diff --git a/docs/vendor/policies-vulnerability-patch.md b/docs/vendor/policies-vulnerability-patch.md index 3cb96f64cf..fee2ef21f4 100644 --- a/docs/vendor/policies-vulnerability-patch.md +++ b/docs/vendor/policies-vulnerability-patch.md @@ -23,7 +23,7 @@ KOTS has automation that uses the Chainguard [melange](https://edu.chainguard.de ## Upstream CVE Disclosure -Replicated KOTS and kURL deliver many upstream Kubernetes and ecosystem components. +Replicated KOTS, kURL, and Embedded Cluster deliver many upstream Kubernetes and ecosystem components. We do not build these packages and rely on the upstream software vendor to distribute patches. Our intent is to make any patches available as soon as possible, but guarantee the following timeline to make upstream patches available after we learn about the vulnerability and a patch is available to us: @@ -66,4 +66,4 @@ As subsequent versions of the vulnerable software are released, Replicated conti |-----|-------------|-----------|--------------------| | None | N/A | N/A | N/A | -Last modified February 26, 2024. +Last modified January 29, 2025.