gcp Google Cloud release notes · 1d ago

GCP Container Optimized OS: Component Updates and Security Fixes Across Multiple Versions

securitygcppreviewsecurity-advisoryengineer

security patch

Google Cloud has released updates for multiple branches of Container Optimized OS (COS), including `cos-beta-133`, `cos-129`, `cos-dev-138`, `cos-125`, `cos-121`, and `cos-117`. These updates deliver kernel upgrades, new versions of Docker and Containerd, and enhancements to GPU drivers. Critically, the releases address a significant number of security vulnerabilities across various components, including the Linux kernel and `libxml2`. These patches enhance the overall security posture and stability of container workloads running on GCP.

→cos-beta-133-19999-44-21
→cos-129-19506-448-8
→cos-dev-138-20085-0-0
→cos-125-19216-655-6
→cos-121-18867-584-3

Security (18) ›

Container Optimized OS

Fixed CVE-2026-68293 in the Linux kernel.
Container Optimized OS

Upgraded dev-libs/libxml2 to v2.15.3. This fixes CVE-2026-0989, CVE-2026-0990, and CVE-2026-0992.
Container Optimized OS

Fixed CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, and CVE-2026-46598 in dev-go/crypto.
Container Optimized OS

Upgraded dev-libs/libxml2 to v2.15.3. This fixes CVE-2026-0989, CVE-2026-0990, and CVE-2026-0992.
Container Optimized OS

Upgraded dev-libs/libxml2 to v2.15.3. This fixes CVE-2026-0989, CVE-2026-0990, and CVE-2026-0992.
Container Optimized OS

Upgraded vim & vim-core to version 9.2.0280. This fixes CVE-2026-35177.
Container Optimized OS

Fixed CVE-2026-68293 in the Linux kernel.
Container Optimized OS

Upgraded dev-libs/libxml2 to v2.15.3. This fixes CVE-2026-0989, CVE-2026-0990, and CVE-2026-0992.
Container Optimized OS

Fixed CVE-2026-64371 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-68142 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-68142 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-68432 in the Linux kernel.
Container Optimized OS

Upgraded dev-libs/libxml2 to v2.15.3. This fixes CVE-2026-0989, CVE-2026-0990, and CVE-2026-0992.
Container Optimized OS

Fixed CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, and CVE-2026-60002 in openssh.
Container Optimized OS

Fixed CVE-2026-68142 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-68142 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-68432 in the Linux kernel.
Container Optimized OS

Upgraded dev-libs/libxml2 to v2.15.3. This fixes CVE-2026-0989, CVE-2026-0990, and CVE-2026-0992.

Enhancements (16) ›

Container Optimized OS cos-beta-133-19999-44-21

Kernel Docker Containerd GPU Drivers COS-6.18.46 v29.4.3 v2.3.2 See List

GPU Drivers COS-6.18.46 See List
Container Optimized OS cos-129-19506-448-8

Kernel Docker Containerd GPU Drivers COS-6.12.105 v27.5.1 v2.2.7 See List

GPU Drivers COS-6.12.105 See List
Container Optimized OS cos-dev-138-20085-0-0

Kernel Docker Containerd GPU Drivers COS-6.18.46 v29.4.3 v2.3.2 See List

GPU Drivers COS-6.18.46 See List
Container Optimized OS

LTS Refresh from main-R133-cos-6.18 to release-R133-cos-6.18
Container Optimized OS

Updated containerd and containerd-test to v2.2.7.
Container Optimized OS

Updated cos-gpu-installer to v2.7.7.
Container Optimized OS

Updated cos-gpu-installer to v2.7.7.
Container Optimized OS

Updated the Linux kernel to v6.18.46.
Container Optimized OS

Updated the Linux kernel to v6.18.45.
Container Optimized OS

Updated the Linux kernel to v6.18.46.
Container Optimized OS

Runtime sysctl changes: Changed: net.ipv4.udp_mem: 188034 250715 376068 -> 188034 250714 376068
Container Optimized OS cos-125-19216-655-6

