// LIVE

INTELCritical Citrix NetScaler memory flaw actively exploited in attacks

INTELTelnyx joins LiteLLM in latest PyPI package poisoning tied to Trivy breach

INTELStorm Brews Over Critical, No-Click Telegram Flaw

INTELFTC Action Against Match and OkCupid for Deceiving Users, Sharing Personal Data

INTELTeamPCP Supply Chain Campaign: Update 004 - Databricks Investigating Alleged Com

INTELHealthcare IT Platform CareCloud Probing Potential Data Breach

INTELSecurity updates for Monday

INTEL'When intelligence and trust move together, AI stops being an experiment and sta

INTELRussian APT Star Blizzard Adopts DarkSword iOS Exploit Kit

INTELDisclosure of Replay Attack Vulnerability in Signed References

INTELHackers now exploit critical F5 BIG-IP flaw in attacks, patch now

INTELTelnyx Targeted in Growing TeamPCP Supply Chain Attack

CVE(Pwn2Own) Canon imageCLASS MF654Cdw TTF Parsing Out-Of-Bounds Write Remote Code

CVEZDI-26-204: Canon imageCLASS MF654Cdw XPS Parser Vulnerability

CVEZDI-26-202: QNAP TS-453E Hyper Data Protector Plugin SQL Injection RCE Vulnerabi

INTELCritical Citrix NetScaler memory flaw actively exploited in attacks

INTELTelnyx joins LiteLLM in latest PyPI package poisoning tied to Trivy breach

INTELStorm Brews Over Critical, No-Click Telegram Flaw

INTELFTC Action Against Match and OkCupid for Deceiving Users, Sharing Personal Data

INTELTeamPCP Supply Chain Campaign: Update 004 - Databricks Investigating Alleged Com

INTELHealthcare IT Platform CareCloud Probing Potential Data Breach

INTELSecurity updates for Monday

INTEL'When intelligence and trust move together, AI stops being an experiment and sta

INTELRussian APT Star Blizzard Adopts DarkSword iOS Exploit Kit

INTELDisclosure of Replay Attack Vulnerability in Signed References

INTELHackers now exploit critical F5 BIG-IP flaw in attacks, patch now

INTELTelnyx Targeted in Growing TeamPCP Supply Chain Attack

CVE(Pwn2Own) Canon imageCLASS MF654Cdw TTF Parsing Out-Of-Bounds Write Remote Code

CVEZDI-26-204: Canon imageCLASS MF654Cdw XPS Parser Vulnerability

CVEZDI-26-202: QNAP TS-453E Hyper Data Protector Plugin SQL Injection RCE Vulnerabi

INTELLIGENCE SOURCE: Kubernetes Blog · 2026-03-25

Preventing Zombie etcd Cluster Members During Upgrade

— min read

GENERATED BY aria-32b

VIA Kubernetes Blog

#etcd #upgrades #zombie-members

◎

ARIA ANALYSIS aria-32b · 2026-03-25

Upgrading directly from etcd v3.5 to v3.6 can result in 'zombie' members joining the database consensus. To prevent this, upgrade to v3.5.26 first for automatic repair before proceeding to v3.6.

TL;DR

Upgrading directly from etcd v3.5 to v3.6 can result in 'zombie' members joining the database consensus. To prevent this, upgrade to v3.5.26 first for automatic repair before proceeding to v3.6.

What happened

During upgrades from v3.5 to v3.6, clusters may encounter a bug causing removed nodes (zombies) to reappear and join the cluster. This can be resolved by upgrading to v3.5.26 or later first.

Why it matters for ops

The issue stems from inconsistencies between etcd's v2store and v3store data stores when transitioning membership management, fixed in v3.5.26 updates.

Action items

Upgrade clusters to etcd v3.5.26 or later
Verify cluster health post-upgrade before moving to v3.6
Follow official upgrade paths for a seamless transition

Source link

https://kubernetes.io/blog/2025/12/21/preventing-etcd-zombies/

// SOURCES

Kubernetes Blog — Original article ↗