Overview

In Kubernetes, most new beta features are disabled by default. Alpha features, which are subject to change, are disabled in all versions. For more information, see the Default service settings for Kubernetes components and the feature gates for each version.

For more information about major, minor, and patch versions and preparation actions between minor versions, see Kubernetes versions.

Check the Security Bulletins on IBM Cloud Status for security vulnerabilities that affect IBM Cloud Kubernetes Service. You can filter the results to view only Kubernetes Cluster security bulletins that are relevant to IBM Cloud Kubernetes Service. Change log entries that address other security vulnerabilities but don't also refer to an IBM security bulletin are for vulnerabilities that are not known to affect IBM Cloud Kubernetes Service in normal usage. If you run privileged containers, run commands on the workers, or execute untrusted code, then you might be at risk.

Some change logs are for worker node fix packs, and apply only to worker nodes. You must apply these patches to ensure security compliance for your worker nodes. These worker node fix packs can be at a higher version than the master because some build fix packs are specific to worker nodes. Other change logs are for master fix packs, and apply only to the cluster master. Master fix packs might not be automatically applied. You can choose to apply them manually. For more information about patch types, see Update types.

Version 1.36

Worker node fix pack 1.36.3_1527, released 25 August 2026

The following list shows the components included in the worker node fix pack 1.36.3_1527. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

UBUNTU 24 (VPC) 6.8.0-138-generic

Resolves the following CVEs: CVE-2026-10723, CVE-2026-10822, CVE-2026-11331, CVE-2026-11622, CVE-2026-11721, CVE-2026-11856, CVE-2026-12617, CVE-2026-13321, CVE-2026-15059, CVE-2026-16742, CVE-2026-28417, CVE-2026-53224, CVE-2026-53246, CVE-2026-53247, CVE-2026-58472, CVE-2026-62289, CVE-2026-64531, CVE-2026-73071, CVE-2026-73072, CVE-2026-73074, CVE-2026-73076, CVE-2026-73077, and CVE-2026-73078.

UBUNTU 24 (Classic) 6.8.0-138-generic

Resolves the following CVEs: CVE-2026-10723, CVE-2026-10822, CVE-2026-11331, CVE-2026-11622, CVE-2026-11721, CVE-2026-11856, CVE-2026-12617, CVE-2026-13321, CVE-2026-15059, CVE-2026-16742, CVE-2026-28417, CVE-2026-53224, CVE-2026-53246, CVE-2026-53247, CVE-2026-58472, CVE-2026-62289, CVE-2026-64531, CVE-2026-73071, CVE-2026-73072, CVE-2026-73074, CVE-2026-73076, CVE-2026-73077, and CVE-2026-73078.

Kubernetes 1.36.3

For more information, see the change logs.

containerd 2.2.6

For more information, see the change logs.

HAProxy a70e8a8452c4d476687ad749df47b6f27a61851a

Resolves the following CVEs: CVE-2026-54411, CVE-2026-54371, CVE-2026-55204, and CVE-2026-58055.

GPU Device Plug-in and Installer 5feeb6912d16f495588aa0500d5e7ddeee3f70ba

Resolves the following CVEs: CVE-2026-58055, CVE-2026-54411, CVE-2026-54371, CVE-2026-45409, and CVE-2026-11940.

Worker node fix pack 1.36.3_1526, released 12 August 2026

The following list shows the components included in the worker node fix pack 1.36.3_1526. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

UBUNTU 24 (VPC) 6.8.0-137-generic

Resolves the following CVEs: CVE-2026-4046, CVE-2026-43083, CVE-2026-43197, CVE-2026-43198, CVE-2026-43465, CVE-2026-443, CVE-2026-4437, CVE-2026-4438, CVE-2026-46242, CVE-2026-46325, CVE-2026-46331, CVE-2026-52914, CVE-2026-52924, CVE-2026-52931, CVE-2026-53151, CVE-2026-53176, CVE-2026-53212, CVE-2026-53215, CVE-2026-53225, CVE-2026-53228, CVE-2026-53359, CVE-2026-5435, CVE-2026-5450, CVE-2026-5928, and CVE-2026-6238.

UBUNTU 24 (Classic) 6.8.0-137-generic

Resolves the following CVEs: CVE-2026-4046, CVE-2026-43083, CVE-2026-43197, CVE-2026-43198, CVE-2026-43465, CVE-2026-443, CVE-2026-4437, CVE-2026-4438, CVE-2026-46242, CVE-2026-46325, CVE-2026-46331, CVE-2026-52914, CVE-2026-52924, CVE-2026-52931, CVE-2026-53151, CVE-2026-53176, CVE-2026-53212, CVE-2026-53215, CVE-2026-53225, CVE-2026-53228, CVE-2026-53359, CVE-2026-5435, CVE-2026-5450, CVE-2026-5928, and CVE-2026-6238.

Kubernetes 1.36.3

For more information, see the change logs.

containerd 2.2.6

For more information, see the change logs.

HAProxy bd7e64ef86b90455535107263466d1825f3e7f9f

Resolves the following CVEs: CVE-2026-56391, and CVE-2026-56392.

GPU Device Plug-in and Installer 22593b92ec9c3df7a58e00c3eec845f8fd447cc3

Resolves the following CVEs: CVE-2025-13151, CVE-2026-15308, CVE-2026-28390, CVE-2026-44431, CVE-2026-54369, CVE-2026-58016, CVE-2026-54370, CVE-2025-6170, CVE-2026-48864, and CVE-2026-56852.

