ReleaseBytes
gcp Google Cloud release notes ·

Container Optimized OS Updates Address Security and Features

securityinfragcpsecurity-advisoryengineer
security feature patch

This release of Container Optimized OS includes numerous package updates and security patches for the Linux kernel and various libraries. It introduces new features for GPU support and enhances existing components. The updates are relevant for users running workloads on Google Cloud Platform, particularly those utilizing containers and GPU instances.

  • →cos-129-19506-224-80
  • →cos-125-19216-395-138
  • →cos-121-18867-381-201
Security (164) ›
  • Container Optimized OS

    Fixed CVE-2026-11822, CVE-2026-11824 in dev-db/sqlite.

  • Container Optimized OS

    Fixed CVE-2026-43116 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-45850 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52908 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52910 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52912 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52920 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52921 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52923 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52925 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52927 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52930 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52936 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52942 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52943 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52969 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52970 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52974 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52977 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52980 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52981 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52984 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52986 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52989 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52990 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52998 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52999 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53001 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53002 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53003 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53006 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53012 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53013 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53014 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53021 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53023 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53031 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53032 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53034 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53035 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53036 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53050 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53060 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53062 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53063 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53064 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53069 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53074 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53075 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53076 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53080 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53083 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53085 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53094 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53096 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53111 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53115 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53120 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53123 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53126 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53129 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-7210 in dev-lang/python.

  • Container Optimized OS

    Upgraded dev-libs/openssl to v3.5.7 to fix CVE-2026-45447, CVE-2026-45445,CVE-2026-34183,CVE-2026-42764,CVE-2026-7383,CVE-2026-34180, CVE-2026-34182,CVE-2026-34181,CVE-2026-9076.

  • Container Optimized OS

    Fixed CVE-2026-11822, CVE-2026-11824 in dev-db/sqlite.

  • Container Optimized OS

    Fixed CVE-2026-43116 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-45850 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52908 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52910 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52912 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52920 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52923 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52925 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52928 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52933 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52936 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52943 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52969 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52970 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52974 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52977 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52980 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52981 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52984 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52986 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52989 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52990 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52998 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52999 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53001 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53002 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53003 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53006 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53012 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53013 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53014 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53021 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53023 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53031 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53032 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53034 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53035 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53036 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53050 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53060 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53062 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53063 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53064 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53069 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53074 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53075 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53076 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53080 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53083 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53085 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53094 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53096 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53111 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53115 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53120 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53123 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53126 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53129 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-7210 in dev-lang/python.

  • Container Optimized OS

    Upgraded dev-libs/openssl to v3.5.7 to fix CVE-2026-45445, CVE-2026-34180,CVE-2026-9076,CVE-2026-34181,CVE-2026-42764,CVE-2026-34183, CVE-2026-34182,CVE-2026-45447,CVE-2026-7383.

  • Container Optimized OS

    Fixed CVE-2026-41568 in app-containers/docker.

  • Container Optimized OS

    Fixed CVE-2026-42306 in app-containers/docker.

  • Container Optimized OS

    Fixed CVE-2026-11822, CVE-2026-11824 in dev-db/sqlite.

  • Container Optimized OS

    Fixed CVE-2026-43088 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-43116 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-45850 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52908 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52910 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52912 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52920 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52921 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52925 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52927 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52928 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52930 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52933 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52942 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52943 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52969 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52970 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52977 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52984 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52986 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52998 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-52999 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53001 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53002 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53006 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53012 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53021 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53034 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53035 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53036 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53050 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53060 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53062 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53063 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53064 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53069 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53074 in the Linux kernel.

Features (4) ›
  • Container Optimized OS

    Added cos-dkms support for vast client drivers v4.5.7.

  • Container Optimized OS

    Support nvidia-fs for COS GPU installer

  • Container Optimized OS

    Added cos-dkms support for vast client drivers v4.5.7.

  • Container Optimized OS

    Support nvidia-fs for COS GPU installer

Enhancements (13) ›
  • Container Optimized OS cos-129-19506-224-80

    Kernel Docker Containerd GPU Drivers COS-6.12.90 v27.5.1 v2.2.3 See List

    GPU DriversCOS-6.12.90See List
  • Container Optimized OS

    Updated cloud-provider-gcp to v35.0.8, docker-credential-gcr to v2.1.32, docker-credential-helpers to v0.9.7, nvidia-container-toolkit to v1.17.9, isa-l to v2.31.1, oauthlib to v3.0.2, apparmor-profiles to v3.1.7, apparmor to v3.1.7, ek-cpu-balloon to v1.2.3, libapparmor to v3.1.7.

  • Container Optimized OS

    Updated gzip to v1.14_p20260502, xz-utils to v5.4.7, zstd to v1.5.7, mit-krb5 to v1.22.2, vim to v9.1.2148, vim-core to v9.1.2148, python-exec-conf to v2.4.10, libaio to v0.3.113, xxhash to v0.8.3, PySocks to v1.6.8, cryptography to v39.0.2, markupsafe to v2.1.5, pyrsistent to v0.14.11, python-magic to v0.4.27, pyyaml to v6.0.3, rfc3339-validator to v0.1.4, iptables to v1.8.13, mawk to v1.3.4_p20260302, lvm2 to v2.03.39, binutils-libs to v2.46.1, libxcrypt to v4.4.38, talloc to v2.4.4.

  • Container Optimized OS

    Updated libtraceevent to v1.7.3, libtracefs to v1.6.4, conntrack-tools to v1.4.9, fuse to v2.9.9, fuse-common to v3.10.5.

  • Container Optimized OS

    Updated sys-apps/casfs to v0.1.14.

