d2643c7c5bc5a12dd7fc678d61a208a1c789fa34d7766ea5d7412bfb682d0665e882cde
[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.31.12/kubernetes-node-windows-amd64.tar.gz) | 5f8be1b51326f3f90c92832f1f03f8952050a809a8b93dd6fc92cfe5ecae0764f0523b133cbef57ff29d12ca0c80f8536e76156144c64ee16dc04a5c1eaab705
### Container Images
All container images are available as manifest lists and support the described
architectures. It is also possible to pull a specific architecture directly by
adding the "-$ARCH" suffix to the container image name.
name | architectures
---- | -------------
[registry.k8s.io/conformance:v1.31.12](https://console.cloud.google.com/artifacts/docker/k8s-artifacts-prod/southamerica-east1/images/conformance) | [amd64](https://console.cloud.google.com/artifacts/docker/k8s-artifacts-prod/southamerica-east1/images/conformance-amd64), [arm64](https://console.cloud.google.com/artifacts/docker/k8s-artifacts-prod/southamerica-east1/images/conformance-arm64), [ppc64le](https://console.cloud.google.com/artifacts/docker/k8s-artifacts-prod/southamerica-east1/images/conformance-ppc64le), [s390x](https://console.cloud.google.com/artifacts/docker/k8s-artifacts-prod/southamerica-east1/images/conformance-s390x)
[registry.k8s.io/kube-apiserver:v1.31.12](https://console.cloud.google.com/artifacts/docker/k8s-artifacts-prod/southamerica-east1/images/kube-apiserver) | [amd64](https://console.cloud.google.com/artifacts/docker/k8s-artifacts-prod/southamerica-east1/images/kube-apiserver-amd64), [arm64](https://console.cloud.google.com/artifacts/docker/k8s-artifacts-prod/southamerica-east1/images/kube-apiserver-arm64), [ppc64le](https://console.cloud.google.com/artifacts/docker/k8s-artifacts-prod/southamerica-east1/images/kube-apiserver-ppc64le), [s390x](https://console.cloud.google.com/artifacts/docker/k8s-artifacts-prod/southamerica-east1/images/kube-apiserver-s390x)
[registry.k8s.io/kube-controller-manager:v1.31.12](https://console.cloud.google.com/artifacts/docker/k8s-artifacts-prod/southamerica-east1/images/kube-controller-manager) | [amd64](https://console.cloud.google.com/artifacts/docker/k8s-artifacts-prod/southamerica-east1/images/kube-controller-manager-amd64), [arm64](https://console.cloud.google.com/artifacts/docker/k8s-artifacts-prod/southamerica-east1/images/kube-controller-manager-arm64), [ppc64le](https://console.cloud.google.com/artifacts/docker/k8s-artifacts-prod/southamerica-east1/images/kube-controller-manager-ppc64le), [s390x](https://console.cloud.google.com/artifacts/docker/k8s-artifacts-prod/southamerica-east1/images/kube-controller-manager-s390x)
[registry.k8s.io/kube-proxy:v1.31.12](https://console.cloud.google.com/artifacts/docker/k8s-artifacts-prod/southamerica-east1/images/kube-proxy) | [amd64](https://console.cloud.google.com/artifacts/docker/k8s-artifacts-prod/southamerica-east1/images/kube-proxy-amd64), [arm64](https://console.cloud.google.com/artifacts/docker/k8s-artifacts-prod/southamerica-east1/images/kube-proxy-arm64), [ppc64le](https://console.cloud.google.com/artifacts/docker/k8s-artifacts-prod/southamerica-east1/images/kube-proxy-ppc64le), [s390x](https://console.cloud.google.com/artifacts/docker/k8s-artifacts-prod/southamerica-east1/images/kube-proxy-s390x)
[registry.k8s.io/kube-scheduler:v1.31.12](https://console.cloud.google.com/artifacts/docker/k8s-artifacts-prod/southamerica-east1/images/kube-scheduler) | [amd64](https://console.cloud.google.com/artifacts/docker/k8s-artifacts-prod/southamerica-east1/images/kube-scheduler-amd64), [arm64](https://console.cloud.google.com/artifacts/docker/k8s-artifacts-prod/southamerica-east1/images/kube-scheduler-arm64), [ppc64le](https://console.cloud.google.com/artifacts/docker/k8s-artifacts-prod/southamerica-east1/images/kube-scheduler-ppc64le), [s390x](https://console.cloud.google.com/artifacts/docker/k8s-artifacts-prod/southamerica-east1/images/kube-scheduler-s390x)
[registry.k8s.io/kubectl:v1.31.12](https://console.cloud.google.com/artifacts/docker/k8s-artifacts-prod/southamerica-east1/images/kubectl) | [amd64](https://console.cloud.google.com/artifacts/docker/k8s-artifacts-prod/southamerica-east1/images/kubectl-amd64), [arm64](https://console.cloud.google.com/artifacts/docker/k8s-artifacts-prod/southamerica-east1/images/kubectl-arm64), [ppc64le](https://console.cloud.google.com/artifacts/docker/k8s-artifacts-prod/southamerica-east1/images/kubectl-ppc64le), [s390x](https://console.cloud.google.com/artifacts/docker/k8s-artifacts-prod/southamerica-east1/images/kubectl-s390x)
## Changelog since v1.31.11
## Important Security Information
This release contains changes that address the following vulnerabilities:
### CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference
A vulnerability exists in the NodeRestriction admission controller where node users can delete their corresponding node object by patching themselves with an OwnerReference to a cluster-scoped resource. If the OwnerReference resource does not exist or is subsequently deleted, the given node object will be deleted via garbage collection. By default, node users are authorized for create and patch requests but not delete requests against their node object. Since the NodeRestriction admission controller does not prevent patching OwnerReferences, a compromised node could leverage this vulnerability to delete and then recreate its node object with modified taints or labels.
**Affected Versions**:
- kube-apiserver v1.31.0 - v1.31.11
- kube-apiserver v1.32.0 - v1.32.7
- kube-apiserver v1.33.0 - v1.33.3
**Fixed Versions**:
- kube-apiserver v1.31.12
- kube-apiserver v1.32.8
- kube-apiserver v1.33.4
This vulnerability was reported by Paul Viossat.
**CVSS Rating:** Medium (6.7) [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L](https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L)
## Changes by Kind
### Feature
- Kubernetes is now built using Go 1.23.11 ([#132899](https://github.com/kubernetes/kubernetes/pull/132899), [@cpanato](https://github.com/cpanato)) [SIG Release and Testing]
### Bug or Regression
- Changed the node restrictions to disallow the node to change it's ownerReferences. ([#133470](https://github.com/kubernetes/kubernetes/pull/133470), [@natherz97](https://github.com/natherz97)) [SIG Auth]
## Dependencies
### Added
_Nothing has changed._
### Changed
_Nothing has changed._
### Removed
_Nothing has changed._
# v1.31.11