- [Client Binaries](#client-binaries-5)
    - [Server Binaries](#server-binaries-5)
    - [Node Binaries](#node-binaries-5)
  - [Changelog since v1.6.7](#changelog-since-v167)
    - [Other notable changes](#other-notable-changes-5)
- [v1.6.7](#v167)
  - [Downloads for v1.6.7](#downloads-for-v167)
    - [Client Binaries](#client-binaries-6)
    - [Server Binaries](#server-binaries-6)
    - [Node Binaries](#node-binaries-6)

	VSHUFPS $67, Z20, Z9, K7, Z9                       // 6231344fc6cc43
	VSHUFPS $67, Z0, Z9, K7, Z9                        // 6271344fc6c843
	VSHUFPS $67, -7(DI)(R8*1), Z9, K7, Z9              // 6231344fc68c07f9ffffff43
	VSHUFPS $67, (SP), Z9, K7, Z9                      // 6271344fc60c2443
	VSHUFPS $67, Z20, Z28, K7, Z9                      // 62311c47c6cc43

pkg syscall (netbsd-arm64-cgo), const EPERM = 1
pkg syscall (netbsd-arm64-cgo), const EPFNOSUPPORT = 46
pkg syscall (netbsd-arm64-cgo), const EPIPE = 32
pkg syscall (netbsd-arm64-cgo), const EPROCLIM = 67
pkg syscall (netbsd-arm64-cgo), const EPROCLIM Errno
pkg syscall (netbsd-arm64-cgo), const EPROCUNAVAIL = 76
pkg syscall (netbsd-arm64-cgo), const EPROCUNAVAIL Errno
pkg syscall (netbsd-arm64-cgo), const EPROGMISMATCH = 75

pkg syscall (darwin-arm64), const EPERM = 1
pkg syscall (darwin-arm64), const EPFNOSUPPORT = 46
pkg syscall (darwin-arm64), const EPIPE = 32
pkg syscall (darwin-arm64), const EPROCLIM = 67
pkg syscall (darwin-arm64), const EPROCLIM Errno
pkg syscall (darwin-arm64), const EPROCUNAVAIL = 76
pkg syscall (darwin-arm64), const EPROCUNAVAIL Errno
pkg syscall (darwin-arm64), const EPROGMISMATCH = 75

- Updates `debian-iptables` to v1.6.7 to pick up CVE fixes. ([#104970](https://github.com/kubernetes/kubernetes/pull/104970), [@PushkarJ](https://github.com/PushkarJ))
- Updates the following images to pick up CVE fixes:
  - `debian` to v1.9.0

**Fixed Versions**:
  - kube-apiserver v1.31.12
  - kube-apiserver v1.32.8
  - kube-apiserver v1.33.4

This vulnerability was reported by Paul Viossat.


**CVSS Rating:** Medium (6.7) [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L](https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L)

## Changes by Kind

### API Change

- VSphere releases less than 7.0u2 are deprecated as of v1.24. Please consider upgrading vSphere to 7.0u2 or above. vSphere CSI Driver requires minimum vSphere 7.0u2.

  General Support for vSphere 6.7 will end on October 15, 2022. vSphere 6.7 Update 3 is deprecated in Kubernetes v1.24.  Customers are recommended to upgrade vSphere (both ESXi and vCenter) to 7.0u2 or above.  vSphere CSI Driver 2.2.3 and higher supports CSI Migration.

* Fix a broken configuration of prometheus-to-sd for fluentd and event-exporter. ([#58959](https://github.com/kubernetes/kubernetes/pull/58959), [@loburm](https://github.com/loburm))

* Prevent kubelet from getting wedged if initialization of modules returns an error. ([#59020](https://github.com/kubernetes/kubernetes/pull/59020), [@brendandburns](https://github.com/brendandburns))

* Configurable etcd quota backend bytes in GCE ([#59259](https://github.com/kubernetes/kubernetes/pull/59259), [@wojtek-t](https://github.com/wojtek-t))