Kernel Docker Containerd GPU Drivers COS-6.12.105 v27.5.1 v2.2.7 See List

GPU Drivers COS-6.12.105 See List
Container Optimized OS

Runtime sysctl changes: Changed: net.ipv4.udp_mem: 188034 250714 376068 -> 188034 250715 376068
Container Optimized OS cos-121-18867-584-3

Kernel Docker Containerd GPU Drivers COS-6.6.153 v27.5.1 v2.0.10 See List

GPU Drivers COS-6.6.153 See List
Container Optimized OS

Updated cos-gpu-installer to v2.7.7.
Container Optimized OS cos-117-18613-731-2

Kernel Docker Containerd GPU Drivers COS-6.6.153 v24.0.9 v1.7.34 See List

GPU Drivers COS-6.6.153 See List

Fixes (69) ›

Container Optimized OS

LTS Refresh from main-R129-cos-6.12 to release-R129-cos-6.12
Container Optimized OS

Upgraded app-admin/fluent-bit to v4.2.8.
Container Optimized OS

Added support for net-fs/lustre-client-drivers v2.14.0_p259.
Container Optimized OS

Upgraded app-arch/unzip to v6.0_p31.
Container Optimized OS

Updated cos-gpu-installer to v2.7.6.
Container Optimized OS

Added support for net-fs/lustre-client-drivers v2.14.0_p259.
Container Optimized OS

Upgraded app-shells/dash to v0.5.13.5.
Container Optimized OS

Updated net-misc/openssh to version 10.4_p1.
Container Optimized OS

Updated cos-gpu-installer to v2.7.6.
Container Optimized OS

Upgraded dev-libs/libverto to v0.3.2-r1.
Container Optimized OS

Upgraded app-admin/google-guest-configs to v20260819.00.
Container Optimized OS

Updated net-misc/openssh to version 10.4_p1.
Container Optimized OS

Upgraded dev-libs/popt to v1.19-r1.
Container Optimized OS

Upgraded app-admin/oslogin to v20260814.00.
Container Optimized OS

Upgraded app-admin/fluent-bit to v4.2.8.
Container Optimized OS

Upgraded sys-apps/acl to v2.4.0-r2.
Container Optimized OS

Upgraded app-arch/zstd to v1.5.7-r1.
Container Optimized OS

Upgraded app-admin/google-guest-configs to v20260819.00.
Container Optimized OS

Upgraded sys-auth/passwdqc to v2.0.3-r1.
Container Optimized OS

Upgraded app-containers/docker-credential-helpers to v0.9.9.
Container Optimized OS

Upgraded app-admin/node-problem-detector to v0.8.25.
Container Optimized OS

Upgraded app-shells/dash to v0.5.13.5.
Container Optimized OS

Upgraded app-admin/oslogin to v20260814.00.
Container Optimized OS

Upgraded chromeos-base/chromeos-dbus-bindings to v0.0.1-r2802.
Container Optimized OS

Upgraded app-admin/sosreport to v4.12.0.
Container Optimized OS

Upgraded chromeos-base/power_manager-client to v0.0.1-r2975.
Container Optimized OS

Upgraded app-arch/unzip to v6.0_p31.
Container Optimized OS

Upgraded chromeos-base/session_manager-client to v0.0.1-r2837.
Container Optimized OS

Upgraded app-containers/docker-credential-helpers to v0.9.9.
Container Optimized OS

