v0.26.4

Supported OS version details

	vSphere	Bare Metal	Nutanix	Snow
Ubuntu 22.04	✔	✔	✔	✔
Ubuntu 24.04	✔	✔	✔	—
Bottlerocket 1.68.0	✔	—	—	—
RHEL 8.x	✔	✔	✔	—
RHEL 9.x	✔	✔	✔	—

* Bottlerocket v1.68.0 applies to Kubernetes versions 1.31 through 1.36.

Changed

• EKS Distro:
  • v1-36-eks-10
  • v1-35-eks-16
  • v1-34-eks-25
  • v1-33-eks-34
  • v1-32-eks-44
  • v1-31-eks-51
• Cilium: v1.19.6 to v1.19.10 (#5761)
• Bottlerocket: v1.64.0 to v1.68.0 for Kubernetes versions 1.31 through 1.36 (#5765)

Fixed

• Removed trust in the compromised eMudhra (emSign) certificate authorities (CVE-2026-113470, CVE-2026-111943). EKS Anywhere binaries and component images are now built with Go v1.26.10, and EKS Distro base images, HookOS, Cilium and Bottlerocket no longer trust the emSign ECC Root CA - G3, emSign Root CA - C1 and emSign ECC Root CA - C3 roots. (#10992, #5734, #5738, #5742, #5749, #5761, #5765)