Master fix pack 1.36.3_1525, released 03 August 2026

The following list shows the components that are in the master fix pack 1.36.3_1525. Master patch updates are applied automatically.

etcd v3.5.32

See the etcd release notes.

IBM Cloud Block Storage driver and plug-in v2.5.27

New version contains updates and security fixes.

IBM Cloud Controller Manager v1.36.2-6

New version contains updates and security fixes.

IBM Cloud File Storage for Classic plug-in and monitor v456

New version contains updates and security fixes.

Key Management Service provider 2.10.28

New version contains updates and security fixes.

Kubernetes v1.36.3

See the Kubernetes release notes.

Worker node fix pack 1.36.2_1524, released 28 July 2026

The following list shows the components included in the worker node fix pack 1.36.2_1524. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

UBUNTU 24 (VPC) 6.8.0-136-generic

Resolves the following CVEs: CVE-2025-21709, CVE-2025-39930, CVE-2025-54505, CVE-2025-54518, CVE-2025-62626, CVE-2025-71269, CVE-2026-11386, CVE-2026-11850, CVE-2026-12391, CVE-2026-14164, CVE-2026-15146, CVE-2026-23171, CVE-2026-23302, CVE-2026-23330, CVE-2026-23374, CVE-2026-23389, CVE-2026-23428, CVE-2026-23442, CVE-2026-23444, CVE-2026-23450, CVE-2026-23455, CVE-2026-23468, CVE-2026-31402, CVE-2026-31407, CVE-2026-31414, CVE-2026-31415, CVE-2026-31416, CVE-2026-31417, CVE-2026-31421, CVE-2026-31422, CVE-2026-31423, CVE-2026-31424, CVE-2026-31425, CVE-2026-31429, CVE-2026-31430, CVE-2026-31432, CVE-2026-31436, CVE-2026-31448, CVE-2026-31450, CVE-2026-31466, CVE-2026-31478, CVE-2026-31499, CVE-2026-31532, CVE-2026-31575, CVE-2026-31576, CVE-2026-31577, CVE-2026-31578, CVE-2026-31580, CVE-2026-31581, CVE-2026-31582, CVE-2026-31583, CVE-2026-31584, CVE-2026-31585, CVE-2026-31586, CVE-2026-31587, CVE-2026-31588, CVE-2026-31590, CVE-2026-31594, CVE-2026-31595, CVE-2026-31596, CVE-2026-31597, CVE-2026-31598, CVE-2026-31599, CVE-2026-31602, CVE-2026-31603, CVE-2026-31604, CVE-2026-31605, CVE-2026-31606, CVE-2026-31607, CVE-2026-31610, CVE-2026-31611, CVE-2026-31612, CVE-2026-31613, CVE-2026-31615, CVE-2026-31616, CVE-2026-31617, CVE-2026-31618, CVE-2026-31619, CVE-2026-31622, CVE-2026-31623, CVE-2026-31624, CVE-2026-31625, CVE-2026-31626, CVE-2026-31627, CVE-2026-31628, CVE-2026-31629, CVE-2026-31634, CVE-2026-31637, CVE-2026-31638, CVE-2026-31639, CVE-2026-31642, CVE-2026-31645, CVE-2026-31646, CVE-2026-31648, CVE-2026-31649, CVE-2026-31651, CVE-2026-31655, CVE-2026-31656, CVE-2026-31657, CVE-2026-31658, CVE-2026-31659, CVE-2026-31660, CVE-2026-31661, CVE-2026-31662, CVE-2026-31664, CVE-2026-31665, CVE-2026-31667, CVE-2026-31668, CVE-2026-31669, CVE-2026-31670, CVE-2026-31671, CVE-2026-31672, CVE-2026-31673, CVE-2026-31675, CVE-2026-31677, CVE-2026-31680, CVE-2026-31681, CVE-2026-31682, CVE-2026-31684, CVE-2026-31685, CVE-2026-31686, CVE-2026-31689, CVE-2026-31694, CVE-2026-31695, CVE-2026-31696, CVE-2026-31697, CVE-2026-31698, CVE-2026-31699, CVE-2026-31700, CVE-2026-31701, CVE-2026-31702, CVE-2026-31704, CVE-2026-31705, CVE-2026-31706, CVE-2026-31707, CVE-2026-31708, CVE-2026-31709, CVE-2026-31711, CVE-2026-31712