# Talos Linux v1.13.10
- Product: Talos Linux (https://whatsnew.fyi/product/talos-linux)
- Vendor: Sidero Labs
- Date: 2026-09-03
- Version: v1.13.10
- Original notes: https://github.com/siderolabs/talos/releases/tag/v1.13.10
- Permalink: https://whatsnew.fyi/product/talos-linux/releases/v1.13.10
What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.
Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.
---
- **fixed** — Update DHCP library
- **fixed** — Harden the code around kubelet's client certificate handling
- **fixed** — Normalize image reference when passing to image verification flow
- **fixed** — Filter out passed metadata in API proxying
- **fixed** — Treat desired roles empty as error in Talos API access
- **fixed** — Allow CSI volumes to be mounted with an SELinux context
- **fixed** — Validate received kubeconfig
- **changed** — Update etcd to v3.6.14
- **fixed** — Use os.Root in the talosctl extract path
- **fixed** — Escape output in the talosctl dashboard
- **fixed** — Add checks for meta key in the API path
- **added** — Update COSI to 1.16.3
- **fixed** — Route creation churning every 100ms
- **fixed** — Preserve special modes when extracting files
- **fixed** — Use os.Root in the untar path
- **fixed** — Create parent directories when extracting tar archives
- **fixed** — Write the uploaded etcd snapshot atomically
- **fixed** — Skip selinux label for read-only/detached/external mounts
- **fixed** — Persist in-memory meta on fresh install
- **fixed** — Reduce stalls in the etcd member promotion cycle
##### [Talos 1.13.10](https://github.com/siderolabs/talos/releases/tag/v1.13.10) (2026-09-03)
Welcome to the v1.13.10 release of Talos!
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
###### Component Updates
Linux: 6.18.48
CoreDNS: 1.14.7
Talos is built with Go 1.26.7
###### Contributors
* Andrey Smirnov
* Mateusz Urbanek
* Noel Georgi
* Dima Aratin
* Ivan Demchuk
* Maja Bojarska
* Max Makarov
* Utku Ozdemir
* immanuwell
###### Changes
28 commits
* siderolabs/talos@00ca4c987 release(v1.13.10): prepare release
* siderolabs/talos@271ce0dc8 fix: update DHCP library
* siderolabs/talos@3c70f4054 fix: harden the code around kubelet's client certificate handling
* siderolabs/talos@40d7de4c0 fix: normalize image reference when passing to image verification flow
* siderolabs/talos@cf30d6df4 fix: filter out passed metadata in API proxying
* siderolabs/talos@cc556d9ce fix: treat desired roles empty as error in Talos API access
* siderolabs/talos@0d7a47305 fix: allow CSI volumes to be mounted with an SELinux context
* siderolabs/talos@17ab196fe fix: validate received kubeconfig
* siderolabs/talos@934ae8a2b chore: update etcd to v3.6.14
* siderolabs/talos@df9b82dce chore: update pkgs and tools
* siderolabs/talos@591c53aac fix: use os.Root in the talosctl extract path
* siderolabs/talos@c36d99001 fix: escape output in the talosctl dashboard
* siderolabs/talos@fc355dcd3 fix: add checks for meta key in the API path
* siderolabs/talos@e950f655e feat: update COSI to 1.16.3
* siderolabs/talos@20cafbdb3 fix: route creation churning every 100ms
* siderolabs/talos@c6fe78c61 chore: reduce verbosity of the grype scan
* siderolabs/talos@b9696f9d7 fix: preserve special modes when extracting files
* siderolabs/talos@865aaec80 fix: use os.Root in the untar path
* siderolabs/talos@097fa184e fix: create parent directories when extracting tar archives
* siderolabs/talos@c6edc3911 chore: bump sigstore/rekor to v1.5.4
* siderolabs/talos@6d062e13b fix: write the uploaded etcd snapshot atomically
* siderolabs/talos@f6b795970 fix: skip selinux label for read-only/detached/external mounts
* siderolabs/talos@bea850ac3 fix: persist in-memory meta on fresh install
* siderolabs/talos@dcf46c11e fix: reduce stalls in the etcd member promotion cycle
* siderolabs/talos@0f4d08a1f feat: update CoreDNS to 1.14.7
* siderolabs/talos@e0916388e fix: watch IPv6 route changes in RouteSpecController
* siderolabs/talos@92614ca8a fix: truncate files replaced by system extensions
* siderolabs/talos@b7b27ec29 fix: skip target settings for external volume mounts
###### Changes from siderolabs/pkgs
5 commits
* siderolabs/pkgs@9b044c5 feat: update kernel to 6.18.48
* siderolabs/pkgs@de74a50 feat: bump kernel to 6.18.47
* siderolabs/pkgs@bb15c62 chore: update toolchain and tools
* siderolabs/pkgs@49c50f7 feat: bump kernel to 6.18.46
* siderolabs/pkgs@2da2cdc feat: backport aes256k support (Ceph)
###### Changes from siderolabs/tools
3 commits
* siderolabs/tools@c70be08 chore: update toolchain
* siderolabs/tools@7791f48 feat: use kernel gnu mirrors
* siderolabs/tools@d908dc0 fix: update OpenSSL to 3.6.4
###### Dependency Changes
* **github.com/Azure/azure-sdk-for-go/sdk/azcore** v1.21.1 -> v1.22.0
* **github.com/Azure/azure-sdk-for-go/sdk/azidentity** v1.13.1 -> v1.14.0
* **github.com/aws/aws-sdk-go-v2** v1.41.7 -> v1.43.0
* **github.com/aws/aws-sdk-go-v2/config** v1.32.17 -> v1.32.31
* **github.com/aws/aws-sdk-go-v2/feature/ec2/imds** v1.18.23 -> v1.18.31
* **github.com/aws/aws-sdk-go-v2/service/kms** v1.52.0 -> v1.55.0
* **github.com/aws/smithy-go** v1.25.1 -> v1.27.3
* **github.com/cosi-project/runtim
_[Truncated at 4000 characters — full notes: https://github.com/siderolabs/talos/releases/tag/v1.13.10]_