gcp Google Cloud release notes ·

Container Optimized OS Updates Address Multiple Security Vulnerabilities

securitygcpsecurity-advisoryengineer
security patch

This release of Container Optimized OS (COS) incorporates numerous security fixes for Docker, containerd, and the Linux kernel, including multiple CVEs. These updates are critical for maintaining system integrity and protecting against known vulnerabilities. All users of COS are advised to update to benefit from these security enhancements.

  • cos-129-19506-224-49
  • cos-125-19216-395-109
  • cos-117-18613-613-61
  • cos-121-18867-381-183
Security (25)
  • Container Optimized OS

    Fix CVE-2026-41567 in app-containers/docker.

  • Container Optimized OS

    Fix CVE-2026-41568 in app-containers/docker.

  • Container Optimized OS

    Fix CVE-2026-42306 in app-containers/docker.

  • Container Optimized OS

    Fixed CVE-2026-46160 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-46315 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-46321 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-46322 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-46323 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, and CVE-2026-47262 in app-containers/containerd.

  • Container Optimized OS

    Fix CVE-2026-41568 in app-containers/docker.

  • Container Optimized OS

    Fix CVE-2026-415687 in app-containers/docker.

  • Container Optimized OS

    Fix CVE-2026-42306 in app-containers/docker.

  • Container Optimized OS

    Fixed CVE-2026-46315 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-46321 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-46322 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-46323 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, and CVE-2026-47262 in app-containers/containerd.

  • Container Optimized OS

    Fix CVE-2026-41567 in app-containers/docker.

  • Container Optimized OS

    Fix CVE-2026-41568 in app-containers/docker.

  • Container Optimized OS

    Fix CVE-2026-42306 in app-containers/docker.

  • Container Optimized OS

    Fixed CVE-2025-13462 in dev-lang/python.

  • Container Optimized OS

    Fixed CVE-2026-46323 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, and CVE-2026-47262 in app-containers/containerd.

  • Container Optimized OS

    Fixed CVE-2026-46323 in the Linux kernel.

  • Container Optimized OS

    Fixed CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, and CVE-2026-47262 in app-containers/containerd.

Enhancements (9)
  • Container Optimized OS cos-129-19506-224-49

    Kernel Docker Containerd GPU Drivers COS-6.12.90 v27.5.1 v2.2.3 See List

  • Container Optimized OS

    Updated oslogin to v20260605.00.

  • Container Optimized OS cos-125-19216-395-109

    Kernel Docker Containerd GPU Drivers COS-6.12.85 v27.5.1 v2.1.7 See List

  • Container Optimized OS

    Updated oslogin to v20260605.00.

  • Container Optimized OS

    Runtime sysctl changes: Changed: net.ipv4.udp_mem: 188034 250715 376068 -> 188034 250714 376068

  • Container Optimized OS cos-117-18613-613-61

    Kernel Docker Containerd GPU Drivers COS-6.6.137 v24.0.9 v1.7.31 See List

  • Container Optimized OS

    Updated oslogin to v20260605.00.

  • Container Optimized OS cos-121-18867-381-183

    Kernel Docker Containerd GPU Drivers COS-6.6.137 v27.5.1 v2.0.8 See List

  • Container Optimized OS

    Updated oslogin to v20260605.00.

Fixes (2)
  • Container Optimized OS

    Upgraded app-admin/logrotate to v3.22.0-r1.

  • Container Optimized OS

    Upgraded sys-apps/less to v704.

Read the original announcement →

https://docs.cloud.google.com/release-notes#June_18_2026

Related releases