1.34 version change log
View information of version changes for major, minor, and patch updates that are available for your IBM Cloud® Kubernetes Service clusters that run this version. Changes include updates to Kubernetes and IBM Cloud Provider components.
Overview
In Kubernetes, most new beta features are disabled by default. Alpha features, which are subject to change, are disabled in all versions. For more information, see the Default service settings for Kubernetes components and the feature gates for each version.
For more information about major, minor, and patch versions and preparation actions between minor versions, see Kubernetes versions.
Check the Security Bulletins on IBM Cloud Status for security vulnerabilities that affect IBM Cloud Kubernetes Service. You can filter the results to view only Kubernetes Cluster security bulletins that are relevant to IBM Cloud Kubernetes Service. Change log entries that address other security vulnerabilities but don't also refer to an IBM security bulletin are for vulnerabilities that are not known to affect IBM Cloud Kubernetes Service in normal usage. If you run privileged containers, run commands on the workers, or execute untrusted code, then you might be at risk.
Some change logs are for worker node fix packs, and apply only to worker nodes. You must apply these patches to ensure security compliance for your worker nodes. These worker node fix packs can be at a higher version than the master because some build fix packs are specific to worker nodes. Other change logs are for master fix packs, and apply only to the cluster master. Master fix packs might not be automatically applied. You can choose to apply them manually. For more information about patch types, see Update types.
Version 1.34
Master fix pack 1.34.8_1552, released 22 May 2026
The following table shows the components that are in the master fix pack 1.34.8_1552. Master patch updates are applied automatically.
| Component | Description |
|---|---|
| Calico v3.30.7 | See the Calico release notes. |
| etcd v3.5.29 | See the etcd release notes. |
| IBM Cloud Controller Manager v1.34.7-4 | New version contains updates and security fixes. |
| Key Management Service provider 2.10.24 | New version contains updates and security fixes. |
| Kubernetes v1.34.8 | See the Kubernetes release notes. |
| Kubernetes DNS autoscaler v1.10.3 | See the Kubernetes DNS autoscaler release notes. |
| Portieris admission controller v0.13.38 | See the Portieris admission controller release notes |
| Tigera Operator v1.38.13 | See the Tigera Operator release notes. |
Worker node fix pack 1.34.8_1553, released 20 May 2026
The following table shows the components included in the worker node fix pack 1.34.8_1553. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU 24 (VPC) 6.8.0-111-generic | Resolves the following CVEs: CVE-2026-4873, CVE-2026-5545, CVE-2026-5773, CVE-2026-5958, CVE-2026-6253, CVE-2026-6276, CVE-2026-6429, CVE-2026-7168, CVE-2026-23231, and CVE-2026-23112. |
| UBUNTU 24 (Classic) 6.8.0-111-generic | Resolves the following CVEs: CVE-2026-4873, CVE-2026-5545, CVE-2026-5773, CVE-2026-5958, CVE-2026-6253, CVE-2026-6276, CVE-2026-6429, CVE-2026-7168, CVE-2026-23231, and CVE-2026-23112. |
| Kubernetes 1.34.8 | For more information, see the change logs. |
| containerd 2.2.3 | For more information, see the change logs. |
| HAProxy 6ba93946d8bd08ba581321189c719ab548cadf01 | Resolves the following CVEs: CVE-2025-9714, CVE-2026-4424, CVE-2026-40356, CVE-2025-14512, CVE-2026-4878, CVE-2026-40355, CVE-2026-5121, and CVE-2025-14087. |
| GPU Device Plug-in and Installer 1a75f11af9e46a59f058ac046c51c5efb695e51c | Resolves the following CVEs: CVE-2026-0915, CVE-2025-15281, CVE-2026-40355, CVE-2026-40356, CVE-2026-4878, CVE-2025-14512, and CVE-2025-14087. |
Worker node fix pack 1.34.7_1551, released 04 May 2026
The following table shows the components included in the worker node fix pack 1.34.7_1551. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
Master fix pack 1.34.7_1550, released 27 April 2026
The following table shows the components that are in the master fix pack 1.34.7_1550. Master patch updates are applied automatically.
