1.31.3-asm.9 is now available for in-cluster Cloud Service Mesh

## Announcement Announcement **1.31.3-asm.9 is now available for in-cluster Cloud Service Mesh.** For details on upgrading Cloud Service Mesh, see[Upgrade Cloud Service Mesh](https://cloud.google.com/service-mesh/docs/upgrade/upgrade). Cloud Service Mesh 1.31.3-asm.9 uses Envoy v1.39.5-dev. This release resolves the security vulnerabilities listed in Security Bulletin[GCP-2026-080](https://cloud.google.com/service-mesh/docs/security-bulletins#gcp-2026-080)([ISTIO-SECURITY-2026-009](https://istio.io/latest/news/security/istio-security-2026-009/)). ## Announcement Announcement **1.30.7-asm.9 is now available for in-cluster Cloud Service Mesh.** For details on upgrading Cloud Service Mesh, see[Upgrade Cloud Service Mesh](https://cloud.google.com/service-mesh/v1.30/docs/upgrade/upgrade). Cloud Service Mesh 1.30.7-asm.9 uses Envoy v1.38.10-dev. This release resolves the security vulnerabilities listed in Security Bulletin[GCP-2026-080](https://cloud.google.com/service-mesh/docs/security-bulletins#gcp-2026-080)([ISTIO-SECURITY-2026-009](https://istio.io/latest/news/security/istio-security-2026-009/)). ## Announcement Announcement **1.29.10-asm.4 is now available for in-cluster Cloud Service Mesh.** For details on upgrading Cloud Service Mesh, see[Upgrade Cloud Service Mesh](https://cloud.google.com/service-mesh/v1.29/docs/upgrade/upgrade). Cloud Service Mesh 1.29.10-asm.4 uses Envoy v1.37.10-dev. This release resolves the security vulnerabilities listed in Security Bulletin[GCP-2026-080](https://cloud.google.com/service-mesh/docs/security-bulletins#gcp-2026-080)([ISTIO-SECURITY-2026-009](https://istio.io/latest/news/security/istio-security-2026-009/)). ## Fix Fixed Patch 1.29.10-asm.4 contains the fix for the following platform CVEs: | CVE | Proxy | Control Plane | Distroless | CNI | Severity | | ------------------------------------------------------------------- | ----- | ------------- | ---------- | --- | ------------ | | [CVE-2026-89161](https://nvd.nist.gov/vuln/detail/CVE-2026-89161) | Yes | Yes | No | Yes | Medium (7.8) | | [CVE-2026-89157](https://nvd.nist.gov/vuln/detail/CVE-2026-89157) | Yes | Yes | No | Yes | Medium (7.4) | | [CVE-2026-89158](https://nvd.nist.gov/vuln/detail/CVE-2026-89158) | Yes | Yes | No | Yes | Medium (6.5) | | [CVE-2026-89160](https://nvd.nist.gov/vuln/detail/CVE-2026-89160) | Yes | Yes | No | Yes | Medium (6.5) | | [CVE-2026-89156](https://nvd.nist.gov/vuln/detail/CVE-2026-89156) | Yes | Yes | No | Yes | Medium (5.9) | | [CVE-2026-103111](https://nvd.nist.gov/vuln/detail/CVE-2026-103111) | Yes | Yes | No | Yes | Medium (0.0) | | [CVE-2026-109518](https://nvd.nist.gov/vuln/detail/CVE-2026-109518) | Yes | Yes | No | Yes | High (0.0) | | [CVE-2026-86145](https://nvd.nist.gov/vuln/detail/CVE-2026-86145) | Yes | Yes | No | Yes | Medium (0.0) |