Upgraded dev-db/sqlite to v3.53.4.
Container Optimized OS

Upgraded app-containers/docker-registry-test to v2.8.3.
Container Optimized OS

Upgraded dev-lang/luajit to v2.1.1780076327.
Container Optimized OS

Upgraded app-shells/dash to v0.5.13.5.
Container Optimized OS

Upgraded dev-libs/expat to v2.8.3.
Container Optimized OS

Upgraded dev-db/sqlite to v3.53.4.
Container Optimized OS

Upgraded dev-libs/gmp to v6.3.0-r2.
Container Optimized OS

Upgraded sys-apps/acl to v2.4.0-r2.
Container Optimized OS

Upgraded dev-libs/inih to v62.
Container Optimized OS

Upgraded sys-apps/xemu to v0.0.10.
Container Optimized OS

Upgraded dev-libs/libaio to v0.3.113_p8.
Container Optimized OS

Upgraded sys-auth/passwdqc to v2.0.3-r1.
Container Optimized OS

Upgraded dev-libs/libgpg-error to v1.61.
Container Optimized OS

Upgraded sys-fs/e2fsprogs to v1.47.4.
Container Optimized OS

Upgraded dev-libs/libltdl to v2.5.4.
Container Optimized OS

Upgraded sys-libs/libcap-ng to v0.9.5-r1.
Container Optimized OS

Upgraded dev-libs/libpcre2 to v10.47.
Container Optimized OS

Upgraded sys-process/lsof to v4.99.7.
Container Optimized OS

Upgraded dev-libs/libverto to v0.3.2-r1.
Container Optimized OS

Upgraded dev-libs/popt to v1.19-r1.
Container Optimized OS

Upgraded dev-libs/userspace-rcu to v0.15.6.
Container Optimized OS

Upgraded dev-python/oauthlib to v3.3.1.
Container Optimized OS

Upgraded net-dns/c-ares to v1.34.8.
Container Optimized OS

Upgraded net-libs/nghttp2 to v1.70.0.
Container Optimized OS

Upgraded sys-apps/acl to v2.4.0-r2.
Container Optimized OS

Upgraded sys-apps/ethtool to v7.0.
Container Optimized OS

Upgraded sys-apps/pciutils to v3.15.0.
Container Optimized OS

Upgraded sys-apps/xemu to v0.0.10.
Container Optimized OS

Upgraded sys-auth/passwdqc to v2.1.0-r1.
Container Optimized OS

Upgraded sys-libs/libcap-ng to v0.9.5-r1.
Container Optimized OS

Upgraded sys-process/lsof to v4.99.7.
Container Optimized OS

LTS Refresh from main-R125-cos-6.12 to release-R125-cos-6.12
Container Optimized OS

Upgraded app-arch/zstd to v1.5.7-r1.
Container Optimized OS

Upgraded app-containers/cni-plugins to v1.9.1.
Container Optimized OS

Upgraded dev-libs/libverto to v0.3.2-r1.
Container Optimized OS

Upgraded dev-libs/popt to v1.19-r1.
Container Optimized OS

Upgraded dev-libs/xxhash to v0.8.3-r2.
Container Optimized OS

Upgraded sys-auth/passwdqc to v2.0.3-r1.
Container Optimized OS

LTS Refresh from main-R121-cos-6.6 to release-R121-cos-6.6
Container Optimized OS

LTS Refresh from main-R117-cos-6.6 to release-R117-cos-6.6

Read the original announcement →

https://docs.cloud.google.com/release-notes#August_31_2026

Related releases

BigQuery Rust SDK Enters Public Preview Google Cloud release notes · 21h ago
Cloud SDK 583.0.0 delivers updates for AlloyDB, BigQuery, Composer, and Cloud Run Google Cloud release notes · 21h ago
Agent Platform Workbench Enhances Cloud Storage Integration and Notebook Reliability Google Cloud release notes · 2d ago
Cloud KMS Now Supports Key Ring Deletion in General Availability Google Cloud release notes · Aug 24, 2026
Cloud Spanner Now Supports Secondary Indexes Based on Scalar Expressions Google Cloud release notes · 4d ago
Cloud Run Introduces Agent Platform Feature Configuration and Go 1.27 GA Google Cloud release notes · 21h ago