| Component | Description |
|---|---|
| Calico v3.30.7 | See the Calico release notes. |
| Cluster health image v1.6.15 | New version contains updates and security fixes. |
| etcd v3.5.29 | See the etcd release notes. |
| IBM Cloud Block Storage driver and plug-in v2.5.25 | New version contains updates and security fixes. |
| IBM Cloud Controller Manager v1.34.6-2 | New version contains updates and security fixes. |
| IBM Cloud File Storage for Classic plug-in and monitor v454 | New version contains updates and security fixes. |
| IBM Cloud Metrics Server Config Watcher v1.1.11 | New version contains updates and security fixes. |
| IBM Cloud RBAC Operator 6212368 | New version contains updates and security fixes. |
| Key Management Service provider 2.10.23 | New version contains updates and security fixes. |
| Kubernetes v1.34.7 | See the Kubernetes release notes. |
| Kubernetes DNS autoscaler v1.10.3 | See the Kubernetes DNS autoscaler release notes. |
| Kubernetes Metrics Server v0.8.1 | See the Kubernetes Metrics Server release notes. |
| Load balancer and load balancer monitor for IBM Cloud Provider 3563 | New version contains updates and security fixes. |
| Portieris admission controller v0.13.37 | See the Portieris admission controller release notes |
| Tigera Operator v1.38.13 | See the Tigera Operator release notes. |
Worker node fix pack 1.34.7_1550, released 20 April 2026
The following table shows the components included in the worker node fix pack 1.34.7_1550. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU 24 (VPC) 6.8.0-107-generic | Resolves the following CVEs: CVE-2025-5918, CVE-2025-60753, CVE-2026-23060, CVE-2026-23074, CVE-2026-23111, CVE-2026-28387, CVE-2026-28388, CVE-2026-28389, CVE-2026-28390, CVE-2026-31789, CVE-2026-31790, CVE-2026-32249, CVE-2026-33412, CVE-2026-34982, CVE-2026-4111, and CVE-2026-4897. |
| UBUNTU 24 (Classic) 6.8.0-107-generic | Resolves the following CVEs: CVE-2025-5918, CVE-2025-60753, CVE-2026-23060, CVE-2026-23074, CVE-2026-23111, CVE-2026-28387, CVE-2026-28388, CVE-2026-28389, CVE-2026-28390, CVE-2026-31789, CVE-2026-31790, CVE-2026-32249, CVE-2026-33412, CVE-2026-34982, CVE-2026-4111, and CVE-2026-4897. |
| Kubernetes 1.34.7 | For more information, see the change logs. |
| containerd 2.2.3 | For more information, see the change logs. |
| HAProxy c7e825675cbd75e8433801c99f8aca3b207a5a46 | Resolves the following CVEs: CVE-2026-27135. |
| GPU Device Plug-in and Installer a51f753c5b377589a30ca4121042925d2fc24ce9 | Resolves the following CVEs: CVE-2026-0915, CVE-2025-15281, and CVE-2026-27135. |
Worker node fix pack 1.34.6_1548, released 06 April 2026
The following table shows the components included in the worker node fix pack 1.34.6_1548. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
Change log for Master fix pack 1.34.6_1547, released 02 April 2026
The following table shows the changes that are in the master fix pack 1.34.6_1547. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Cluster health control-plane operator | v0.1.15 | v0.1.20 | N/A |
| Cluster health image | v1.6.13 | v1.6.15 | New version contains updates and security fixes. |
| etcd | v3.5.26 | v3.5.27 | See the etcd release notes. |
| IBM Cloud Block Storage driver and plug-in | v2.5.22 | v2.5.25 | New version contains updates and security fixes. |
| IBM Cloud Controller Manager | v1.34.3-3 | v1.34.5-2 | New version contains updates and security fixes. |
| IBM Cloud File Storage for Classic for Classic plug-in and monitor | 452 | v454 | New version contains updates and security fixes. |
| IBM Cloud Metrics Server Config Watcher | v1.1.9 | v1.1.11 | New version contains updates and security fixes. |
| IBM Cloud RBAC Operator | 8a12251 | 6212368 | New version contains updates and security fixes. |
| Key Management Service provider | v2.10.20 | 2.10.22 | New version contains updates and security fixes. |
| Kubernetes | v1.34.3 | v1.34.6 | See the Kubernetes release notes. |
