1.26.4-asm.1 in-cluster Cloud Service Mesh already includes the fixes for these CVEs
Share
Services
## Announcement
1.26.4-asm.1 in-cluster Cloud Service Mesh already includes the fixes for these CVEs.
## Announcement
**1.25.4-asm.0 is now available for in-cluster Cloud Service Mesh.**
You can now download 1.25.4-asm.0 for in-cluster Cloud Service Mesh. It includes the features of [Istio 1.25.4](https://istio.io/latest/news/releases/1.25.x/announcing-1.25.4/) subject to the list of [supported features](https://cloud.google.com/service-mesh/v1.25/docs/supported-features-in-cluster). Cloud Service Mesh version 1.25.4-asm.0 uses envoy v1.33.8-dev.
For details on upgrading Cloud Service Mesh, see [Upgrade Cloud Service Mesh](https://cloud.google.com/service-mesh/v1.25/docs/upgrade/upgrade).
## Announcement
**1.24.6-asm.12 is now available for in-cluster Cloud Service Mesh.**
You can now download 1.24.6-asm.12 for in-cluster Cloud Service Mesh. It includes the features of [Istio 1.24.6](https://istio.io/latest/news/releases/1.24.x/announcing-1.24.6/) subject to the list of [supported features](https://cloud.google.com/service-mesh/v1.24/docs/supported-features-in-cluster). Cloud Service Mesh version 1.24.6-asm.12 uses envoy v1.33.8-dev.
For details on upgrading Cloud Service Mesh, see [Upgrade Cloud Service Mesh](https://cloud.google.com/service-mesh/v1.24/docs/upgrade/upgrade).
## Fix
These patches address the following CVEs:
| CVE | Proxy | Control Plane | CNI | Distroless |
| ------------------------------------------------------------------------------ | ----- | ------------- | --- | ---------- |
| [CVE-2025-32990](http://people.ubuntu.com/~ubuntu-security/cve/CVE-2025-32990) | Yes | Yes | Yes | \- |
| [CVE-2025-32988](http://people.ubuntu.com/~ubuntu-security/cve/CVE-2025-32988) | Yes | Yes | Yes | \- |
| [CVE-2025-40909](http://people.ubuntu.com/~ubuntu-security/cve/CVE-2025-40909) | Yes | Yes | Yes | \- |
| [CVE-2025-32989](http://people.ubuntu.com/~ubuntu-security/cve/CVE-2025-32989) | Yes | Yes | Yes | \- |
| [CVE-2025-47268](http://people.ubuntu.com/~ubuntu-security/cve/CVE-2025-47268) | Yes | Yes | Yes | \- |
| [CVE-2025-5702](http://people.ubuntu.com/~ubuntu-security/cve/CVE-2025-5702) | Yes | Yes | Yes | \- |
| [CVE-2025-6395](http://people.ubuntu.com/~ubuntu-security/cve/CVE-2025-6395) | Yes | Yes | Yes | \- |
| [CVE-2025-48964](http://people.ubuntu.com/~ubuntu-security/cve/CVE-2025-48964) | Yes | Yes | Yes | \- |
What else is happening at Google Cloud Platform?
Connected app requires installation for OAuth 2.0 authentication in Salesforce trigger
about 21 hours ago
Services
Share
1.26.4-asm.1 in-cluster Cloud Service Mesh already includes the fixes for these CVEs
about 23 hours ago
Services
Share
You can load files from Cloud Storage in BigQuery data preparations
about 23 hours ago
Services
Share
Vertex AI Agent Engine Agent Engine now supports the following features
about 23 hours ago
Services
Share
Vertex AI Agent Engine Agent Engine now supports the following features
about 23 hours ago
Services
Share