Kubernetes v1.33.13-1 Release Notes

Overview

Thalassa Cloud Kubernetes v1.33.13-1 ships Kubernetes v1.33.13 with containerd 2.2.10 and Cilium v1.19.10.

Security Fixes

• containerd 2.2.10 includes CVE-2026-95839 and related fixes. The release also stops the CRI from following symlinks for container log files, rejects image references that contain .., and limits socket domains in the default seccomp profile.
• Cilium v1.19.10 is an out-of-band security release. It uses Go 1.26.10 so the runtime stops trust of the compromised eMudhra intermediate CA certificates (CVE-2026-111943).

Read the Cilium v1.19.10 release notes.

What’s New

Component updates

• Kubernetes 1.33.13
• containerd 2.2.10
• CNI Plugins 1.9.1
• crictl 1.35.0
• runc 1.4.3
• Cilium 1.19.10
• Thalassa Cloud Controller Manager 0.11.0
• Thalassa CSI Plugin 0.7.1
• Base OS Ubuntu 24.04

Component Versions