| Kubernetes Metrics Server | v0.8.0 | v0.8.1 | See the Kubernetes Metrics Server release notes. |
| Load balancer and load balancer monitor for IBM Cloud Provider | 3347 | 3563 | New version contains updates and security fixes. |
| Portieris admission controller | v0.13.33 | v0.13.36 | See the Portieris admission controller release notes. |
Worker node fix pack 1.34.6_1547, released 24 March 2026
The following table shows the components included in the worker node fix pack 1.34.6_1547. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU 24 (VPC) 6.8.0-101-generic | Resolves the following CVEs: CVE-2025-0167, CVE-2025-15366, CVE-2025-15367, CVE-2026-23865, CVE-2026-25749, CVE-2026-26007, CVE-2026-26269, CVE-2026-28417, CVE-2026-28418, CVE-2026-28419, CVE-2026-28420, CVE-2026-28421, CVE-2026-28422, CVE-2026-3497, and CVE-2026-3731. |
| UBUNTU 24 (Classic) 6.8.0-101-generic | Resolves the following CVEs: CVE-2025-0167, CVE-2025-15366, CVE-2025-15367, CVE-2026-23865, CVE-2026-25749, CVE-2026-26007, CVE-2026-26269, CVE-2026-28417, CVE-2026-28418, CVE-2026-28419, CVE-2026-28420, CVE-2026-28421, CVE-2026-28422, CVE-2026-3497, and CVE-2026-3731. |
| Kubernetes 1.34.6 | For more information, see the change logs. |
| containerd 2.2.2 | For more information, see the change logs. |
| HAProxy 10c8639e6b5829d0af51a22755e13756f34630cf | Resolves the following CVEs: CVE-2025-15281, and CVE-2026-0915. |
| GPU Device Plug-in and Installer 1c4faba733bd6bce95c85ead9a63e1ff0bbce86b | Resolves the following CVEs: CVE-2026-0915, CVE-2026-25749, and CVE-2025-15281. |
Worker node fix pack 1.34.4_1545, released 11 March 2026
The following table shows the components included in the worker node fix pack 1.34.4_1545. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU 24 (VPC) 6.8.0-100-generic | Resolves the following CVEs: CVE-2025-10148, CVE-2025-14017, CVE-2025-14524, CVE-2025-14819, CVE-2025-15079, CVE-2025-15224, CVE-2025-22037, CVE-2025-37899, and CVE-2026-2781. |
| UBUNTU 24 (Classic) 6.8.0-100-generic | Resolves the following CVEs: CVE-2025-10148, CVE-2025-14017, CVE-2025-14524, CVE-2025-14819, CVE-2025-15079, CVE-2025-15224, CVE-2025-22037, CVE-2025-37899, and CVE-2026-2781. |
| Kubernetes 1.34.4 | For more information, see the change logs. |
| containerd 2.2.1 | For more information, see the change logs. |
| HAProxy 965c403695b15b3410d87a3772002edbc5ed2569 | Resolves the following CVEs: CVE-2025-69419. |
| GPU Device Plug-in and Installer dc588cffda45a3831875a9236f7c34eb4aadb71c | Resolves the following CVEs: CVE-2025-69419. |
Worker node fix pack 1.34.4_1544, released 24 February 2026
The following table shows the components included in the worker node fix pack 1.34.4_1544. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU 24 (VPC) 6.8.0-100-generic | Resolves the following CVEs: CVE-2025-14831, CVE-2025-8277, CVE-2025-9820, CVE-2026-0964, CVE-2026-0965, CVE-2026-0966, CVE-2026-0967, CVE-2026-0968, CVE-2026-24515, CVE-2026-25210, and CVE-2026-25646. |
| UBUNTU 24 (Classic) 6.8.0-100-generic | Resolves the following CVEs: CVE-2025-14831, CVE-2025-8277, CVE-2025-9820, CVE-2026-0964, CVE-2026-0965, CVE-2026-0966, CVE-2026-0967, CVE-2026-0968, CVE-2026-24515, CVE-2026-25210, and CVE-2026-25646. |
| Kubernetes 1.34.4 | For more information, see the change logs. |
| containerd 2.2.1 | For more information, see the change logs. |
| HAProxy 2bf1aebe51a37cd9b4661656ce21e53f918166ea | Resolves the following CVEs: CVE-2025-6176. |
| GPU Device Plug-in and Installer 19ce461883e9fe115df89258f0b4568daff1795e | Resolves the following CVEs: CVE-2025-15367, CVE-2026-0865, CVE-2026-1299, CVE-2024-6923, CVE-2025-15366, and CVE-2025-6176. |
Change log for Master fix pack 1.34.4_1543, released 18 February 2026
The following table shows the changes that are in the master fix pack 1.34.4_1543. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Cluster health image | v1.6.13 | v1.6.14 | New version contains updates and security fixes. |
| IBM Cloud Block Storage driver and plug-in | v2.5.22 | v2.5.24 | New version contains updates and security fixes. |
