'%3e%3crect%20x='16'%20y='51'%20width='68'%20height='27'%20rx='13.5'/%3e%3ccircle%20cx='32'%20cy='53'%20r='15'/%3e%3ccircle%20cx='53'%20cy='43'%20r='20'/%3e%3ccircle%20cx='71'%20cy='57'%20r='12'/%3e%3c/g%3e%3c/svg%3e){kind=small}
Cloud Changelog
November 11, 2026 · Google CloudFeature
GDC for VMware 1.34.1100-gke.125 removes distrusted eMudhra and AAA root CAs
The following changes were added in 1.34.1100-gke.125:
- Updated system components and container base images to remove the distrusted eMudhra (emSign) and AAA Certificate Services root CAs and reject compromised eMudhra intermediate CAs.
- Upgraded Container-Optimized OS (COS) to milestone 121
(
cos-121-18867-652-7), which removes the distrusted eMudhra (emSign) and AAA Certificate Services root CAs. - Updated the Ubuntu 22.04 node and admin workstation base image to
ubuntu-gke-op-2204-1-33-v20261024to remove the distrusted eMudhra (emSign) root CAs (USN-8944-1).
Text from the Google Cloud release notes, licensed under CC BY 4.0. Source: Google Cloud release notes.
Related updates
Distributed Cloud for VMware 1.35.700-gke.124 removes distrusted eMudhra and AAA root CAs
Bare metal 1.35.700-gke.124 removes distrusted eMudhra and AAA root CAs
Bare metal 1.34.1100-gke.125 removes distrusted eMudhra and AAA root CAs
Pages - Workers Builds and Pages build images reject compromised eMudhra certificates · Cloudflare
Sandboxes - Sandbox SDK 0.12.14 updates trusted certificates after the eMudhra compromise · Cloudflare
All Google Distributed Cloud (software only) for VMware changes