, CVE-2026-31714, CVE-2026-31715, CVE-2026-31716, CVE-2026-31720, CVE-2026-31721, CVE-2026-31722, CVE-2026-31723, CVE-2026-31724, CVE-2026-31725, CVE-2026-31726, CVE-2026-31728, CVE-2026-31729, CVE-2026-31730, CVE-2026-31731, CVE-2026-31737, CVE-2026-31738, CVE-2026-31740, CVE-2026-31741, CVE-2026-31747, CVE-2026-31748, CVE-2026-31749, CVE-2026-31751, CVE-2026-31752, CVE-2026-31754, CVE-2026-31755, CVE-2026-31756, CVE-2026-31758, CVE-2026-31759, CVE-2026-31761, CVE-2026-31762, CVE-2026-31763, CVE-2026-31767, CVE-2026-31768, CVE-2026-31770, CVE-2026-31772, CVE-2026-31773, CVE-2026-31776, CVE-2026-31778, CVE-2026-31779, CVE-2026-31780, CVE-2026-31781, CVE-2026-4035, CVE-2026-40355, CVE-2026-40356, CVE-2026-40467, CVE-2026-40468, CVE-2026-40469, CVE-2026-42616, CVE-2026-42617, CVE-2026-42618, CVE-2026-43007, CVE-2026-43011, CVE-2026-43012, CVE-2026-43013, CVE-2026-43014, CVE-2026-43015, CVE-2026-43016, CVE-2026-43017, CVE-2026-43018, CVE-2026-43019, CVE-2026-43020, CVE-2026-43023, CVE-2026-43024, CVE-2026-43025, CVE-2026-43026, CVE-2026-43027, CVE-2026-43028, CVE-2026-43030, CVE-2026-43032, CVE-2026-43035, CVE-2026-43036, CVE-2026-43037, CVE-2026-43038, CVE-2026-43040, CVE-2026-43041, CVE-2026-43043, CVE-2026-43044, CVE-2026-43046, CVE-2026-43047, CVE-2026-43049, CVE-2026-43050, CVE-2026-43051, CVE-2026-43052, CVE-2026-43054, CVE-2026-43056, CVE-2026-43057, CVE-2026-43058, CVE-2026-43067, CVE-2026-43071, CVE-2026-43072, CVE-2026-43073, CVE-2026-43074, CVE-2026-43075, CVE-2026-43076, CVE-2026-43079, CVE-2026-43080, CVE-2026-43081, CVE-2026-43082, CVE-2026-43085, CVE-2026-43086, CVE-2026-43088, CVE-2026-43089, CVE-2026-43091, CVE-2026-43092, CVE-2026-43093, CVE-2026-43094, CVE-2026-43098, CVE-2026-43099, CVE-2026-43103, CVE-2026-43104, CVE-2026-43105, CVE-2026-43107, CVE-2026-43109, CVE-2026-43110, CVE-2026-43111, CVE-2026-43112, CVE-2026-43113, CVE-2026-43114, CVE-2026-43117, CVE-2026-43119, CVE-2026-43120, CVE-2026-43185, CVE-2026-43245, CVE-2026-43324, CVE-2026-43327, CVE-2026-43328, CVE-2026-43329, CVE-2026-43330, CVE-2026-43332, CVE-2026-43333, CVE-2026-43334, CVE-2026-43336, CVE-2026-43338, CVE-2026-43339, CVE-2026-43340, CVE-2026-43341, CVE-2026-43342, CVE-2026-43343, CVE-2026-43345, CVE-2026-43350, CVE-2026-43378, CVE-2026-43383, CVE-2026-43384, CVE-2026-43406, CVE-2026-43407, CVE-2026-43414, CVE-2026-43490, CVE-2026-43491, CVE-2026-43492, CVE-2026-43493, CVE-2026-43495, CVE-2026-43496, CVE-2026-43497, CVE-2026-43499, CVE-2026-43501, CVE-2026-43502, CVE-2026-4367, CVE-2026-45409, CVE-2026-45834, CVE-2026-45835, CVE-2026-45836, CVE-2026-45838, CVE-2026-45839, CVE-2026-45840, CVE-2026-45841, CVE-2026-45842, CVE-2026-45843, CVE-2026-45844, CVE-2026-45845, CVE-2026-45846, CVE-2026-45986, CVE-2026-45987, CVE-2026-45988, CVE-2026-45989, CVE-2026-45991, CVE-2026-45993, CVE-2026-45994, CVE-2026-45996, CVE-2026-45997, CVE-2026-45999, CVE-2026-46002, CVE-2026-46003, CVE-2026-46004, CVE-2026-46005, CVE-2026-46006, CVE-2026-46007, CVE-2026-46009, CVE-2026-46011, CVE-2026-46012, CVE-2026-46015, CVE-2026-46016, CVE-2026-46018, CVE-2026-46019, CVE-2026-46021, CVE-2026-46022, CVE-2026-46023, CVE-2026-46024, CVE-2026-46026