Thalassa Cloud Thalassa Cloud
Sign in Sign up

CVE-2026-31431 (Copy Fail): patched Kubernetes images on Thalassa Cloud

kubernetes security
2026-05-01
By Thalassa Cloud
CVE-2026-31431, known as Copy Fail, is a Linux kernel local privilege escalation affecting a wide range of kernels from 2017 until distributors ship the fix. On Kubernetes Clusters that may execute potentially malicious workloads (i.g. third party container images), the vulnerability may facilitate container escape scenarios (from a pod to the host). Utilising microVMs or other isolated runtime classes may mitigate impact. Thalassa Cloud Kubernetes images v1.34.7-1 and v1.35.4-1 include kernel module updates that address CVE-2026-31431 by applying the recommended mitigation from Canonical for Ubuntu.
Read article

Topics

Latest Posts

RSS Feed

Introducing the Thalassa Public Cloud

2025-06-01
A modern European cloud platform – built from the ground up to put control, automation, and sovereignty back in your hands. At Thalassa Cloud, we believe infrastructure should be modern, flexible, and sovereign – without the complexity or lock-in of hyperscalers. That’s why we’ve launched the Thalassa Public Cloud: a high quality and API first Cloud Services platform designed for DevOps-first teams who want more control and better APIs, without giving up performance or compliance and still want to run their services in Dutch Datacenters.

Creating an organisation on the Thalassa Cloud Platform

2025-05-26
The Thalassa Cloud Platform gives you full control over your cloud infrastructure, running in your own datacenter or hosted environment. It combines the flexibility of public cloud APIs with the control of private infrastructure. Before you can start deploying workloads, you need to create an organisation. This is the main structure for managing your cloud environment, users, quotas, and billing. In this blog post, we’ll guide you through the full process.

Introduction into Load Balancers on Thalassa Cloud

2025-05-26
Introduction into Load Balancers on Thalassa Cloud Load balancers play a critical role in any cloud infrastructure. They ensure that incoming traffic is reliably routed to healthy services, distributing load across multiple backend targets. On Thalassa Cloud, load balancers are designed from the ground up to be fast, flexible, and API-driven. Built on top of Envoy Proxy, our load balancer implementation provides high performance with a strong focus on automation and self-service.

Announcing Thalassa Cloud's Go SDK

2025-03-27
We’ve just released the first version of thalassa-cloud/client-go, our Go SDK for integrating with the Thalassa Cloud API. This SDK is intended for engineers and teams looking to interact with Thalassa Cloud programmatically. It provides a native Go interface to our API and will be the base for upcoming tools like our CLI, Terraform provider, Kubernetes CCM, and other integrations. What’s included The initial release includes support for core primitives such as VPCs, Subnets, Organizations, basic compute functionality.

VPC Networking Upgrade with Custom Route Tables

2025-02-14
Introducing Custom Route Tables for VPCs Networking is at the core of any cloud infrastructure, and Thalassa Cloud’s Virtual Private Clouds (VPCs) provide secure, isolated environments for deploying workloads. Until now, our VPC networking was fully automated—when a NAT Gateway or other networking component was created, routing rules were automatically assigned. While this made deployment seamless, it limited flexibility for advanced networking use cases. With the introduction of custom route tables, users now have full control over how traffic moves within their VPCs, enabling:

Understanding Digital Sovereignty

2025-01-22
Understanding Digital Sovereignty Digital sovereignty has become essential for organizations in Europe looking to maintain control over their digital infrastructure and operations. With increasing reliance on external platforms, the ability to secure and manage data independently is critical for compliance, resilience, and growth. By prioritizing digital sovereignty, businesses can safeguard their operations, ensure alignment with European regulatory compliance, and build a foundation for sustainable success. What is Digital Sovereignty? Digital sovereignty means having complete control over your organization’s data, infrastructure, and cloud environments.

Why Thalassa Cloud Chose Cilium as the Default CNI

2025-01-20
Why We Chose Cilium as the Default CNI for Thalassa Cloud When we set out to build the Kubernetes platform for Thalassa Cloud, we knew that every component we selected had to align with our vision: a platform that prioritizes performance, security, and flexibility. One of the most critical choices we faced was selecting the right Container Network Interface (CNI). Networking is the backbone of any Kubernetes deployment—get it right, and your platform thrives.