| IBM Cloud Controller Manager | v1.34.3-3 | v1.34.3-7 | New version contains updates and security fixes. |
| IBM Cloud File Storage for Classic for Classic plug-in and monitor | 452 | v453 | New version contains updates and security fixes. |
| Key Management Service provider | v2.10.20 | 2.10.21 | New version contains updates and security fixes. |
| Kubernetes | v1.34.3 | v1.34.4 | See the Kubernetes release notes. |
| Portieris admission controller | v0.13.33 | v0.13.35 | See the Portieris admission controller release notes. |
Worker node fix pack 1.34.3_1542, released 09 February 2026
The following table shows the components included in the worker node fix pack 1.34.3_1542. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
Worker node fix pack 1.34.3_1541, released 27 January 2026
The following table shows the components included in the worker node fix pack 1.34.3_1541. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU 24 (VPC) 6.8.0-90-generic | Resolves the following CVEs: CVE-2025-11230, CVE-2025-8732, CVE-2026-0988, CVE-2026-0989, CVE-2026-0990, CVE-2026-0992, and CVE-2026-23490. |
| UBUNTU 24 (Classic) 6.8.0-90-generic | Resolves the following CVEs: CVE-2025-11230, CVE-2025-8732, CVE-2026-0988, CVE-2026-0989, CVE-2026-0990, CVE-2026-0992, and CVE-2026-23490. |
| Kubernetes 1.34.3 | For more information, see the change logs. |
| containerd 2.2.1 | For more information, see the change logs. |
| HAProxy c9cb5ad988e916d184d1c308d4f2e5c502d99523 | Resolves the following CVEs: CVE-2025-68973, CVE-2025-13601, and CVE-2025-9230. |
| GPU Device Plug-in and Installer 988adbf62747d86883413ca1773f4bc5141dd516 | Resolves the following CVEs: CVE-2025-13601, and CVE-2025-68973. |
Master fix pack 1.34.3_1539, released 21 January 2026
The following table shows the changes that are in the master fix pack 1.34.3_1539. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Cluster health control-plane operator | v0.1.11 | v0.1.15 | New version contains updates and security fixes. |
| etcd | v3.5.25 | v3.5.26 | See the etcd release notes. |
| IBM Cloud Controller Manager | v1.34.2-3 | v1.34.3-3 | New version contains updates and security fixes. |
| Key Management Service provider | v2.10.19 | 2.10.20 | New version contains updates and security fixes. |
| Kubernetes | v1.34.2 | v1.34.3 | See the Kubernetes release notes. |
Worker node fix pack 1.34.2_1540, released 17 January 2026
The following table shows the components included in the worker node fix pack 1.34.2_1540. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU 24 6.8.0-90-generic | Resolves the following CVEs: CVE-2016-9843, CVE-2024-25269, CVE-2025-13151, CVE-2025-13836, CVE-2025-66293, CVE-2025-66471, CVE-2025-68431, CVE-2026-21441, CVE-2026-22695, and CVE-2026-22801. |
| Kubernetes 1.34.2 | For more information, see the change logs. |
| containerd 2.2.0 | For more information, see the change logs. |
| HAProxy d04e61c5b29aa5328bc72455edb95e08e8f6d85c | N/A |
| GPU Device Plug-in and Installer b47cd687497789860e50db2fb84d0b43a4b6d5a4 | N/A |
Worker node fix pack 1.34.2_1537, released 12 January 2026
The following table shows the components included in the worker node fix pack 1.34.2_1537. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU 24 6.8.0-90-generic | CIS benchmark compliance 1.1.1.1, 2.2.6, 4.4.3.1, 4.4.3.2, 5.3.2.2, 5.3.3.1.1, 5.3.3.1.2, 5.3.3.2.5, 5.3.3.2.8, 5.3.3.3.1, 5.3.3.3.2, 5.3.3.3.3, 5.3.3.4.1,5.4.1.5, 6.1.1.3, 6.1.4.1Resolves the following CVEs: CVE-2025-13601, CVE-2025-14087, CVE-2025-3360, CVE-2025-6052, CVE-2025-68973, CVE-2025-69277, CVE-2025-7039, and CVE-2025-7424. |
| Kubernetes 1.34.2 | For more information, see the change logs. |
| containerd 2.2.0 | For more information, see the change logs. |
| HAProxy d04e61c5b29aa5328bc72455edb95e08e8f6d85c | N/A |
| GPU Device Plug-in and Installer b47cd687497789860e50db2fb84d0b43a4b6d5a4 | Resolves the following CVEs: CVE-2025-45582. |
