From 0b7462ddec117f0381991cade5c01cb94f5719b9 Mon Sep 17 00:00:00 2001 From: Alex Parker <7272359+ajp-io@users.noreply.github.com> Date: Wed, 29 Jan 2025 08:29:17 -0500 Subject: [PATCH 1/2] Update policies-vulnerability-patch.md --- docs/vendor/policies-vulnerability-patch.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/vendor/policies-vulnerability-patch.md b/docs/vendor/policies-vulnerability-patch.md index 3cb96f64cf..4401168d6f 100644 --- a/docs/vendor/policies-vulnerability-patch.md +++ b/docs/vendor/policies-vulnerability-patch.md @@ -23,7 +23,7 @@ KOTS has automation that uses the Chainguard [melange](https://edu.chainguard.de ## Upstream CVE Disclosure -Replicated KOTS and kURL deliver many upstream Kubernetes and ecosystem components. +Replicated KOTS, kURL, and Embedded Cluster deliver many upstream Kubernetes and ecosystem components. We do not build these packages and rely on the upstream software vendor to distribute patches. Our intent is to make any patches available as soon as possible, but guarantee the following timeline to make upstream patches available after we learn about the vulnerability and a patch is available to us: From 07ad21b7d9dd2658cc7740a69432f403dca4a530 Mon Sep 17 00:00:00 2001 From: Paige Calvert Date: Wed, 29 Jan 2025 15:19:11 -0700 Subject: [PATCH 2/2] update last modified date --- docs/vendor/policies-vulnerability-patch.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/vendor/policies-vulnerability-patch.md b/docs/vendor/policies-vulnerability-patch.md index 4401168d6f..fee2ef21f4 100644 --- a/docs/vendor/policies-vulnerability-patch.md +++ b/docs/vendor/policies-vulnerability-patch.md @@ -66,4 +66,4 @@ As subsequent versions of the vulnerable software are released, Replicated conti |-----|-------------|-----------|--------------------| | None | N/A | N/A | N/A | -Last modified February 26, 2024. +Last modified January 29, 2025.