# Talos Linux v1.13.7

- Product: Talos Linux (https://whatsnew.fyi/product/talos-linux)
- Vendor: Sidero Labs
- Date: 2026-07-21
- Version: v1.13.7
- Original notes: https://github.com/siderolabs/talos/releases/tag/v1.13.7
- Permalink: https://whatsnew.fyi/product/talos-linux/releases/v1.13.7

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **added** — Add ca-certificates to talosctl
- **added** — Add iommufd as a kernel module
- **added** — Add ifb.ko module
- **added** — Add --no-reboot flag to upgrade cmd
- **changed** — Bump CoreDNS to 1.14.4 and Flannel to 0.28.7
- **changed** — Update Linux to 6.18.39
- **changed** — Update containerd to 2.2.6
- **changed** — Update util-linux to 2.42.2
- **fixed** — Fix VRF sorting
- **fixed** — Fix OOM podruntime protection
- **fixed** — Use symlinks for init aliases
- **fixed** — Do proper backoff for NTP Kiss-of-Death responses
- **fixed** — Make audit restartable
- **fixed** — Avoid image cache mount request churn
- **fixed** — Provide correct handler for Ctrl-Alt-Delete sequence
- **fixed** — Terminate log persistence a bit harder
- **fixed** — Do not block volume lifecycle teardown on failed user volumes

##### [Talos 1.13.7](https://github.com/siderolabs/talos/releases/tag/v1.13.7) (2026-07-21)

Welcome to the v1.13.7 release of Talos!



Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

###### Component Updates

Linux: 6.18.39
containerd: 2.2.6
Flannel: 0.28.7
CoreDNS: 1.14.4

Talos is built with Go 1.26.5.


###### Contributors

* Andrey Smirnov
* Mateusz Urbanek
* Noel Georgi
* Calin
* Dario Emerson
* Maja Bojarska

###### Changes
<details><summary>19 commits</summary>
<p>

* siderolabs/talos@b0039b717 release(v1.13.7): prepare release
* siderolabs/talos@fc6f9b173 test: add nginx to the image cache integration
* siderolabs/talos@c6c435ba7 test: increase resource inmem buffer to stabilize the tests
* siderolabs/talos@202dc152a fix: add ca-certificates to talosctl
* siderolabs/talos@3a14c8d36 fix: vrf sorting
* siderolabs/talos@a4c1e6eb4 fix: oom podruntime protection
* siderolabs/talos@57b861657 feat: bump CoreDNS, Flannel
* siderolabs/talos@58a78fe22 fix: use symlinks for init aliases
* siderolabs/talos@428872bf4 fix: do proper backoff for NTP Kiss-of-Death responses
* siderolabs/talos@1d55e281a feat: add iommufd as a kernel module
* siderolabs/talos@576638def fix: make audit restartable
* siderolabs/talos@76328f941 fix: avoid image cache mount request churn
* siderolabs/talos@46f9ac675 feat: bring in ifb.ko module
* siderolabs/talos@0d752e784 fix: provide correct handler for Ctrl-Alt-Delete sequence
* siderolabs/talos@fe9d33095 fix: terminate log persistence a bit harder
* siderolabs/talos@7c8021a3e feat: add --no-reboot flag to upgrade cmd
* siderolabs/talos@a155bad1b fix: do not block volume lifecycle teardown on failed user volumes
* siderolabs/talos@c63f0789a fix: flaky tests
* siderolabs/talos@2bf6b7462 feat: bring in Linux 6.18.39, containerd 2.2.6
</p>
</details>

###### Changes from siderolabs/pkgs
<details><summary>6 commits</summary>
<p>

* siderolabs/pkgs@91fe0a0 feat: update Linux to 6.18.39
* siderolabs/pkgs@1018556 feat: enable CONFIG_IOMMUFD and CONFIG_VFIO_DEVICE_CDEV
* siderolabs/pkgs@d529479 chore: bump nvidia to 580.167.08
* siderolabs/pkgs@971fd23 fix: enable CONFIG_IFB as a module
* siderolabs/pkgs@acece91 feat: update DRBD to 9.3.3
* siderolabs/pkgs@b91905c feat: update containerd to 2.2.6
</p>
</details>

###### Changes from siderolabs/tools
<details><summary>1 commit</summary>
<p>

* siderolabs/tools@c2844e6 feat: update util-linux to 2.42.2
</p>
</details>

###### Dependency Changes

* **github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys**  v1.4.0 -> v1.5.0
* **github.com/aws/aws-sdk-go-v2/service/kms**                        v1.51.1 -> v1.52.0
* **github.com/docker/cli**                                           v29.4.0 -> v29.4.3
* **github.com/google/go-containerregistry**                          v0.21.5 -> v0.21.6
* **github.com/klauspost/compress**                                   v1.18.5 -> v1.18.6
* **github.com/moby/moby/api**                                        v1.54.1 -> v1.54.2
* **github.com/moby/moby/client**                                     v0.4.0 -> v0.4.1
* **github.com/siderolabs/pkgs**                                      v1.13.0-43-gd8c80cc -> v1.13.0-49-g91fe0a0
* **github.com/siderolabs/talos/pkg/machinery**                       v1.13.6 -> v1.13.7
* **github.com/siderolabs/tools**                                     v1.13.0-7-gc58afd5 -> v1.13.0-8-gc2844e6
* **github.com/sigstore/sigstore**                                    v1.10.6 -> v1.10.8
* **github.com/sigstore/sigstore-go**                                 v1.1.4 -> v1.2.0
* **github.com/theupdateframework/go-tuf/v2**                         v2.4.1 -> 7e8f69f906ef
* **google.golang.org/grpc**                                          v1.81.0 -> v1.81.1

Previous release can be found at [v1.13.6](https://github.com/siderolabs/talos/releases/tag/v1.13.6)

#

_[Truncated at 4000 characters — full notes: https://github.com/siderolabs/talos/releases/tag/v1.13.7]_