, CVE-2026-46027, CVE-2026-46031, CVE-2026-46033, CVE-2026-46037, CVE-2026-46038, CVE-2026-46040, CVE-2026-46041, CVE-2026-46043, CVE-2026-46044, CVE-2026-46046, CVE-2026-46047, CVE-2026-46049, CVE-2026-46050, CVE-2026-46051, CVE-2026-46052, CVE-2026-46053, CVE-2026-46056, CVE-2026-46058, CVE-2026-46061, CVE-2026-46062, CVE-2026-46063, CVE-2026-46064, CVE-2026-46065, CVE-2026-46068, CVE-2026-46069, CVE-2026-46070, CVE-2026-46072, CVE-2026-46073, CVE-2026-46075, CVE-2026-46076, CVE-2026-46077, CVE-2026-46078, CVE-2026-46079, CVE-2026-46080, CVE-2026-46082, CVE-2026-46083, CVE-2026-46084, CVE-2026-46086, CVE-2026-46088, CVE-2026-46089, CVE-2026-46090, CVE-2026-46091, CVE-2026-46092, CVE-2026-46094, CVE-2026-46098, CVE-2026-46099, CVE-2026-46101, CVE-2026-46102, CVE-2026-46103, CVE-2026-46106, CVE-2026-46107, CVE-2026-46108, CVE-2026-46110, CVE-2026-46111, CVE-2026-46112, CVE-2026-46113, CVE-2026-46114, CVE-2026-46115, CVE-2026-46116, CVE-2026-46117, CVE-2026-46119, CVE-2026-46120, CVE-2026-46121, CVE-2026-46122, CVE-2026-46123, CVE-2026-46124, CVE-2026-46125, CVE-2026-46126, CVE-2026-46127, CVE-2026-46128, CVE-2026-46129, CVE-2026-46131, CVE-2026-46132, CVE-2026-46133, CVE-2026-46135, CVE-2026-46136, CVE-2026-46137, CVE-2026-46138, CVE-2026-46139, CVE-2026-46142, CVE-2026-46143, CVE-2026-46144, CVE-2026-46145, CVE-2026-46146, CVE-2026-46149, CVE-2026-46150, CVE-2026-46151, CVE-2026-46152, CVE-2026-46157, CVE-2026-46159, CVE-2026-46160, CVE-2026-46161, CVE-2026-46163, CVE-2026-46164, CVE-2026-46167, CVE-2026-46168, CVE-2026-46169, CVE-2026-46172, CVE-2026-46173, CVE-2026-46174, CVE-2026-46176, CVE-2026-46177, CVE-2026-46178, CVE-2026-46179, CVE-2026-46180, CVE-2026-46184, CVE-2026-46185, CVE-2026-46186, CVE-2026-46187, CVE-2026-46189, CVE-2026-46190, CVE-2026-46191, CVE-2026-46193, CVE-2026-46194, CVE-2026-46195, CVE-2026-46196, CVE-2026-46197, CVE-2026-46198, CVE-2026-46199, CVE-2026-46200, CVE-2026-46201, CVE-2026-46204, CVE-2026-46205, CVE-2026-46206, CVE-2026-46207, CVE-2026-46208, CVE-2026-46209, CVE-2026-46211, CVE-2026-46212, CVE-2026-46214, CVE-2026-46218, CVE-2026-46219, CVE-2026-46220, CVE-2026-46225, CVE-2026-46226, CVE-2026-46227, CVE-2026-46229, CVE-2026-46230, CVE-2026-46231, CVE-2026-46232, CVE-2026-46233, CVE-2026-46234, CVE-2026-46235, CVE-2026-46236, CVE-2026-46238, CVE-2026-46241, CVE-2026-46243, CVE-2026-46244, CVE-2026-46273, CVE-2026-46274, CVE-2026-46276, CVE-2026-46280, CVE-2026-46282, CVE-2026-46285, CVE-2026-46286, CVE-2026-46287, CVE-2026-46289, CVE-2026-46291, CVE-2026-46292, CVE-2026-46293, CVE-2026-46294, CVE-2026-46296, CVE-2026-46299, CVE-2026-46301, CVE-2026-46303, CVE-2026-46304, CVE-2026-46306, CVE-2026-46307, CVE-2026-46312, CVE-2026-46314, CVE-2026-46319, CVE-2026-46569, CVE-2026-46570, CVE-2026-46571, CVE-2026-46572, CVE-2026-47709, CVE-2026-47714, CVE-2026-50812, CVE-2026-50813, CVE-2026-54411, CVE-2026-56135, CVE-2026-56136, CVE-2026-5704, CVE-2026-5745, CVE-2026-58469, CVE-2026-58470, CVE-2026-58471, CVE-2026-58472, CVE-2026-59856, CVE-2026-59857, CVE-2026-59858, CVE-2026-59939, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002, CVE-2026-61548, and CVE-2026-9494.

