Correzioni delle vulnerabilità

L'upgrade di un cluster alla versione più recente di Google Distributed Cloud offre funzionalità e correzioni aggiuntive per il tuo cluster. Con ogni release di patch, correggiamo numerose vulnerabilità della sicurezza, il che rende ancora più importante l'upgrade all'ultima versione della patch consigliata. L'upgrade è una responsabilità condivisa tra Google e il cliente. Per ulteriori informazioni sulle responsabilità condivise, consulta Modello di responsabilità condivisa

Questa pagina è rivolta agli esperti della sicurezza che supportano la risoluzione di problemi di sicurezza o vulnerabilità che richiedono assistenza strategica, come incidenti e problemi riassegnati dall'assistenza. Per scoprire di più sui ruoli comuni e sulle attività di esempio a cui facciamo riferimento nei contenuti di Google Cloud , consulta Ruoli e attività utente GKE comuni.

Come vengono classificate le vulnerabilità

Le vulnerabilità di sicurezza vengono solitamente identificate tramite il sistema Common Vulnerabilities and Exposures (CVE). Il team di sicurezza GKE classifica le vulnerabilità in base al sistema di punteggio delle vulnerabilità di Kubernetes. Le classificazioni tengono conto di molti fattori, tra cui la configurazione e il rafforzamento della sicurezza di GKE e Google Distributed Cloud. A causa di questi fattori e degli investimenti che Google Cloud fa nella sicurezza, queste classificazioni delle vulnerabilità potrebbero differire da altre fonti di classificazione.

La tabella seguente descrive le categorie di gravità delle vulnerabilità:

Gravità Descrizione
Critico Una vulnerabilità facilmente sfruttabile in tutti i cluster da un utente malintenzionato remoto non autenticato che porta alla compromissione completa del sistema.
Alta Una vulnerabilità facilmente sfruttabile per molti cluster che comporta la perdita di riservatezza, integrità o disponibilità.
Media Una vulnerabilità sfruttabile per alcuni cluster in cui la perdita di riservatezza, integrità o disponibilità è limitata da configurazioni comuni, dalla difficoltà dell'exploit stesso, dall'accesso richiesto o dall'interazione utente.
Bassa Tutte le altre vulnerabilità del contenitore. Lo sfruttamento è improbabile o le conseguenze dello sfruttamento sono limitate.

Bollettini sulla sicurezza

La maggior parte delle vulnerabilità viene corretta nelle versioni supportate di Google Distributed Cloud prima che possa essere sfruttata. Quando vengono segnalati incidenti che potrebbero compromettere la sicurezza dei tuoi cluster e dei tuoi dati, pubblichiamo bollettini sulla sicurezza. Un bollettino sulla sicurezza descrive il problema di sicurezza e il suo impatto e fornisce una mitigazione. Per ulteriori informazioni e un elenco dei bollettini pubblicati, consulta la pagina Bollettini sulla sicurezza.

Quando viene pubblicato un bollettino sulla sicurezza per una vulnerabilità che interessa Google Distributed Cloud (solo software) su VMware, pubblichiamo una nota di rilascio corrispondente con un link al bollettino.

Vulnerabilità corrette per versione della patch di Google Distributed Cloud

La tabella seguente elenca tutte le vulnerabilità corrette a partire da gennaio 2025. Per le correzioni precedenti, consulta le note di rilascio. Le correzioni nella tabella seguente sono elencate in base alla versione di release e alla gravità di Google Distributed Cloud:

Bassa Patch e gravità Vulnerabilità corrette

1,36

1.36.100-gke.144:
Gravità critica
N/D
1.36.100-gke.144:
gravità elevata
N/D
1.36.100-gke.144:
Container-Optimized OS
CVE-2026-64352, CVE-2026-64385, CVE-2026-64448, CVE-2026-64368, CVE-2026-64382, CVE-2026-64375, CVE-2026-64266, CVE-2026-64247, CVE-2026-64279, CVE-2026-64387, CVE-2026-64383, CVE-2026-64423, CVE-2026-64412, CVE-2026-64435, CVE-2026-64319, CVE-2026-64411, CVE-2026-64322, CVE-2026-64379, CVE-2026-53400, CVE-2026-64313, CVE-2026-64380, CVE-2026-64299, CVE-2026-64355, CVE-2026-64381, CVE-2026-64386, CVE-2026-64317, CVE-2026-64413, CVE-2026-64384, CVE-2026-64401, CVE-2026-64324, CVE-2026-64436, CVE-2026-64422, CVE-2026-64298, CVE-2026-64323
1.36.100-gke.144:
Ubuntu
N/D
1.36.0-gke.532:
Gravità critica
CVE-2026-32316, CVE-2026-39979, CVE-2026-33947, CVE-2026-40164, CVE-2026-33948, CVE-2026-39956
1.36.0-gke.532:
Gravità alta
CVE-2019-14993, CVE-2026-34986, CVE-2021-39155, CVE-2026-42154, CVE-2021-39156, CVE-2026-39883, CVE-2026-42151, CVE-2022-23635, CVE-2023-4911, CVE-2026-24051, CVE-2026-41520, CVE-2026-26018, CVE-2026-35579, CVE-2026-33190, CVE-2025-47950, CVE-2026-32936, CVE-2025-58063, CVE-2026-26017, CVE-2026-33489, CVE-2026-32934, CVE-2026-58050, CVE-2024-36129, CVE-2026-49839, CVE-2024-25621, CVE-2026-32285, CVE-2026-46680, CVE-2026-53488, CVE-2022-28948, CVE-2026-35414, CVE-2026-27459, CVE-2026-35386, CVE-2026-35385, GHSA-537c-gmf6-5ccf, CVE-2026-3497, CVE-2026-26007
1.36.0-gke.532:
Container-Optimized OS
CVE-2026-58014, CVE-2026-46322, CVE-2026-12064, CVE-2026-11586, CVE-2026-6276, CVE-2026-53223, CVE-2026-8927, CVE-2026-31431, CVE-2026-58013, CVE-2026-29518, CVE-2026-40355, CVE-2026-53239, CVE-2026-34040, CVE-2026-53362, CVE-2026-9547, CVE-2026-45843, CVE-2026-31790, CVE-2026-11824, CVE-2026-28388, CVE-2026-53050, CVE-2026-11856, CVE-2026-58469, CVE-2026-9080, CVE-2026-58471, CVE-2026-52981, CVE-2026-52943, CVE-2026-53184, CVE-2026-46323, CVE-2026-58472, CVE-2026-10536, CVE-2026-53189, CVE-2026-8286, CVE-2026-46274, CVE-2026-31786, CVE-2026-53391, CVE-2026-58016, CVE-2026-48526, CVE-2026-53069, CVE-2026-63795, CVE-2026-46331, CVE-2026-53268, CVE-2026-45445, CVE-2026-52975, CVE-2026-46300, CVE-2026-52923, CVE-2026-7383, CVE-2026-53062, CVE-2026-53036, CVE-2026-9076, CVE-2026-53096, CVE-2026-31414, CVE-2026-53006, CVE-2026-52989, CVE-2026-28389, CVE-2026-52910, CVE-2026-11352, CVE-2026-53230, CVE-2026-52946, CVE-2026-11564, CVE-2026-46333, CVE-2026-43499, CVE-2026-63800, CVE-2026-52942, CVE-2026-52920, CVE-2026-53361, CVE-2026-9079, CVE-2026-52927, CVE-2026-33997, CVE-2026-53094, CVE-2026-52967, CVE-2026-11822, CVE-2026-40356, CVE-2026-52969, CVE-2026-53388, CVE-2026-63807, CVE-2026-52986, CVE-2026-63802, CVE-2026-6732, CVE-2026-53075, CVE-2025-70873, CVE-2026-4224, CVE-2026-45447, CVE-2026-8932, CVE-2026-53212, CVE-2026-8924, CVE-2026-3644, CVE-2026-58015, CVE-2026-53131, CVE-2026-43618, CVE-2026-53275, CVE-2026-52998, CVE-2026-43501, CVE-2026-63794, CVE-2026-53369, CVE-2026-53199, CVE-2026-46243, CVE-2026-43284, CVE-2026-53076, CVE-2026-46303, CVE-2026-46289, CVE-2026-53270, CVE-2026-9546, CVE-2026-53359, CVE-2026-52912, CVE-2026-46306, CVE-2026-41035, CVE-2026-35385, CVE-2026-53267, CVE-2026-34180, CVE-2026-31402, CVE-2026-53264, CVE-2026-46304, CVE-2026-46321, CVE-2026-5773, CVE-2026-52933, CVE-2026-53354, CVE-2026-52974, CVE-2026-43503, CVE-2026-53397, CVE-2026-34182, CVE-2026-9545, CVE-2026-53381, CVE-2026-53398, CVE-2026-53033, CVE-2026-53003, CVE-2026-8925, CVE-2026-53002, CVE-2025-13462, CVE-2026-46294, CVE-2026-52908, CVE-2026-45839, CVE-2026-53232, CVE-2026-28390, CVE-2026-0994, CVE-2026-8926, CVE-2026-52999, CVE-2026-28387, CVE-2026-53185, CVE-2026-53266
1.36.0-gke.532:
Ubuntu
Nessuno

1,35

1.35.600-gke.140:
Gravità critica
N/D
1.35.600-gke.140:
Gravità elevata
N/D
1.35.600-gke.140:
Container-Optimized OS
CVE-2026-64378, CVE-2026-60002, CVE-2026-60000, CVE-2026-59999
1.35.600-gke.140:
Ubuntu
N/D
1.35.500-gke.142:
gravità critica
CVE-2019-8457
1.35.500-gke.142:
Gravità alta
CVE-2026-14456
1.35.500-gke.142:
Container-Optimized OS
CVE-2026-64375, CVE-2026-64313, CVE-2026-9079, CVE-2026-64413, CVE-2026-64380, CVE-2026-53388, CVE-2026-64379, CVE-2026-64317, CVE-2026-64322, CVE-2026-53398, CVE-2026-58472, CVE-2026-64382, CVE-2026-64298, CVE-2026-64385, CVE-2026-64387, CVE-2026-11564, CVE-2026-64324, CVE-2026-3644, CVE-2026-8286, CVE-2025-13462, CVE-2026-63795, CVE-2026-40356, CVE-2026-64352, CVE-2026-58469, CVE-2026-8924, CVE-2026-63807, CVE-2026-63794, CVE-2026-58471, CVE-2026-53381, CVE-2026-53400, CVE-2026-64323, CVE-2026-4224, CVE-2026-64266, CVE-2026-8927, CVE-2026-8932, CVE-2026-64368, CVE-2026-53391, CVE-2026-64247, CVE-2026-53397, CVE-2026-64435, CVE-2026-40355, CVE-2026-64412, CVE-2026-64422, CVE-2026-9546, CVE-2026-64448, CVE-2026-58015, CVE-2026-8926, CVE-2026-11352, CVE-2026-58016, CVE-2026-64384, CVE-2026-64383, CVE-2026-63800, CVE-2026-64319, CVE-2026-64279, CVE-2026-8925, CVE-2026-9545, CVE-2026-58014, CVE-2026-64411, CVE-2026-64401, CVE-2026-64423, CVE-2026-46331, CVE-2026-11856, CVE-2026-64381, CVE-2026-58013, CVE-2026-64436, CVE-2026-64600, CVE-2026-9080, CVE-2026-64355, CVE-2026-63802, CVE-2026-64299, CVE-2026-11586, CVE-2026-9547, CVE-2026-12064, CVE-2026-10536, CVE-2026-64386
1.35.500-gke.142:
Ubuntu
N/D
1.35.400-gke.81:
Gravità critica
N/D
1.35.400-gke.81:
Gravità alta
N/D
1.35.400-gke.81:
Container-Optimized OS
CVE-2026-53230, CVE-2026-6276, CVE-2026-46300, CVE-2026-45839, CVE-2026-43501, CVE-2026-43503, CVE-2026-43499, CVE-2026-7383, CVE-2026-48526, CVE-2026-11824, CVE-2026-46243, CVE-2026-34180, CVE-2026-45445, CVE-2026-34182, CVE-2026-45447, CVE-2026-6732, CVE-2026-9076, CVE-2026-11822, CVE-2026-45843, CVE-2026-46333, CVE-2026-53212, CVE-2026-5773, CVE-2026-53223
1.35.400-gke.81:
Ubuntu
N/D
1.35.300-gke.87:
Gravità critica
N/D
1.35.300-gke.87:
Gravità elevata
N/D
1.35.300-gke.87:
Container-Optimized OS
N/D
1.35.300-gke.87:
Ubuntu
N/D
1.35.100-gke.72:
Gravità critica
N/D
1.35.100-gke.72:
Gravità alta
N/D
1.35.100-gke.72:
Container-Optimized OS
N/D
1.35.100-gke.72:
Ubuntu
N/D
1.35.0-gke.525:
Gravità critica
CVE-2025-14087, CVE-2024-45337
1.35.0-gke.525:
Gravità alta
CVE-2025-9230, CVE-2025-68156, CVE-2026-22801, CVE-2026-25646, CVE-2026-3104, CVE-2026-22695, CVE-2025-66293, CVE-2025-65018, CVE-2025-64720, CVE-2025-65637, CVE-2023-45142, CVE-2025-52565, GHSA-6g7g-w4f8-9c9x, CVE-2025-31133, CVE-2026-24049, CVE-2026-23949, CVE-2025-30204, CVE-2023-31484, CVE-2025-32988, CVE-2025-32990, CVE-2023-52425
1.35.0-gke.525:
Container-Optimized OS
CVE-2025-47273, CVE-2025-61725, CVE-2025-66418, CVE-2026-25679, CVE-2025-68121, CVE-2025-66471, CVE-2023-45142, CVE-2026-33748, CVE-2026-33747, CVE-2025-61732, CVE-2025-61726, CVE-2025-65637, CVE-2024-25621, CVE-2025-31133, CVE-2026-21441, CVE-2025-58188, CVE-2023-47108, CVE-2025-52881, CVE-2025-58187, CVE-2022-40897, CVE-2026-33186, CVE-2025-61729, CVE-2024-6345, CVE-2025-61723, CVE-2026-24051, CVE-2025-61731, CVE-2026-34986, CVE-2025-52565
1.35.0-gke.525:
Ubuntu
N/D

1,34

1.34.900-gke.135:
gravità critica
N/D
1.34.900-gke.135:
Gravità alta
N/D
1.34.900-gke.135:
Container-Optimized OS
CVE-2026-64279, CVE-2026-64319, CVE-2026-53400, CVE-2026-64352, CVE-2026-64401, CVE-2026-64413, CVE-2026-64375
1.34.900-gke.135:
Ubuntu
N/D
1.34.800-gke.90:
Gravità critica
CVE-2026-50195, CVE-2026-53488, CVE-2026-53492
1.34.800-gke.90:
Gravità elevata
CVE-2025-58063, CVE-2026-49839, CVE-2026-32316, CVE-2026-40164, CVE-2026-53489, CVE-2026-47262
1.34.800-gke.90:
Container-Optimized OS
CVE-2026-8925, CVE-2026-63795, CVE-2026-53239, CVE-2026-11564, CVE-2026-52920, CVE-2026-53230, CVE-2026-53062, CVE-2026-11352, CVE-2026-6276, CVE-2026-40355, CVE-2026-63802, CVE-2026-53267, CVE-2026-53268, CVE-2026-53096, CVE-2026-46300, CVE-2026-53033, CVE-2026-52927, CVE-2026-45839, CVE-2026-53050, CVE-2026-10536, CVE-2026-41035, CVE-2026-46289, CVE-2026-53003, CVE-2026-12064, CVE-2026-9079, CVE-2026-52974, CVE-2026-52933, CVE-2026-8926, CVE-2026-43501, CVE-2026-53006, CVE-2026-43503, CVE-2026-53232, CVE-2026-43499, CVE-2026-52967, CVE-2026-53036, CVE-2026-53076, CVE-2026-52912, CVE-2026-58013, CVE-2025-13462, CVE-2026-46321, CVE-2026-40356, CVE-2026-53185,
1.34.800-gke.90:
Ubuntu
N/D
1.34.700-gke.93:
Gravità critica
N/D
1.34.700-gke.93:
Gravità alta
CVE-2026-58050, CVE-2024-34158, CVE-2024-34156, CVE-2025-30204
1.34.700-gke.93:
Container-Optimized OS
N/D
1.34.700-gke.93:
Ubuntu
N/D
1.34.500-gke.108:
gravità critica
N/D
1.34.500-gke.108:
Gravità elevata
CVE-2021-39155, CVE-2022-23635, CVE-2021-39156, CVE-2019-14993, CVE-2026-4775, CVE-2026-1519, CVE-2026-5201, CVE-2022-28948
1.34.500-gke.108:
Container-Optimized OS
CVE-2026-31790, CVE-2026-31431, CVE-2026-28388, CVE-2026-34040, CVE-2026-0994, CVE-2026-28387, CVE-2026-28390, CVE-2026-28389, CVE-2025-70873
1.34.500-gke.108:
Ubuntu
N/D
1.34.400-gke.88:
Gravità critica
N/D
1.34.400-gke.88:
Gravità alta
CVE-2026-31790, CVE-2026-25075, CVE-2024-33599, CVE-2024-2961, CVE-2024-33601, CVE-2024-33602, CVE-2023-4911, CVE-2026-33636, CVE-2026-33416, CVE-2026-27137
1.34.400-gke.88:
Container-Optimized OS
CVE-2025-47273, CVE-2026-27140, CVE-2025-61725, CVE-2025-66418, CVE-2026-25679, CVE-2025-68121, CVE-2025-66471, CVE-2023-45142, CVE-2026-33748, CVE-2026-27144, CVE-2026-32281, CVE-2026-33747, CVE-2025-61732, CVE-2025-61726, CVE-2025-65637, CVE-2024-25621, CVE-2025-31133, CVE-2026-21441, CVE-2025-58188, CVE-2023-47108, CVE-2025-52881, CVE-2026-39883, CVE-2025-58187, CVE-2022-40897, CVE-2026-32280, CVE-2026-33186, CVE-2025-61729, CVE-2026-32283, CVE-2024-6345, CVE-2025-61723, CVE-2026-24051, CVE-2025-61731, CVE-2026-27143, CVE-2026-34986, CVE-2025-52565
1.34.400-gke.88:
Ubuntu
N/D
1.34.300-gke.59:
Gravità critica
N/D
1.34.300-gke.59:
Gravità alta
CVE-2026-25646, CVE-2026-22695, CVE-2026-22801
1.34.300-gke.59:
Container-Optimized OS
N/D
1.34.300-gke.59:
Ubuntu
N/D
1.34.200-gke.68:
gravità critica
N/D
1.34.200-gke.68:
Gravità alta
N/D
1.34.200-gke.68:
Container-Optimized OS
CVE-2025-65637
1.34.200-gke.68:
Ubuntu
N/D
1.34.100-gke.93:
gravità critica
N/D
1.34.100-gke.93:
Gravità alta
N/D
1.34.100-gke.93:
Container-Optimized OS
N/D
1.34.100-gke.93:
Ubuntu
N/D
1.34.0-gke.566:
Gravità critica
CVE-2020-16156, CVE-2021-3997, CVE-2022-1304, CVE-2023-4641, CVE-2024-0727, CVE-2024-13176, CVE-2024-24790, CVE-2024-2511, CVE-2024-4741, CVE-2024-52533, CVE-2024-5535, CVE-2024-56171, CVE-2025-0395, CVE-2025-54349
1.34.0-gke.566:
Gravità alta
CVE-2018-12886, CVE-2019-12290, CVE-2019-3843, CVE-2019-3844, CVE-2020-1751, CVE-2020-29652, CVE-2021-3121, CVE-2021-33194, CVE-2021-38561, CVE-2021-43565, CVE-2022-21698, CVE-2022-27191, CVE-2022-27664, CVE-2022-32149, CVE-2022-41723, CVE-2022-49043, CVE-2023-29491, CVE-2023-39325, CVE-2023-45285, CVE-2023-50387, CVE-2023-50868, CVE-2023-52356, CVE-2024-0553, CVE-2024-25062, CVE-2024-2961, CVE-2024-33599, CVE-2024-33601, CVE-2024-33602, CVE-2024-7006, CVE-2025-24928, CVE-2025-27113, CVE-2025-27363, CVE-2025-32414, CVE-2025-32415, CVE-2025-48060, CVE-2025-58060, CVE-2025-59530
1.34.0-gke.566:
Container-Optimized OS
CVE-2021-33503, CVE-2021-33503, CVE-2023-43804, CVE-2023-50782, CVE-2024-45337, CVE-2024-52533, CVE-2024-56201, CVE-2024-6174, CVE-2025-11082, CVE-2025-11083, CVE-2025-22868, CVE-2025-22869, CVE-2025-27516, CVE-2025-27614, CVE-2025-30204, CVE-2025-48384, CVE-2025-48385, CVE-2025-6052, CVE-2025-7545, CVE-2025-7546
1.34.0-gke.566:
Ubuntu
N/D

Per ulteriori informazioni sulle correzioni e sulle modifiche per una determinata release, consulta le note di rilascio.