# Talos Linux v1.13.10 - Product: Talos Linux (https://whatsnew.fyi/product/talos-linux) - Vendor: Sidero Labs - Date: 2026-09-03 - Version: v1.13.10 - Original notes: https://github.com/siderolabs/talos/releases/tag/v1.13.10 - Permalink: https://whatsnew.fyi/product/talos-linux/releases/v1.13.10 What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog. Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'. --- - **fixed** — Update DHCP library - **fixed** — Harden the code around kubelet's client certificate handling - **fixed** — Normalize image reference when passing to image verification flow - **fixed** — Filter out passed metadata in API proxying - **fixed** — Treat desired roles empty as error in Talos API access - **fixed** — Allow CSI volumes to be mounted with an SELinux context - **fixed** — Validate received kubeconfig - **changed** — Update etcd to v3.6.14 - **fixed** — Use os.Root in the talosctl extract path - **fixed** — Escape output in the talosctl dashboard - **fixed** — Add checks for meta key in the API path - **added** — Update COSI to 1.16.3 - **fixed** — Route creation churning every 100ms - **fixed** — Preserve special modes when extracting files - **fixed** — Use os.Root in the untar path - **fixed** — Create parent directories when extracting tar archives - **fixed** — Write the uploaded etcd snapshot atomically - **fixed** — Skip selinux label for read-only/detached/external mounts - **fixed** — Persist in-memory meta on fresh install - **fixed** — Reduce stalls in the etcd member promotion cycle ##### [Talos 1.13.10](https://github.com/siderolabs/talos/releases/tag/v1.13.10) (2026-09-03) Welcome to the v1.13.10 release of Talos! Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues. ###### Component Updates Linux: 6.18.48 CoreDNS: 1.14.7 Talos is built with Go 1.26.7 ###### Contributors * Andrey Smirnov * Mateusz Urbanek * Noel Georgi * Dima Aratin * Ivan Demchuk * Maja Bojarska * Max Makarov * Utku Ozdemir * immanuwell ###### Changes
28 commits

* siderolabs/talos@00ca4c987 release(v1.13.10): prepare release * siderolabs/talos@271ce0dc8 fix: update DHCP library * siderolabs/talos@3c70f4054 fix: harden the code around kubelet's client certificate handling * siderolabs/talos@40d7de4c0 fix: normalize image reference when passing to image verification flow * siderolabs/talos@cf30d6df4 fix: filter out passed metadata in API proxying * siderolabs/talos@cc556d9ce fix: treat desired roles empty as error in Talos API access * siderolabs/talos@0d7a47305 fix: allow CSI volumes to be mounted with an SELinux context * siderolabs/talos@17ab196fe fix: validate received kubeconfig * siderolabs/talos@934ae8a2b chore: update etcd to v3.6.14 * siderolabs/talos@df9b82dce chore: update pkgs and tools * siderolabs/talos@591c53aac fix: use os.Root in the talosctl extract path * siderolabs/talos@c36d99001 fix: escape output in the talosctl dashboard * siderolabs/talos@fc355dcd3 fix: add checks for meta key in the API path * siderolabs/talos@e950f655e feat: update COSI to 1.16.3 * siderolabs/talos@20cafbdb3 fix: route creation churning every 100ms * siderolabs/talos@c6fe78c61 chore: reduce verbosity of the grype scan * siderolabs/talos@b9696f9d7 fix: preserve special modes when extracting files * siderolabs/talos@865aaec80 fix: use os.Root in the untar path * siderolabs/talos@097fa184e fix: create parent directories when extracting tar archives * siderolabs/talos@c6edc3911 chore: bump sigstore/rekor to v1.5.4 * siderolabs/talos@6d062e13b fix: write the uploaded etcd snapshot atomically * siderolabs/talos@f6b795970 fix: skip selinux label for read-only/detached/external mounts * siderolabs/talos@bea850ac3 fix: persist in-memory meta on fresh install * siderolabs/talos@dcf46c11e fix: reduce stalls in the etcd member promotion cycle * siderolabs/talos@0f4d08a1f feat: update CoreDNS to 1.14.7 * siderolabs/talos@e0916388e fix: watch IPv6 route changes in RouteSpecController * siderolabs/talos@92614ca8a fix: truncate files replaced by system extensions * siderolabs/talos@b7b27ec29 fix: skip target settings for external volume mounts

###### Changes from siderolabs/pkgs
5 commits

* siderolabs/pkgs@9b044c5 feat: update kernel to 6.18.48 * siderolabs/pkgs@de74a50 feat: bump kernel to 6.18.47 * siderolabs/pkgs@bb15c62 chore: update toolchain and tools * siderolabs/pkgs@49c50f7 feat: bump kernel to 6.18.46 * siderolabs/pkgs@2da2cdc feat: backport aes256k support (Ceph)

###### Changes from siderolabs/tools
3 commits

* siderolabs/tools@c70be08 chore: update toolchain * siderolabs/tools@7791f48 feat: use kernel gnu mirrors * siderolabs/tools@d908dc0 fix: update OpenSSL to 3.6.4

###### Dependency Changes * **github.com/Azure/azure-sdk-for-go/sdk/azcore** v1.21.1 -> v1.22.0 * **github.com/Azure/azure-sdk-for-go/sdk/azidentity** v1.13.1 -> v1.14.0 * **github.com/aws/aws-sdk-go-v2** v1.41.7 -> v1.43.0 * **github.com/aws/aws-sdk-go-v2/config** v1.32.17 -> v1.32.31 * **github.com/aws/aws-sdk-go-v2/feature/ec2/imds** v1.18.23 -> v1.18.31 * **github.com/aws/aws-sdk-go-v2/service/kms** v1.52.0 -> v1.55.0 * **github.com/aws/smithy-go** v1.25.1 -> v1.27.3 * **github.com/cosi-project/runtim _[Truncated at 4000 characters — full notes: https://github.com/siderolabs/talos/releases/tag/v1.13.10]_