UBUNTU 24 (Classic) 6.8.0-136-generic

Resolves the following CVEs: CVE-2025-21709, CVE-2025-39930, CVE-2025-54505, CVE-2025-54518, CVE-2025-62626, CVE-2025-71269, CVE-2026-11386, CVE-2026-11850, CVE-2026-12391, CVE-2026-14164, CVE-2026-15146, CVE-2026-23171, CVE-2026-23302, CVE-2026-23330, CVE-2026-23374, CVE-2026-23389, CVE-2026-23428, CVE-2026-23442, CVE-2026-23444, CVE-2026-23450, CVE-2026-23455, CVE-2026-23468, CVE-2026-31402, CVE-2026-31407, CVE-2026-31414, CVE-2026-31415, CVE-2026-31416, CVE-2026-31417, CVE-2026-31421, CVE-2026-31422, CVE-2026-31423, CVE-2026-31424, CVE-2026-31425, CVE-2026-31429, CVE-2026-31430, CVE-2026-31432, CVE-2026-31436, CVE-2026-31448, CVE-2026-31450, CVE-2026-31466, CVE-2026-31478, CVE-2026-31499, CVE-2026-31532, CVE-2026-31575, CVE-2026-31576, CVE-2026-31577, CVE-2026-31578, CVE-2026-31580, CVE-2026-31581, CVE-2026-31582, CVE-2026-31583, CVE-2026-31584, CVE-2026-31585, CVE-2026-31586, CVE-2026-31587, CVE-2026-31588, CVE-2026-31590, CVE-2026-31594, CVE-2026-31595, CVE-2026-31596, CVE-2026-31597, CVE-2026-31598, CVE-2026-31599, CVE-2026-31602, CVE-2026-31603, CVE-2026-31604, CVE-2026-31605, CVE-2026-31606, CVE-2026-31607, CVE-2026-31610, CVE-2026-31611, CVE-2026-31612, CVE-2026-31613, CVE-2026-31615, CVE-2026-31616, CVE-2026-31617, CVE-2026-31618, CVE-2026-31619, CVE-2026-31622, CVE-2026-31623, CVE-2026-31624, CVE-2026-31625, CVE-2026-31626, CVE-2026-31627, CVE-2026-31628, CVE-2026-31629, CVE-2026-31634, CVE-2026-31637, CVE-2026-31638, CVE-2026-31639, CVE-2026-31642, CVE-2026-31645, CVE-2026-31646, CVE-2026-31648, CVE-2026-31649, CVE-2026-31651, CVE-2026-31655, CVE-2026-31656, CVE-2026-31657, CVE-2026-31658, CVE-2026-31659, CVE-2026-31660, CVE-2026-31661, CVE-2026-31662, CVE-2026-31664, CVE-2026-31665, CVE-2026-31667, CVE-2026-31668, CVE-2026-31669, CVE-2026-31670, CVE-2026-31671, CVE-2026-31672, CVE-2026-31673, CVE-2026-31675, CVE-2026-31677, CVE-2026-31680, CVE-2026-31681, CVE-2026-31682, CVE-2026-31684, CVE-2026-31685, CVE-2026-31686, CVE-2026-31689, CVE-2026-31694, CVE-2026-31695, CVE-2026-31696, CVE-2026-31697, CVE-2026-31698, CVE-2026-31699, CVE-2026-31700, CVE-2026-31701, CVE-2026-31702, CVE-2026-31704, CVE-2026-31705, CVE-2026-31706, CVE-2026-31707, CVE-2026-31708, CVE-2026-31709, CVE-2026-31711, CVE-2026-31712, CVE-2026-31714, CVE-2026-31715, CVE-2026-31716, CVE-2026-31720, CVE-2026-31721, CVE-2026-31722, CVE-2026-31723, CVE-2026-31724, CVE-2026-31725, CVE-2026-31726, CVE-2026-31728, CVE-2026-31729, CVE-2026-31730, CVE-2026-31731, CVE-2026-31737, CVE-2026-31738, CVE-2026-31740, CVE-2026-31741, CVE-2026-31747, CVE-2026-31748, CVE-2026-31749, CVE-2026-31751, CVE-2026-31752, CVE-2026-31754, CVE-2026-31755, CVE-2026-31756, CVE-2026-31758, CVE-2026-31759, CVE-2026-31761, CVE-2026-31762, CVE-2026-31763, CVE-2026-31767, CVE-2026-31768, CVE-2026-31770, CVE-2026-31772, CVE-2026-31773, CVE-2026-31776, CVE-2026-31778, CVE-2026-31779, CVE-2026-31780, CVE-2026-31781, CVE-2026-4035, CVE-2026-40355, CVE-2026-40356, CVE-2026-40467, CVE-2026-40468, CVE-2026-40469, CVE-2026-42616, CVE-2026-42617, CVE-2026-42618, CVE-2026-43007, CVE-2026-43011, CVE-2026-43012, CVE-2026-43013, CVE-2026-43014, CVE-2026-43015, CVE-2026-43016, CVE-2026-43017, CVE-2026-43018, CVE-2026-43019, CVE-2026-43020, CVE-2026-43023, CVE-2026-43024, CVE-2026-43025, CVE-2026-43026, CVE-2026-43027, CVE-2026-43028, CVE-2026-43030, CVE-2026-43032, CVE-2026-43035, CVE-2026-43036, CVE-2026-43037, CVE-2026-43038, CVE-2026-43040, CVE-2026-43041, CVE-2026-43043, CVE-2026-43044, CVE-2026-43046, CVE-2026-43047, CVE-2026-43049, CVE-2026-43050, CVE-2026-43051, CVE-2026-43052, CVE-2026-43054, CVE-2026-43056, CVE-2026-43057, CVE-2026-43058, CVE-2026-43067, CVE-2026-43071, CVE-2026-43072, CVE-2026-43073, CVE-2026-43074, CVE-2026-43075, CVE-2026-43076, CVE-2026-43079, CVE-2026-43080, CVE-2026-43081, CVE-2026-43082, CVE-2026-43085, CVE-2026-43086, CVE-2026-43088, CVE-2026-43089, CVE-2026-43091, CVE-2026-43092, CVE-2026-43093, CVE-2026-43094, CVE-2026-43098, CVE-2026-43099, CVE-2026-43103, CVE-2026-43104, CVE-2026-43105, CVE-2026-43107, CVE-2026-43109, CVE-2026-43110, CVE-2026-43111, CVE-2026-43112, CVE-2026-43113, CVE-2026-43114, CVE-2026-43117, CVE-2026-43119, CVE-2026-43120, CVE-2026-43185, CVE-2026-43245, CVE-2026-43324, CVE-2026-43327, CVE-2026-43328, CVE