gcp Google Cloud release notes · 2d ago

Container Optimized OS Security and Bug Fixes

securityinfragcpsecurity-advisoryengineer

security patch

This release of Container Optimized OS addresses numerous security vulnerabilities across the Linux kernel, systemd, Python, and OpenSSH. It also includes fixes for an xfs file system bug and an update to fluent-bit. These updates are crucial for maintaining system integrity and security for all users running Container Optimized OS.

→cos-129-19506-299-60
→cos-125-19216-532-42
→cos-117-18613-675-28

Security (82) ›

Container Optimized OS

Fixed CVE-2026-29111 in sys-apps/systemd
Container Optimized OS

Fixed CVE-2026-3644 in dev-lang/python
Container Optimized OS

Fixed CVE-2026-40355 and CVE-2026-40356 in app-crypt/mit-krb5.
Container Optimized OS

Fixed CVE-2026-53381 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53385 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53388 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53391 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53392 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53393 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53394 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53397 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53398 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53400 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, and CVE-2026-60002 in openssh.
Container Optimized OS

Fixed CVE-2026-6019 in dev-lang/python
Container Optimized OS

Fixed CVE-2026-63795 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63800 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63802 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63806 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63807 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63809 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63810 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63823 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63824 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63827 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63828 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63829 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63830 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63833 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64187 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64189 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-29111 in sys-apps/systemd
Container Optimized OS

Fixed CVE-2026-3644 in dev-lang/python
Container Optimized OS

Fixed CVE-2026-40355 and CVE-2026-40356 in app-crypt/mit-krb5.
Container Optimized OS

Fixed CVE-2026-53381 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53385 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53388 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53391 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53392 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53393 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53394 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53397 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53398 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53400 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, and CVE-2026-60002 in openssh.
Container Optimized OS

Fixed CVE-2026-6019 in dev-lang/python
Container Optimized OS

Fixed CVE-2026-63795 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63800 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63802 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63806 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63807 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63809 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63810 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63823 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63824 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63827 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63828 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63829 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63830 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63833 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64187 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-64189 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-29111 in sys-apps/systemd
Container Optimized OS

Fixed CVE-2026-40355 and CVE-2026-40356 in app-crypt/mit-krb5.
Container Optimized OS

Fixed CVE-2026-53381 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53385 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53388 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53391 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53397 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-53398 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-6019 in dev-lang/python
Container Optimized OS

Fixed CVE-2026-63794 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63795 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63800 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63802 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63807 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63809 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63823 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63824 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63827 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63828 in the Linux kernel.
Container Optimized OS

Fixed CVE-2026-63830 in the Linux kernel.

Enhancements (3) ›

Container Optimized OS cos-129-19506-299-60

Kernel Docker Containerd GPU Drivers COS-6.12.94 v27.5.1 v2.2.5 See List

GPU Drivers COS-6.12.94 See List
Container Optimized OS cos-125-19216-532-42

Kernel Docker Containerd GPU Drivers COS-6.12.94 v27.5.1 v2.1.9 See List

GPU Drivers COS-6.12.94 See List
Container Optimized OS cos-117-18613-675-28

Kernel Docker Containerd GPU Drivers COS-6.6.143 v24.0.9 v1.7.34 See List

GPU Drivers COS-6.6.143 See List

Fixes (5) ›

Container Optimized OS

Updated udev rule for protected_stateful_partition
Container Optimized OS

Upgraded app-admin/fluent-bit to v4.2.7.
Container Optimized OS

Fixed an important bug for xfs file system users.
Container Optimized OS

Updated udev rule for protected_stateful_partition
Container Optimized OS

Upgraded net-fs/cifs-utils to v7.7, Upgraded sys-libs/talloc to v2.4.4-r1.

Read the original announcement →

https://docs.cloud.google.com/release-notes#July_28_2026

Related releases

Google Cloud AI Infrastructure and Orchestration Updates - July 2026 Google Cloud Blog · 4h ago
Confidential VMs Expand vCPU Support on C3D/C4D Google Cloud release notes · 4h ago
Google Kubernetes Engine: New versions and deprecations Google Cloud release notes · 4h ago
Datastream adds preview support for Workday replication Google Cloud release notes · 4h ago
Google Cloud CISO Perspectives: AI Threat Defense for Boards Google Cloud Blog · 7h ago
Data Studio Conversational Analytics GA, adds BigQuery integration Google Cloud release notes · 18h ago