Security on Project Wintermute

K3s Activity: CVE-2026-39821 Fix, Component Bumps, and RBAC Stability

Mon, 15 Jun 2026 14:00:00 +0000

K3s continues to refine its lightweight Kubernetes distribution with a focus on security patching and operational robustness. Recent activity includes a critical fix for CVE-2026-39821 in the Go networking stack, alongside updates to core components like Traefik and CoreDNS. These changes reflect a steady effort to maintain a secure and stable environment for edge and resource constrained deployments.

OpenTofu v1.11.9 Release - Security Hardening and SSH Fixes

Fri, 12 Jun 2026 16:11:30 +0000

OpenTofu v1.11.9 was released on June 12, 2026, delivering critical security updates for SSH connectivity and state encryption providers. This version patches vulnerabilities that could lead to hangs or high CPU consumption when interacting with compromised servers or specifically crafted encryption keys. As a maintenance release in the v1.11 series, it focuses on stability and security without introducing breaking changes to the core engine or configuration syntax.

Services

Sun, 13 Feb 2022 11:11:11 -0100

Below is what we actually do day to day. We try to keep the list short and the descriptions honest. If something here matches what you need, get in touch.

Software engineering ¶

We write backend services in Java, Kotlin, Go, and Groovy. Most of the work falls into a few buckets: REST and gRPC APIs, distributed systems handling high request volumes, and the occasional batch job that has to be reliable more than fast.