gcp Google Cloud release notes · 2d ago

Container Optimized OS Security and Bug Fixes

securityinfragcpsecurity-advisoryengineer

security patch

This release of Container Optimized OS addresses numerous security vulnerabilities across the Linux kernel, systemd, Python, and OpenSSH. It also includes fixes for an xfs file system bug and an update to fluent-bit. These updates are crucial for maintaining system integrity and security for all users running Container Optimized OS.

→cos-129-19506-299-60
→cos-125-19216-532-42
→cos-117-18613-675-28

Security (82) ›

Container Optimized OS

Fixed CVE-2026-29111 in sys-apps/systemd
Container Optimized OS

Fixed CVE-2026-3644 in dev-lang/python
Container Optimized OS

Fixed CVE-2026-40355 and CVE-2026-40356 in app-crypt/mit-krb5.
Container Optimized OS

Fixed CVE-2026-53381 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53385 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53388 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53391 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53392 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53393 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53394 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53397 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53398 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53400 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, and CVE-2026-60002 in openssh.
Container Optimized OS

Fixed CVE-2026-6019 in dev-lang/python
Container Optimized OS

Fixed CVE-2026-63795 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63800 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63802 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63806 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63807 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63809 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63810 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63823 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63824 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63827 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63828 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63829 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63830 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63833 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64187 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64189 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-29111 in sys-apps/systemd
Container Optimized OS

Fixed CVE-2026-3644 in dev-lang/python
Container Optimized OS

Fixed CVE-2026-40355 and CVE-2026-40356 in app-crypt/mit-krb5.
Container Optimized OS

Fixed CVE-2026-53381 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53385 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53388 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53391 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53392 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53393 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53394 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53397 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53398 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53400 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, and CVE-2026-60002 in openssh.
Container Optimized OS

Fixed CVE-2026-6019 in dev-lang/python
Container Optimized OS

Fixed CVE-2026-63795 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63800 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63802 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63806 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63807 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63809 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63810 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63823 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63824 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63827 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63828 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63829 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63830 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63833 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64187 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64189 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-29111 in sys-apps/systemd
Container Optimized OS

Fixed CVE-2026-40355 and CVE-2026-40356 in app-crypt/mit-krb5.
Container Optimized OS

Fixed CVE-2026-53381 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53385 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53388 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53391 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53397 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53398 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-6019 in dev-lang/python
Container Optimized OS

Fixed CVE-2026-63794 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63795 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63800 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63802 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63807 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63809 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63823 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63824 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63827 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63828 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63830 in the Linux kernel.

Enhancements (3) ›

Container Optimized OS cos-129-19506-299-60

Kernel Docker Containerd GPU Drivers COS-6.12.94 v27.5.1 v2.2.5 See List

GPU Drivers COS-6.12.94 See List
Container Optimized OS cos-125-19216-532-42

Kernel Docker Containerd GPU Drivers COS-6.12.94 v27.5.1 v2.1.9 See List

GPU Drivers COS-6.12.94 See List
Container Optimized OS cos-117-18613-675-28

Kernel Docker Containerd GPU Drivers COS-6.6.143 v24.0.9 v1.7.34 See List

GPU Drivers COS-6.6.143 See List

Fixes (5) ›

Container Optimized OS

Updated udev rule for protected_stateful_partition
Container Optimized OS

Upgraded app-admin/fluent-bit to v4.2.7.
Container Optimized OS

Fixed an important bug for xfs file system users.
Container Optimized OS

Updated udev rule for protected_stateful_partition
Container Optimized OS

Upgraded net-fs/cifs-utils to v7.7, Upgraded sys-libs/talloc to v2.4.4-r1.

Read the original announcement →

https://docs.cloud.google.com/release-notes#July_28_2026

Related releases

Config Connector 1.154.1 Adds New Alpha Resources and Field Support Google Cloud release notes · 53m ago
Security Command Center: Data Residency & Agent Vulnerability Scanning Preview Google Cloud release notes · 53m ago
Cloud SQL for PostgreSQL: Private Service Connect changes August 2026 Google Cloud release notes · 53m ago
Cloud SQL for SQL Server: Private Service Connect connection behavior changes Google Cloud release notes · 53m ago
Cloud SQL for MySQL: Private Service Connect and QueryData Updates Google Cloud release notes · 53m ago
Cloud SQL for PostgreSQL: Faster CMEK Re-encryption Google Cloud release notes · 53m ago