gcp Google Cloud release notes ·

Container Optimized OS Updates Address Security Vulnerabilities and Bugs

securityinfragcpsecurity-advisoryengineer
security patch

Several updates have been released for Container Optimized OS (COS) addressing multiple security vulnerabilities across glib, Python, wget, and the Linux kernel. These updates also include fixes for a bug in the XFS file system and upgraded versions of Docker and containerd. The changes are available for various COS versions and are relevant to users running containerized workloads on Google Cloud.

  • cos-117-18613-675-20
  • cos-121-18867-528-21
  • cos-129-19506-299-36
  • cos-125-19216-532-25
Security (28)
  • Container Optimized OS

    Fixed CVE-2026-58013,CVE-2026-58014,CVE-2026-58015,CVE-2026-58016 in glib.

  • Container Optimized OS

    Fixed CVE-2025-13462 in dev-lang/python

  • Container Optimized OS

    Fixed CVE-2026-3644 in dev-lang/python

  • Container Optimized OS

    Fixed CVE-2026-4224 in dev-lang/python

  • Container Optimized OS

    Fixed CVE-2026-43010 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-46135 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-46331 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53163 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53167 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-58469, CVE-2026-58471, CVE-2026-58472 in net-misc/wget.

  • Container Optimized OS

    Updated containerd to v1.7.34. This resolves CVE-2026-46680 and CVE-2026-53488.

  • Container Optimized OS

    Fixed CVE-2026-58013,CVE-2026-58014,CVE-2026-58015,CVE-2026-58016 in glib.

  • Container Optimized OS

    Fixed CVE-2026-23278 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-43010 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-46135 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-46331 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53163 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-53167 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-58469, CVE-2026-58471, CVE-2026-58472 in net-misc/wget.

  • Container Optimized OS

    Fixed CVE-2026-58013,CVE-2026-58014,CVE-2026-58015,CVE-2026-58016 in glib.

  • Container Optimized OS

    Fixed CVE-2026-43216 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-58469, CVE-2026-58471, CVE-2026-58472 in net-misc/wget.

  • Container Optimized OS

    Updated containerd to v2.2.5. This resolves CVE-2026-46680,CVE-2026-50195,CVE-2026-53492,CVE-2026-53488.

  • Container Optimized OS

    Fixed CVE-2026-58013,CVE-2026-58014,CVE-2026-58015,CVE-2026-58016 in glib.

  • Container Optimized OS

    Fixed CVE-2026-43010 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-43216 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-58469, CVE-2026-58471, CVE-2026-58472 in net-misc/wget.

  • Container Optimized OS

    Updated containerd to v2.1.9. This resolves CVE-2026-46680,CVE-2026-50195, CVE-2026-53492,CVE-2026-53488.

Enhancements (4)
Fixes (8)
  • Container Optimized OS

    Fixed a bug in the XFS file system where direct I/O writes could use outdated block mappings during Copy-on-Write operations.

  • Container Optimized OS

    Upgraded net-misc/curl to 8.21.0.

  • Container Optimized OS

    Updated containerd to v2.0.10. This resolves CVE-2026-46680.

  • Container Optimized OS

    Fixed a bug in the XFS file system where direct I/O writes could use outdated block mappings during Copy-on-Write operations.

  • Container Optimized OS

    Upgraded net-misc/curl to 8.21.0.

  • Container Optimized OS

    Fixed a bug in the XFS file system where direct I/O writes could use outdated block mappings during Copy-on-Write operations.

  • Container Optimized OS

    Upgraded net-misc/curl to 8.21.0.

  • Container Optimized OS

    Upgraded net-misc/curl to 8.21.0.

Read the original announcement →

https://docs.cloud.google.com/release-notes#July_20_2026

Related releases