Worker node fix pack 1.34.2_1536, released 29 December 2025
The following table shows the components included in the worker node fix pack 1.34.2_1536. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU 24 6.8.0-90-generic | Resolves the following CVEs: CVE-2025-39993, CVE-2025-40018, CVE-2025-39964, CVE-2025-37958, and CVE-2025-38666. |
| Kubernetes 1.34.2 | For more information, see the change logs. |
| containerd 2.2.0 | For more information, see the change logs. |
| HAProxy d04e61c5b29aa5328bc72455edb95e08e8f6d85c | Resolves the following CVEs: CVE-2025-9086. |
| GPU Device Plug-in and Installer 0057dcb30bc3a8446f9a4eeef56228e56e935b66 | Resolves the following CVEs: CVE-2025-8291, CVE-2025-6069, CVE-2024-5642, and CVE-2025-6075. |
Worker node fix pack 1.34.2_1535, released 16 December 2025
The following table shows the components included in the worker node fix pack 1.34.2_1535. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU 24 6.8.0-88-generic | Resolves the following CVEs: CVE-2025-11412, CVE-2025-11413, CVE-2025-11414, CVE-2025-11494, CVE-2025-11839, CVE-2025-11840, CVE-2025-37958, CVE-2025-38666, CVE-2025-39964, CVE-2025-39993, CVE-2025-40018, CVE-2025-64505, CVE-2025-64506, CVE-2025-64720, CVE-2025-65018, CVE-2025-66418, CVE-2025-66471, and CVE-2025-6966. |
| Kubernetes 1.34.2 | For more information, see the change logs. |
| containerd 2.2.0 | For more information, see the change logs. |
| HAProxy 03b74b82b63cd53403b6b587b84233c93edef18d | N/A |
| GPU Device Plug-in and Installer 1b40f92bf929456042c1f42ba54fa73cdaafb653 | Resolves the following CVEs: CVE-2025-8058. |
Master fix pack 1.34.2_1534, released 10 December 2025
The following table shows the changes that are in the master fix pack 1.34.2_1534. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Calico | v3.29.6 | v3.29.7 | See the Calico release notes. |
| Cluster health image | v1.6.10 | v1.6.13 | New version contains updates and security fixes. |
| etcd | v3.5.24 | v3.5.25 | See the etcd release notes. |
| IBM Cloud Controller Manager | v1.34.1-6 | v1.34.2-3 | New version contains updates and security fixes. |
| Key Management Service provider | v2.10.18 | 2.10.19 | New version contains updates and security fixes. |
| Konnectivity agent and server | v0.33.0 | v0.34.0 | See the Konnectivity release notes. |
| Kubernetes | v1.34.1 | v1.34.2 | See the Kubernetes release notes. |
| Portieris admission controller | v0.13.31 | v0.13.33 | See the Portieris admission controller release notes. |
| Tigera Operator | v1.36.14 | v1.36.16 | See the Tigera Operator release notes. |
Worker node fix pack 1.34.1_1531, released 03 December 2025
The following table shows the components included in the worker node fix pack 1.34.1_1531. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU 24 6.8.0-87-generic | Resolves the following CVEs: CVE-2025-37838, CVE-2025-38118, CVE-2025-38352, CVE-2025-40300, CVE-2025-6075, and CVE-2025-8291. |
| Kubernetes 1.34.1 | For more information, see the change logs. |
| containerd 2.2.0 | For more information, see the change logs. |
| HAProxy 03b74b82b63cd53403b6b587b84233c93edef18d | Resolves the following CVEs: CVE-2025-59375, CVE-2025-5372, CVE-2024-28757, and CVE-2022-23990. |
| GPU Device Plug-in and Installer 184bbc2d05e029bb5b0c3c18798c10697e950967 | Resolves the following CVEs: CVE-2025-59375. |
Worker node fix pack 1.34.1_1530, released 17 November 2025
The following table shows the components included in the worker node fix pack 1.34.1_1530. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU_24_04 6.8.0-86-generic | CIS benchmark compliance 2.2.4, 2.3.2.1, 5.1.1Resolves the following CVEs: CVE-2024-53008, and CVE-2025-32464. |
| Kubernetes 1.34.1 | For more information, see the change logs. |
| containerd 2.1.5 | For more information, see the change logs. |
| HAProxy fbe9b8146f23bbd12b2566a79fa897d5981e7273 | N/A |
| GPU Device Plug-in and Installer 1e3d028d8b22980ae70339db3b7f41575fe5ee5f | Resolves the following CVEs: CVE-2025-5318. |