  • Container Optimized OS cos-125-19216-395-138

    Kernel Docker Containerd GPU Drivers COS-6.12.85 v27.5.1 v2.1.7 See List

    GPU DriversCOS-6.12.85See List
  • Container Optimized OS

    Updated app-containers/docker-credential-gcr to v2.1.32, app-containers/docker-credential-helpers to v0.9.7, app-containers/nvidia-container-toolkit to v1.17.9, dev-libs/isa-l to v2.31.1, dev-python/oauthlib to v3.0.2, net-fs/nfs-utils to v2.6.4, sec-policy/apparmor-profiles to v3.1.7, sys-apps/apparmor to v3.1.7, sys-libs/libapparmor to v3.1.7.

  • Container Optimized OS

    Updated app-editors/vim to v9.1.2148, app-editors/vim-core to v9.1.2148, dev-libs/libtraceevent to v1.7.3, dev-libs/libtracefs to v1.6.4, net-firewall/conntrack-tools to v1.4.9, sys-fs/fuse to v2.9.9, sys-fs/fuse-common to v3.10.5.

  • Container Optimized OS

    Updated gzip to v1.14_p20260502, xz-utils to v5.4.7, zstd to v1.5.7, python-exec-conf to v2.4.10, expat to v2.8.1, json-c to v0.16.20220414, libaio to v0.3.113, xxhash to v0.8.3, PySocks to v1.6.8, cryptography to v39.0.2, markupsafe to v2.1.5, pyrsistent to v0.14.11, python-magic to v0.4.27, pyyaml to v6.0.3, rfc3339-validator to v0.1.4, urllib3 to v1.26.20, c-ares to v1.34.6, iptables to v1.8.13, gentoo-functions to v1.7.7, mawk to v1.3.4_p20260302, lvm2 to v2.03.39, binutils-libs to v2.46.1, libxcrypt to v4.4.38, talloc to v2.4.4.

  • Container Optimized OS cos-121-18867-381-201

    Kernel Docker Containerd GPU Drivers COS-6.6.137 v27.5.1 v2.0.8 See List

    GPU DriversCOS-6.6.137See List
  • Container Optimized OS

    Updated app-containers/docker-credential-gcr to v2.1.32, app-containers/docker-credential-helpers to v0.9.7, app-containers/nvidia-container-toolkit to v1.17.9, dev-libs/isa-l to v2.31.1, dev-python/oauthlib to v3.0.2, net-fs/nfs-utils to v2.6.4, sec-policy/apparmor-profiles to v3.1.7, sys-apps/apparmor to v3.1.7, sys-libs/libapparmor to v3.1.7.

  • Container Optimized OS

    Updated app-editors/vim to v9.1.2148, app-editors/vim-core to v9.1.2148, dev-libs/libtraceevent to v1.7.3, dev-libs/libtracefs to v1.6.4, net-firewall/conntrack-tools to v1.4.9, sys-fs/fuse to v2.9.9, sys-fs/fuse-common to v3.10.5.

  • Container Optimized OS

    Updated gzip to v1.14_p20260502, xz-utils to v5.4.7, zstd to v1.5.7, python-exec-conf to v2.4.10, expat to v2.8.1, json-c to v0.16.20220414, libaio to v0.3.113, xxhash to v0.8.3, PySocks to v1.6.8, cryptography to v39.0.2, markupsafe to v2.1.5, pyrsistent to v0.14.11, python-magic to v0.4.27, pyyaml to v6.0.3, rfc3339-validator to v0.1.4, urllib3 to v1.26.20, c-ares to v1.34.6, iptables to v1.8.13, gentoo-functions to v1.7.7, mawk to v1.3.4_p20260302, lvm2 to v2.03.39, binutils-libs to v2.46.1, libxcrypt to v4.4.38, talloc to v2.4.4, procps to v4.0.6.

Fixes (19) ›
  • Container Optimized OS

    Upgraded app-admin/sosreport to v4.11.2.

  • Container Optimized OS

    Upgraded app-shells/dash to v0.5.13.4-r2.

  • Container Optimized OS

    Upgraded dev-libs/expat to v2.8.1.

  • Container Optimized OS

    Upgraded net-misc/curl to v8.20.0-r1.

  • Container Optimized OS

    Upgraded net-misc/rsync to v3.4.4.

  • Container Optimized OS

    Upgraded sys-apps/gentoo-functions to v1.7.7.

  • Container Optimized OS

    Upgraded app-admin/logrotate to v3.22.0-r1.

  • Container Optimized OS

    Upgraded app-admin/sosreport to v4.11.2.

  • Container Optimized OS

    Upgraded app-shells/dash to v0.5.13.4-r2.

  • Container Optimized OS

    Upgraded dev-db/sqlite to v3.53.1.

  • Container Optimized OS

    Upgraded net-misc/curl to v8.20.0-r1.

  • Container Optimized OS

    Upgraded net-misc/rsync to v3.4.4.

  • Container Optimized OS

    Upgraded sys-apps/gentoo-functions to v1.7.6.

  • Container Optimized OS

    Upgraded sys-apps/less to v704.

  • Container Optimized OS

    Upgraded app-admin/logrotate to v3.22.0-r1.

  • Container Optimized OS

    Upgraded app-admin/sosreport to v4.11.2.

  • Container Optimized OS

    Upgraded app-shells/dash to v0.5.13.4-r2.

  • Container Optimized OS

    Upgraded net-misc/curl to v8.20.0-r1.

  • Container Optimized OS

    Upgraded sys-apps/less to v704.

Read the original announcement →

https://docs.cloud.google.com/release-notes#June_29_2026