openssh vulnerability (CVE-2024-6387)

Google Cloud Serverless Applications
1

Hi,

Im using 2 gke cluster on 2 different project

Issue is im using GKE cluster version this one
Autopilot Cluster using :- 1.29.4-gke.1043004 (Dev Env)
Standarad Cluster using :- 1.28.9-gke.1289002 (PROD Env)

do i need to upgrade version of both env or not

Critical OpenSSH vulnerability (CVE-2024-6387)

2

Please refer to GKE Security bulletins which has the list of patched GKE versions and more information.
https://cloud.google.com/anthos/clusters/docs/security-bulletins#gcp-2024-040