Container Optimized OS Updates Address Security Vulnerabilities and Bugs
Several updates have been released for Container Optimized OS (COS) addressing multiple security vulnerabilities across glib, Python, wget, and the Linux kernel. These updates also include fixes for a bug in the XFS file system and upgraded versions of Docker and containerd. The changes are available for various COS versions and are relevant to users running containerized workloads on Google Cloud.
- →cos-117-18613-675-20
- →cos-121-18867-528-21
- →cos-129-19506-299-36
- →cos-125-19216-532-25
Security (28) ›
- Container Optimized OS
Fixed CVE-2026-58013,CVE-2026-58014,CVE-2026-58015,CVE-2026-58016 in glib.
- Container Optimized OS
Fixed CVE-2025-13462 in dev-lang/python
- Container Optimized OS
Fixed CVE-2026-3644 in dev-lang/python
- Container Optimized OS
Fixed CVE-2026-4224 in dev-lang/python
- Container Optimized OS
Fixed CVE-2026-43010 in the Linux kernel.
- Container Optimized OS
Fixed CVE-2026-46135 in the Linux kernel.
- Container Optimized OS
Fixed CVE-2026-46331 in the Linux kernel.
- Container Optimized OS
Fixed CVE-2026-53163 in the Linux kernel.
- Container Optimized OS
Fixed CVE-2026-53167 in the Linux kernel.
- Container Optimized OS
Fixed CVE-2026-58469, CVE-2026-58471, CVE-2026-58472 in net-misc/wget.
- Container Optimized OS
Updated containerd to v1.7.34. This resolves CVE-2026-46680 and CVE-2026-53488.
- Container Optimized OS
Fixed CVE-2026-58013,CVE-2026-58014,CVE-2026-58015,CVE-2026-58016 in glib.
- Container Optimized OS
Fixed CVE-2026-23278 in the Linux kernel.
- Container Optimized OS
Fixed CVE-2026-43010 in the Linux kernel.
- Container Optimized OS
Fixed CVE-2026-46135 in the Linux kernel.
- Container Optimized OS
Fixed CVE-2026-46331 in the Linux kernel.
- Container Optimized OS
Fixed CVE-2026-53163 in the Linux kernel.
- Container Optimized OS
Fixed CVE-2026-53167 in the Linux kernel.
- Container Optimized OS
Fixed CVE-2026-58469, CVE-2026-58471, CVE-2026-58472 in net-misc/wget.
- Container Optimized OS
Fixed CVE-2026-58013,CVE-2026-58014,CVE-2026-58015,CVE-2026-58016 in glib.
- Container Optimized OS
Fixed CVE-2026-43216 in the Linux kernel.
- Container Optimized OS
Fixed CVE-2026-58469, CVE-2026-58471, CVE-2026-58472 in net-misc/wget.
- Container Optimized OS
Updated containerd to v2.2.5. This resolves CVE-2026-46680,CVE-2026-50195,CVE-2026-53492,CVE-2026-53488.
- Container Optimized OS
Fixed CVE-2026-58013,CVE-2026-58014,CVE-2026-58015,CVE-2026-58016 in glib.
- Container Optimized OS
Fixed CVE-2026-43010 in the Linux kernel.
- Container Optimized OS
Fixed CVE-2026-43216 in the Linux kernel.
- Container Optimized OS
Fixed CVE-2026-58469, CVE-2026-58471, CVE-2026-58472 in net-misc/wget.
- Container Optimized OS
Updated containerd to v2.1.9. This resolves CVE-2026-46680,CVE-2026-50195, CVE-2026-53492,CVE-2026-53488.
Enhancements (4) ›
- Container Optimized OS cos-117-18613-675-20
Kernel Docker Containerd GPU Drivers COS-6.6.143 v24.0.9 v1.7.34 See List
- Container Optimized OS cos-121-18867-528-21
Kernel Docker Containerd GPU Drivers COS-6.6.143 v27.5.1 v2.0.10 See List
- Container Optimized OS cos-129-19506-299-36
Kernel Docker Containerd GPU Drivers COS-6.12.94 v27.5.1 v2.2.5 See List
- Container Optimized OS cos-125-19216-532-25
Kernel Docker Containerd GPU Drivers COS-6.12.94 v27.5.1 v2.1.9 See List
Fixes (8) ›
- Container Optimized OS
Fixed a bug in the XFS file system where direct I/O writes could use outdated block mappings during Copy-on-Write operations.
- Container Optimized OS
Upgraded net-misc/curl to 8.21.0.
- Container Optimized OS
Updated containerd to v2.0.10. This resolves CVE-2026-46680.
- Container Optimized OS
Fixed a bug in the XFS file system where direct I/O writes could use outdated block mappings during Copy-on-Write operations.
- Container Optimized OS
Upgraded net-misc/curl to 8.21.0.
- Container Optimized OS
Fixed a bug in the XFS file system where direct I/O writes could use outdated block mappings during Copy-on-Write operations.
- Container Optimized OS
Upgraded net-misc/curl to 8.21.0.
- Container Optimized OS
Upgraded net-misc/curl to 8.21.0.
https://docs.cloud.google.com/release-notes#July_20_2026
Related releases
- Cloud SDK 578.0.0: Database Migration default change, AlloyDB backup DR GA, BigQuery improvements Google Cloud release notes ·
- GKE: Opt-out of Arm taint, CORS for Gateways Google Cloud release notes ·
- Confidential VM: August 2026 kernel update may impact AMD SEV-SNP instances Google Cloud release notes ·
- Security Command Center ServiceNow Integration Updates Google Cloud release notes ·
- Compute Engine C4D Instances Increase Hyperdisk Throughput Google Cloud release notes ·
- Spanner allows creating tables without explicit primary keys Google Cloud release notes ·