gcp Google Cloud release notes · Aug 5, 2026

Container Optimized OS Updates Include Security Fixes and New Features

securityinfragcpsecurity-advisoryengineer

security patch

Container Optimized OS (COS) version 121 has been released with significant security updates, addressing numerous CVEs across components like the Linux kernel, Python, and OpenSSH. This release also introduces opt-in support for guest agent extensions, enhancing its manageability. These updates are critical for users running containerized workloads on GCP, providing improved security and new capabilities. The update incorporates Linux kernel version 6.6.143 and Docker 27.5.1.

→cos-121-18867-528-36

Security (26) ›

Container Optimized OS

Fixed CVE-2026-29111 in sys-apps/systemd
Container Optimized OS

Fixed CVE-2026-35177 in app-editors/vim and app-editors/vim-core.
Container Optimized OS

Fixed CVE-2026-3644 in dev-lang/python
Container Optimized OS

Fixed CVE-2026-40355 and CVE-2026-40356 in app-crypt/mit-krb5.
Container Optimized OS

Fixed CVE-2026-53381 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53385 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53388 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53391 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53397 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53398 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, and CVE-2026-60002 in openssh.
Container Optimized OS

Fixed CVE-2026-6019 in dev-lang/python
Container Optimized OS

Fixed CVE-2026-63794 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63795 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63800 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63802 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63807 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63809 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63823 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63824 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63827 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63828 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63830 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64244 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64247 in the Linux kernel.
Container Optimized OS

Upgraded net-libs/nghttp2 to 1.69.0 and fixed CVE-2026-58055.

Enhancements (2) ›

Container Optimized OS cos-121-18867-528-36

Kernel Docker Containerd GPU Drivers COS-6.6.143 v27.5.1 v2.0.10 See List

GPU Drivers COS-6.6.143 See List
Container Optimized OS

Added opt-in support for the guest agent extensions manager, MWLID, and Telemetry extensions.

Read the original announcement →

https://docs.cloud.google.com/release-notes#July_30_2026

Related releases

Access Transparency for Firebase App Hosting enters Preview Google Cloud release notes · 50m ago
Error Reporting Adds Rust Stack Trace Support on GCP Google Cloud release notes · 50m ago
Firebase App Hosting Access Approval enters Preview Google Cloud release notes · 50m ago
Apigee X Maintenance Updates Begin for Instances with Preferred Windows Google Cloud release notes · 50m ago
Cloud Workstations adds Compute Engine VM suspend and resume in Preview Google Cloud release notes · 50m ago
Google Cloud IAM Workflow Updated for Workforce Identity Pool Providers Google Cloud release notes · 50m ago