You can now launch clusters with the following Kubernetes versions. Click on the following links to see the release notes associated with these patches:

• 1.34.1-gke.4700
• 1.33.5-gke.1900
• 1.32.9-gke.1800

Issue

The following versions are not recommended:

• 1.33.4-gke.900
• 1.32.8-gke.600
• 1.32.4-gke.200

If you use any of the preceding versions, we strongly recommend that you upgrade to version 1.34 or the latest available patch versions.

Multiple security vulnerabilities have been identified in the OpenSSL library. The most significant finding is CVE-2025-15467, a critical vulnerability that might allow for remote code execution (RCE) or denial of service (DoS) attacks via network-based vectors.

For more details, see the GCP-2026-006 security bulletin.

You can now launch clusters with the following Kubernetes versions. Click on the following links to see the release notes associated with these patches:

• 1.33.4-gke.900
• 1.32.8-gke.600
• 1.31.11-gke.400

The following Kubernetes versions are retired and are no longer available for creating new clusters:

• 1.31.4-gke.500
• 1.30.8-gke.100
• 1.29.12-gke.100

To create a cluster, use another available Kubernetes version.

You can now launch clusters with the following Kubernetes versions. Click on the following links to see the release notes associated with these patches:

• 1.32.4-gke.200
• 1.31.7-gke.1000
• 1.30.11-gke.800

You can now launch clusters with the following Kubernetes versions. Click on the following links to see the release notes associated with these patches:

• 1.31.6-gke.200
• 1.30.10-gke.200
• 1.29.14-gke.200

You can now launch clusters with the following Kubernetes versions. Click on the following links to see the release notes associated with these patches:

• 1.31.4-gke.500
• 1.30.8-gke.100
• 1.29.12-gke.100

You can now launch clusters with the following Kubernetes versions. Click on the following links to see the release notes associated with these patches:

• 1.31.1-gke.1800
• 1.30.5-gke.1000
• 1.29.10-gke.100

You can now launch clusters with the following Kubernetes versions. Click on the following links to see the release notes associated with these patches:

• 1.30.5-gke.200
• 1.29.8-gke.1800
• 1.28.14-gke.200

You can now launch clusters with the following Kubernetes versions. Click on the following links to see the release notes associated with these patches:

• 1.30.4-gke.400
• 1.29.8-gke.600
• 1.28.13-gke.600

You can now launch clusters with the following Kubernetes versions. Click on the following links to see the release notes associated with these patches:

• 1.30.3-gke.100
• 1.29.7-gke.100
• 1.28.12-gke.100

The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS and Ubuntu nodes:

• CVE-2024-36978

For more details, see the GCP-2024-049 security bulletin.

The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS and Ubuntu nodes:

• CVE-2024-41009

For more details, see the GCP-2024-048 security bulletin.

The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS and Ubuntu nodes:

• CVE-2024-39503

For more details, see the GCP-2024-047 security bulletin.

You can now launch clusters with the following Kubernetes versions. Click on the following links to see the release notes associated with these patches:

• 1.29.6-gke.600
• 1.28.11-gke.600
• 1.27.14-gke.1600

The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS and Ubuntu nodes:

• CVE-2024-26921

For more details, see the GCP-2024-043 security bulletin.

The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS and Ubuntu nodes:

• CVE-2024-26925

For more details, see the GCP-2024-045 security bulletin.

The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS and Ubuntu nodes:

• CVE-2024-36972

For more details, see the GCP-2024-044 security bulletin.

Security

The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS and Ubuntu nodes:

• CVE-2024-26809

For more information, see the GCP-2024-042 security bulletin.

You can now launch clusters with the following Kubernetes versions. Click on the following links to see the release notes associated with these patches:

• 1.29.5-gke.1100
• 1.28.10-gke.1300
• 1.27.14-gke.1200

The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS and Ubuntu nodes:

• CVE-2023-52654
• CVE-2023-52656

For more information, see the GCP-2024-041 security bulletin.

A remote code execution vulnerability, CVE-2024-6387, was recently discovered in OpenSSH. The vulnerability exploits a race condition that can be used to obtain access to a remote shell, enabling attackers to gain root access. At the time of publication, exploitation is believed to be difficult and take several hours per machine being attacked. We are not aware of any exploitation attempts. This vulnerability has a Critical severity.

For mitigation steps and more details, see the GCP-2024-040 security bulletin.

The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS and Ubuntu nodes:

• CVE-2024-26923

For more information, see the GCP-2024-039 security bulletin.

Announcement

You can now launch clusters with the following Kubernetes versions. Click on the following links to see the release notes associated with these patches:

• 1.29.5-gke.700
• 1.28.10-gke.800
• 1.27.14-gke.700

The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS and Ubuntu nodes:

• CVE-2024-26924

For more information, see the GCP-2024-038 security bulletin.

The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS and Ubuntu nodes:

• CVE-2024-26584

For more information, see the GCP-2024-035 security bulletin.

The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS nodes:

• CVE-2024-26583

For more information, see the GCP-2024-034 security bulletin.

The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS nodes:

• CVE-2022-23222

For more information, see the GCP-2024-033 security bulletin.

You can now launch clusters with the following Kubernetes versions. Click on the following links to see the release notes associated with these patches:

• 1.29.4-gke.200
• 1.28.9-gke.400
• 1.27.13-gke.500

A new vulnerability (CVE-2024-4323) has been discovered in Fluent Bit that could result in remote code execution. Fluent Bit versions 2.0.7 through 3.0.3 are affected.

GKE on Azure doesn't use a vulnerable version of Fluent Bit and is unaffected.

For more information, see the GCP-2024-031 security bulletin.

You can now launch clusters with the following Kubernetes versions. Click on the following links to see the release notes associated with these patches:

• 1.29.3-gke.600
• 1.28.8-gke.800
• 1.27.12-gke.800

A vulnerability (CVE-2023-52620) was discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS and Ubuntu nodes.

For more information, see the GCP-2024-030 security bulletin.