-2026-43329, CVE-2026-43330, CVE-2026-43332, CVE-2026-43333, CVE-2026-43334, CVE-2026-43336, CVE-2026-43338, CVE-2026-43339, CVE-2026-43340, CVE-2026-43341, CVE-2026-43342, CVE-2026-43343, CVE-2026-43345, CVE-2026-43350, CVE-2026-43378, CVE-2026-43383, CVE-2026-43384, CVE-2026-43406, CVE-2026-43407, CVE-2026-43414, CVE-2026-43490, CVE-2026-43491, CVE-2026-43492, CVE-2026-43493, CVE-2026-43495, CVE-2026-43496, CVE-2026-43497, CVE-2026-43499, CVE-2026-43501, CVE-2026-43502, CVE-2026-4367, CVE-2026-45409, CVE-2026-45834, CVE-2026-45835, CVE-2026-45836, CVE-2026-45838, CVE-2026-45839, CVE-2026-45840, CVE-2026-45841, CVE-2026-45842, CVE-2026-45843, CVE-2026-45844, CVE-2026-45845, CVE-2026-45846, CVE-2026-45986, CVE-2026-45987, CVE-2026-45988, CVE-2026-45989, CVE-2026-45991, CVE-2026-45993, CVE-2026-45994, CVE-2026-45996, CVE-2026-45997, CVE-2026-45999, CVE-2026-46002, CVE-2026-46003, CVE-2026-46004, CVE-2026-46005, CVE-2026-46006, CVE-2026-46007, CVE-2026-46009, CVE-2026-46011, CVE-2026-46012, CVE-2026-46015, CVE-2026-46016, CVE-2026-46018, CVE-2026-46019, CVE-2026-46021, CVE-2026-46022, CVE-2026-46023, CVE-2026-46024, CVE-2026-46026, CVE-2026-46027, CVE-2026-46031, CVE-2026-46033, CVE-2026-46037, CVE-2026-46038, CVE-2026-46040, CVE-2026-46041, CVE-2026-46043, CVE-2026-46044, CVE-2026-46046, CVE-2026-46047, CVE-2026-46049, CVE-2026-46050, CVE-2026-46051, CVE-2026-46052, CVE-2026-46053, CVE-2026-46056, CVE-2026-46058, CVE-2026-46061, CVE-2026-46062, CVE-2026-46063, CVE-2026-46064, CVE-2026-46065, CVE-2026-46068, CVE-2026-46069, CVE-2026-46070, CVE-2026-46072, CVE-2026-46073, CVE-2026-46075, CVE-2026-46076, CVE-2026-46077, CVE-2026-46078, CVE-2026-46079, CVE-2026-46080, CVE-2026-46082, CVE-2026-46083, CVE-2026-46084, CVE-2026-46086, CVE-2026-46088, CVE-2026-46089, CVE-2026-46090, CVE-2026-46091, CVE-2026-46092, CVE-2026-46094, CVE-2026-46098, CVE-2026-46099, CVE-2026-46101, CVE-2026-46102, CVE-2026-46103, CVE-2026-46106, CVE-2026-46107, CVE-2026-46108, CVE-2026-46110, CVE-2026-46111, CVE-2026-46112, CVE-2026-46113, CVE-2026-46114, CVE-2026-46115, CVE-2026-46116, CVE-2026-46117, CVE-2026-46119, CVE-2026-46120, CVE-2026-46121, CVE-2026-46122, CVE-2026-46123, CVE-2026-46124, CVE-2026-46125, CVE-2026-46126, CVE-2026-46127, CVE-2026-46128, CVE-2026-46129, CVE-2026-46131, CVE-2026-46132, CVE-2026-46133, CVE-2026-46135, CVE-2026-46136, CVE-2026-46137, CVE-2026-46138, CVE-2026-46139, CVE-2026-46142, CVE-2026-46143, CVE-2026-46144, CVE-2026-46145, CVE-2026-46146, CVE-2026-46149, CVE-2026-46150, CVE-2026-46151, CVE-2026-46152, CVE-2026-46157, CVE-2026-46159, CVE-2026-46160, CVE-2026-46161, CVE-2026-46163, CVE-2026-46164, CVE-2026-46167, CVE-2026-46168, CVE-2026-46169, CVE-2026-46172, CVE-2026-46173, CVE-2026-46174, CVE-2026-46176, CVE-2026-46177, CVE-2026-46178, CVE-2026-46179, CVE-2026-46180, CVE-2026-46184, CVE-2026-46185, CVE-2026-46186, CVE-2026-46187, CVE-2026-46189, CVE-2026-46190, CVE-2026-46191, CVE-2026-46193, CVE-2026-46194, CVE-2026-46195, CVE-2026-46196, CVE-2026-46197, CVE-2026-46198, CVE-2026-46199, CVE-2026-46200, CVE-2026-46201, CVE-2026-46204, CVE-2026-46205, CVE-2026-46206, CVE-2026-46207, CVE-2026-46208, CVE-2026-46209, CVE-2026-46211, CVE-2026-46212, CVE-2026-46214, CVE-2026-46218, CVE-2026-46219, CVE-2026-46220, CVE-2026-46225, CVE-2026-46226, CVE-2026-46227, CVE-2026-46229, CVE-2026-46230, CVE-2026-46231, CVE-2026-46232, CVE-2026-46233, CVE-2026-46234, CVE-2026-46235, CVE-2026-46236, CVE-2026-46238, CVE-2026-46241, CVE-2026-46243, CVE-2026-46244, CVE-2026-46273, CVE-2026-46274, CVE-2026-46276, CVE-2026-46280, CVE-2026-46282, CVE-2026-46285, CVE-2026-46286, CVE-2026-46287, CVE-2026-46289, CVE-2026-46291, CVE-2026-46292, CVE-2026-46293, CVE-2026-46294, CVE-2026-46296, CVE-2026-46299, CVE-2026-46301, CVE-2026-46303, CVE-2026-46304, CVE-2026-46306, CVE-2026-46307, CVE-2026-46312, CVE-2026-46314, CVE-2026-46319, CVE-2026-46569, CVE-2026-46570, CVE-2026-46571, CVE-2026-46572, CVE-2026-47709, CVE-2026-47714, CVE-2026-50812, CVE-2026-50813, CVE-2026-54411, CVE-2026-56135, CVE-2026-56136, CVE-2026-5704, CVE-2026-5745, CVE-2026-58469, CVE-2026-58470, CVE-2026-58471, CVE-2026-58472, CVE-2026-59856, CVE-2026-59857, CVE-2026-59858, CVE-2026-59939, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002, CVE-2026-61548, and CVE-2026-9494.

Kubernetes 1.36.2

For more information, see the change logs.

containerd 2.2.6

For more information, see the change logs.

HAProxy 346c7130717ef7cc25d1dfbca7d57ca32396b692

Resolves the following CVEs: CVE-2026-6238, CVE-2026-5928, CVE-2026-48864, CVE-2026-54370, CVE-2026-28390, CVE-2026-5435, CVE-2025-13151, CVE-2026-54369, CVE-2026-58016, and CVE-2025-6170.

GPU Device Plug-in and Installer a4b6a3ff753749da7e6274c83c55a17c5f3f3cfc

Resolves the following CVEs: CVE-2026-54370, CVE-2026-44431, CVE-2026-58016, CVE-2026-48864, CVE-2026-5450, CVE-2025-13151, CVE-2025-6170, CVE-2026-15308, CVE-2026-28390, and CVE-2026-54369.

Master fix pack 1.36.2_1523, released 28 July 2026

The following list shows the components that are in the master fix pack 1.36.2_1523. Master patch updates are applied automatically.

Calico v3.31.6

See the Calico release notes.

Cluster health image v1.6.17

New version contains updates and security fixes.

IBM Cloud Controller Manager v1.36.2-4

New version contains updates and security fixes.

IBM Cloud RBAC Operator 92ba7dd

New version contains updates and security fixes.

Key Management Service provider 2.10.27

New version contains updates and security fixes.

Portieris admission controller v0.14.2

See the Portieris admission controller release notes

Tigera Operator v1.40.13

See the Tigera Operator release notes.

Worker node fix pack 1.36.2_1522, released 13 July 2026

The following list shows the components included in the worker node fix pack 1.36.2_1522. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

UBUNTU 24 (VPC) 6.8.0-134-generic

Resolves the following CVEs: CVE-2021-4189, CVE-2024-54661, CVE-2025-13462, CVE-2025-40005, CVE-2025-45582, CVE-2025-69534, CVE-2025-69720, CVE-2025-71229, CVE-2025-71231, CVE-2025-71232, CVE-2025-71233, CVE-2025-71235, CVE-2025-71236, CVE-2025-71237, CVE-2025-71239, CVE-2025-71265, CVE-2025-71266, CVE-2025-71267, CVE-2026-0672, CVE-2026-10536, CVE-2026-11822, CVE-2026-11824, CVE-2026-12318, CVE-2026-1299, CVE-2026-1502, CVE-2026-2297, CVE-2026-23169, CVE-2026-23220, CVE-2026-23222, CVE-2026-23228, CVE-2026-23229, CVE-2026-23230, CVE-2026-23241, CVE-2026-23242, CVE-2026-23243, CVE-2026-23249, CVE-2026-23272, CVE-2026-23278, CVE-2026-23392, CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31411, CVE-2026-31418, CVE-2026-31419, CVE-2026-31431, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478, CVE-2026-31504, CVE-2026-31533, CVE-2026-31607, CVE-2026-31637, CVE-2026-31649, CVE-2026-31657, CVE-2026-31659, CVE-2026-31668, CVE-2026-31669, CVE-2026-31676, CVE-2026-31682, CVE-2026-31685, CVE-2026-3276, CVE-2026-3644, CVE-2026-41991, CVE-2026-41992, CVE-2026-4224, CVE-2026-43011, CVE-2026-43037, CVE-2026-43038, CVE-2026-43071, CVE-2026-43114, CVE-2026-43117, CVE-2026-43185, CVE-2026-43284, CVE-2026-43341, CVE-2026-43378, CVE-2026-43383, CVE-2026-43384, CVE-2026-43406, CVE-2026-43407, CVE-2026-43414, CVE-2026-43493, CVE-2026-43500, CVE-2026-43501, CVE-2026-4519, CVE-2026-45988, CVE-2026-46043, CVE-2026-46115, CVE-2026-46119, CVE-2026-46135, CVE-2026-46185, CVE-2026-46195, CVE-2026-46243, CVE-2026-46244, CVE-2026-46289, CVE-2026-46300, CVE-2026-46333, CVE-2026-47326, CVE-2026-47327, CVE-2026-47328, CVE-2026-47329, CVE-2026-47330, CVE-2026-47331, CVE-2026-47332, CVE-2026-47333, CVE-2026-47334, CVE-2026-47335, CVE-2026-47336, CVE-2026-47337, CVE-2026-4786, CVE-2026-55693, CVE-2026-55892, CVE-2026-55895, CVE-2026-56123, CVE-2026-57452, CVE-2026-57455, CVE-2026-57456, CVE-2026-5773, CVE-2026-58055, CVE-2026-6019, CVE-2026-6100, CVE-2026-7774, CVE-2026-8286, CVE-2026-8328, CVE-2026-8458, CVE-2026-8924, CVE-2026-8925, CVE-2026-8927, CVE-2026-9547, and CVE-2026-9669.

