Kubernetes v1.35.9-0 Release Notes

Overview

Thalassa Cloud Kubernetes v1.35.9-0 ships Kubernetes v1.35.9 with containerd 2.3.5 and Cilium v1.20.2. This release updates the Thalassa Cloud Controller Manager to v0.15.1.

Security Fixes

• Kubernetes 1.35.9 includes the fix for CVE-2026-2270. A user with write access to StatefulSet and ControllerRevision objects could make the controller create a Pod in another namespace.
• containerd 2.3.5 includes CVE-2026-53495. The release also strips sensitive authentication headers when it fetches descriptor URLs.

What’s New

Component updates

• Kubernetes 1.35.9
• containerd 2.3.5
• CNI Plugins 1.9.1
• crictl 1.35.0
• runc 1.5.1
• Cilium 1.20.2
• Thalassa Cloud Controller Manager 0.15.1
• Thalassa CSI Plugin 0.9.0
• Base OS Ubuntu 24.04

Thalassa Cloud Controller Manager 0.15.1

• Hardens egress rules on managed load balancer security groups
• Corrects a listener log message
• Allows ICMP on managed load balancer security groups (v0.15.0)
• Supports loadBalancerSourceRanges (v0.14.1)

See the v0.15.1 release notes.

Use v1.35.10-0 for the latest patch in this stream.

Component Versions