Security bulletins are published when Google Kubernetes Engine (GKE) or related products are affected by software or service component flaws that have the potential to compromise the security of your clusters and the information they contain. Security vulnerabilities are usually identified through the Common Vulnerabilities and Exposures (CVE) system.
A security bulletin describes the security issue and its impact and provides a mitigation. Security bulletins for Google Distributed Cloud software-only are published on a page shared by the following products:
- Google Kubernetes Engine (GKE)
- Google Distributed Cloud (software only) on VMware
- GKE on AWS
- GKE on Azure
- Google Distributed Cloud (software only) on bare metal
When a security bulletin is published for a vulnerability that affects Google Distributed Cloud (software only) on bare metal, we publish a corresponding release note with a link to the bulletin.
To leave this Google Distributed Cloud documentation and open the shared security bulletins page, click the following link: