October 19th, 2023

Anthos clusters on VMware 1.16.2-gke.28 is now available. To upgrade, see

Services

## Announcement Anthos clusters on VMware 1.16.2-gke.28 is now available. To upgrade, see[Upgrading Anthos clusters on VMware](https://cloud.google.com/anthos/clusters/docs/on-prem/latest/how-to/upgrading). Anthos clusters on VMware 1.16.2-gke.28 runs on Kubernetes 1.27.4-gke.1600. ## Fix The following issue is fixed in 1.16.2-gke.28: * Fixed the[known issue](https://cloud.google.com/anthos/clusters/docs/on-prem/latest/known-issues#non-ha-controlplane-v2-cluster-deletion-stuck-until-timeout) where a non-HA Controlplane V2 cluster is stuck at node deletion until it timesout. The following vulnerabilities are fixed in 1.16.2-gke.28: * Container-optimized OS vulnerabilities: * [CVE-2023-4623](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4623) * [CVE-2023-4208](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4208) * [CVE-2023-4921](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4921) * [CVE-2023-4207](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4207) * Ubuntu vulnerabilities: * [CVE-2023-20588](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20588) * [CVE-2023-40283](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40283) * [CVE-2023-4128](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4128) * [CVE-2023-4569](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4569) * Windows vulnerabilities: * [CVE-2023-3893](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3893) ## Announcement Anthos clusters on VMware 1.14.9-gke.21 is now available. To upgrade, see[Upgrading Anthos clusters on VMware](https://cloud.google.com/anthos/clusters/docs/on-prem/1.14/how-to/upgrading). Anthos clusters on VMware 1.14.9-gke.21 runs on Kubernetes 1.25.13-gke.200. ## Fix The following issues are fixed in 1.14.9-gke.21: * Fixed the[known issue](https://cloud.google.com/anthos/clusters/docs/on-prem/latest/known-issues#non-ha-controlplane-v2-cluster-deletion-stuck-until-timeout) where a non-HA Controlplane V2 cluster is stuck at node deletion until it timesout. The following vulnerabilities are fixed in 1.14.9-gke.21: * Critical container vulnerabilities: * [CVE-2023-38408](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38408) * High-severity container vulnerabilities: * [CVE-2022-3064](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3064) * [CVE-2021-20206](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20206) * [CVE-2022-29190](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29190) * Container-optimized OS vulnerabilities: * [CVE-2023-4921](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4921) * [CVE-2023-4622](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4622) * [CVE-2023-4623](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4623) * Ubuntu vulnerabilities: * [CVE-2023-20588](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20588) * [CVE-2023-40283](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40283) * [CVE-2023-4128](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4128) * [CVE-2023-4569](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4569) * Windows vulnerabilities: * [CVE-2023-3893](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3893)