'%3e%3crect%20x='16'%20y='51'%20width='68'%20height='27'%20rx='13.5'/%3e%3ccircle%20cx='32'%20cy='53'%20r='15'/%3e%3ccircle%20cx='53'%20cy='43'%20r='20'/%3e%3ccircle%20cx='71'%20cy='57'%20r='12'/%3e%3c/g%3e%3c/svg%3e){kind=small}
Cloud Changelog
November 11, 2026 · Google CloudFeature
Bare metal 1.34.1100-gke.125 removes distrusted eMudhra and AAA root CAs
The following changes were added in 1.34.1100-gke.125:
- Updated system components and container base images to remove the distrusted eMudhra (emSign) and AAA Certificate Services root CAs and reject compromised eMudhra intermediate CAs.
Text from the Google Cloud release notes, licensed under CC BY 4.0. Source: Google Cloud release notes.
Related updates
Bare metal 1.35.700-gke.124 removes distrusted eMudhra and AAA root CAs
Distributed Cloud for VMware 1.35.700-gke.124 removes distrusted eMudhra and AAA root CAs
Bare metal 1.34.1000-gke.111 cuts BGP control plane failover to about 4 seconds
Pages - Workers Builds and Pages build images reject compromised eMudhra certificates · Cloudflare
Sandboxes - Sandbox SDK 0.12.14 updates trusted certificates after the eMudhra compromise · Cloudflare
All Google Distributed Cloud (software only) for bare metal changes