UBUNTU 24 (Classic) 6.8.0-134-generic

Resolves the following CVEs: CVE-2021-4189, CVE-2024-54661, CVE-2025-13462, CVE-2025-40005, CVE-2025-45582, CVE-2025-69534, CVE-2025-69720, CVE-2025-71229, CVE-2025-71231, CVE-2025-71232, CVE-2025-71233, CVE-2025-71235, CVE-2025-71236, CVE-2025-71237, CVE-2025-71239, CVE-2025-71265, CVE-2025-71266, CVE-2025-71267, CVE-2026-0672, CVE-2026-10536, CVE-2026-11822, CVE-2026-11824, CVE-2026-12318, CVE-2026-1299, CVE-2026-1502, CVE-2026-2297, CVE-2026-23169, CVE-2026-23220, CVE-2026-23222, CVE-2026-23228, CVE-2026-23229, CVE-2026-23230, CVE-2026-23241, CVE-2026-23242, CVE-2026-23243, CVE-2026-23249, CVE-2026-23272, CVE-2026-23278, CVE-2026-23392, CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31411, CVE-2026-31418, CVE-2026-31419, CVE-2026-31431, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478, CVE-2026-31504, CVE-2026-31533, CVE-2026-31607, CVE-2026-31637, CVE-2026-31649, CVE-2026-31657, CVE-2026-31659, CVE-2026-31668, CVE-2026-31669, CVE-2026-31676, CVE-2026-31682, CVE-2026-31685, CVE-2026-3276, CVE-2026-3644, CVE-2026-41991, CVE-2026-41992, CVE-2026-4224, CVE-2026-43011, CVE-2026-43037, CVE-2026-43038, CVE-2026-43071, CVE-2026-43114, CVE-2026-43117, CVE-2026-43185, CVE-2026-43284, CVE-2026-43341, CVE-2026-43378, CVE-2026-43383, CVE-2026-43384, CVE-2026-43406, CVE-2026-43407, CVE-2026-43414, CVE-2026-43493, CVE-2026-43500, CVE-2026-43501, CVE-2026-4519, CVE-2026-45988, CVE-2026-46043, CVE-2026-46115, CVE-2026-46119, CVE-2026-46135, CVE-2026-46185, CVE-2026-46195, CVE-2026-46243, CVE-2026-46244, CVE-2026-46289, CVE-2026-46300, CVE-2026-46333, CVE-2026-47326, CVE-2026-47327, CVE-2026-47328, CVE-2026-47329, CVE-2026-47330, CVE-2026-47331, CVE-2026-47332, CVE-2026-47333, CVE-2026-47334, CVE-2026-47335, CVE-2026-47336, CVE-2026-47337, CVE-2026-4786, CVE-2026-55693, CVE-2026-55892, CVE-2026-55895, CVE-2026-56123, CVE-2026-57452, CVE-2026-57455, CVE-2026-57456, CVE-2026-5773, CVE-2026-58055, CVE-2026-6019, CVE-2026-6100, CVE-2026-7774, CVE-2026-8286, CVE-2026-8328, CVE-2026-8458, CVE-2026-8924, CVE-2026-8925, CVE-2026-8927, CVE-2026-9547, and CVE-2026-9669.

Kubernetes 1.36.2

For more information, see the change logs.

containerd 2.2.5

For more information, see the change logs.

HAProxy 27f76d0c7626993cde6e1ff90fa42253718cc5fa

Resolves the following CVEs: CVE-2026-5450.

GPU Device Plug-in and Installer ec8f279d185b792b940dd2d39c7551b8a319beb8

Resolves the following CVEs: CVE-2025-6170, CVE-2026-48864, CVE-2026-44431, and CVE-2026-5450.

Worker node fix pack 1.36.2_1519, released 01 July 2026

The following list shows the components included in the worker node fix pack 1.36.2_1519. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

UBUNTU 24 (VPC) 6.8.0-124-generic

Resolves the following CVEs: CVE-2026-32741, CVE-2026-32814, CVE-2026-32882, CVE-2026-42496, CVE-2026-47162, CVE-2026-47167, CVE-2026-52858, CVE-2026-52859, CVE-2026-52860, CVE-2026-55203, CVE-2026-55204, CVE-2026-5704, CVE-2026-6653, and CVE-2026-8376.

UBUNTU 24 (Classic) 6.8.0-124-generic

Resolves the following CVEs: CVE-2026-32741, CVE-2026-32814, CVE-2026-32882, CVE-2026-42496, CVE-2026-47162, CVE-2026-47167, CVE-2026-52858, CVE-2026-52859, CVE-2026-52860, CVE-2026-55203, CVE-2026-55204, CVE-2026-5704, CVE-2026-6653, and CVE-2026-8376.

Kubernetes 1.36.2

For more information, see the change logs.

containerd 2.2.5

For more information, see the change logs.

HAProxy 119de539a7da3c92449b38e1531722802988e50c

Resolves the following CVEs: CVE-2026-45447, CVE-2024-4741, and CVE-2024-34459.

GPU Device Plug-in and Installer 0e6e6f89d8902362ba15eaa41555820f61257069

Resolves the following CVEs: CVE-2026-45447, CVE-2024-4741, CVE-2024-34459, and CVE-2026-4046.