You can see the latest product updates for all of Google Cloud on the Google Cloud page, browse and filter all release notes in the Google Cloud console, or programmatically access release notes in BigQuery.
To get the latest product updates delivered to you, add the URL of this page to your feed reader, or add the feed URL directly.
September 08, 2026
cos-dev-138-20098-0-0
| Kernel | Docker | Containerd | GPU Drivers |
| COS-6.18.49 | v29.4.3 | v2.3.2 | See List |
Updated the Linux kernel to v6.18.48.
Updated the Linux kernel to v6.18.49.
Updated sys-devel/binutils to v2.40.
Update dev-go/net to v0.55.0 to fix CVE-2026-25680.
August 31, 2026
cos-dev-138-20085-0-0
| Kernel | Docker | Containerd | GPU Drivers |
| COS-6.18.46 | v29.4.3 | v2.3.2 | See List |
Updated cos-gpu-installer to v2.7.7.
Updated the Linux kernel to v6.18.46.
Added support for net-fs/lustre-client-drivers v2.14.0_p259.
Updated cos-gpu-installer to v2.7.6.
Updated net-misc/openssh to version 10.4_p1.
Upgraded app-admin/google-guest-configs to v20260819.00.
Upgraded app-admin/oslogin to v20260814.00.
Upgraded app-arch/zstd to v1.5.7-r1.
Upgraded app-containers/docker-credential-helpers to v0.9.9.
Upgraded app-shells/dash to v0.5.13.5.
Upgraded chromeos-base/chromeos-dbus-bindings to v0.0.1-r2802.
Upgraded chromeos-base/power_manager-client to v0.0.1-r2975.
Upgraded chromeos-base/session_manager-client to v0.0.1-r2837.
Upgraded dev-db/sqlite to v3.53.4.
Upgraded dev-lang/luajit to v2.1.1780076327.
Upgraded dev-libs/expat to v2.8.3.
Upgraded dev-libs/gmp to v6.3.0-r2.
Upgraded dev-libs/inih to v62.
Upgraded dev-libs/libaio to v0.3.113_p8.
Upgraded dev-libs/libgpg-error to v1.61.
Upgraded dev-libs/libltdl to v2.5.4.
Upgraded dev-libs/libpcre2 to v10.47.
Upgraded dev-libs/libverto to v0.3.2-r1.
Upgraded dev-libs/popt to v1.19-r1.
Upgraded dev-libs/userspace-rcu to v0.15.6.
Upgraded dev-python/oauthlib to v3.3.1.
Upgraded net-dns/c-ares to v1.34.8.
Upgraded net-libs/nghttp2 to v1.70.0.
Upgraded sys-apps/acl to v2.4.0-r2.
Upgraded sys-apps/ethtool to v7.0.
Upgraded sys-apps/pciutils to v3.15.0.
Upgraded sys-apps/xemu to v0.0.10.
Upgraded sys-auth/passwdqc to v2.1.0-r1.
Upgraded sys-libs/libcap-ng to v0.9.5-r1.
Upgraded sys-process/lsof to v4.99.7.
Upgraded dev-libs/libxml2 to v2.15.3. This fixes CVE-2026-0989, CVE-2026-0990, and CVE-2026-0992.
Upgraded vim & vim-core to version 9.2.0280. This fixes CVE-2026-35177.
August 11, 2026
cos-dev-138-20035-0-0
| Kernel | Docker | Containerd | GPU Drivers |
| COS-6.18.41 | v29.4.3 | v2.3.2 | See List |
Added support for installing the Vast 4.5.8 NFS client drivers with cos-dkms.
Added kernel patch to reduce bcache garbage collection sleep interval to prevent I/O stalls.
Mask nfttables-restore.service to address time to ssh regression.
Updated app-admin/node-problem-detector to v0.8.25.
Fixed KCTF-8173f7e in the Linux Kernel.
Upgraded net-libs/nghttp2 to 1.69.0 and fixed CVE-2026-58055.
August 04, 2026
cos-dev-138-20012-0-0
| Kernel | Docker | Containerd | GPU Drivers |
| COS-6.18.41 | v29.4.3 | v2.3.2 | See List |
Added a splash screen which is displayed at login.
Added support for net-fs/lustre-client-drivers v2.14.0_p256.
Added support for the swiotlb=any kernel command line parameter.
Updated google-guest-configs to v20260121.00.
Updated the Linux kernel to v6.18.41.
cchost: Add bpf-lsm-policy for VM restrictions.
cchost: Increased the size of the kernel partitions from 16 MiB to 32 MiB.
Added TPUDirect support.
Added support for zswap in the Linux kernel.
Enabled CONFIG_MEMORY_FAILURE in the Linux kernel for ARM64. This should improve memory errors handling when running CUDA workloads.
Added support for NVIDIA GRID driver version 580.159.03.
Changed google-guest-agent's plugin installation path to /var/lib/google/guest-agent.
Update udev rule for protected_stateful_partition
Updated containerd to v2.3.2., containerd-test to v2.3.2.. This resolves CVE-2026-46680, CVE-2026-50195, CVE-2026-53488, CVE-2026-53492.
Updated dev-cpp/abseil-cpp to v20230802.0; dev-libs/flatbuffersto v24.3.25; sys-devel/autofdo to v0.30-r12; media-libs/cros-camera-hal-fake to v0.0.1-r616; chromeos-base/chromeos-dbus-bindings to v0.0.1-r2800; chromeos-base/chromeos-installer to v0.1.0-r4432; chromeos-base/hardware_verifier_proto to v0.0.1-r819; chromeos-base/imageloader to v0.0.1-r2064; chromeos-base/libbrillo to v0.0.1-r2547; chromeos-base/libchrome to v0.0.1-r1242; chromeos-base/libhwsec-foundation to v0.0.1-r826; chromeos-base/libstorage to v0.0.1-r162; chromeos-base/metrics to v0.0.2-r3890; chromeos-base/perfetto to v48.1-r69; chromeos-base/quipper to v0.0.1-r3050; chromeos-base/system_api to v0.0.1-r5972; chromeos-base/update_engine to v0.0.3-r5184; chromeos-base/vboot_reference to v1.0-r2986;dev-rust/vboot_reference-sys to v1.0.0-r36; chromeos-base/verity to v0.0.1-r583; chromeos-base/vpd to v0.0.1-r339; Removed packages dev-util/bazel,dev-util/iwyu, and dev-util/cvise; Removed chromeos-base/crash-reporter.
Updated dev-lang/rust, dev-lang/rust-host, dev-lang/rust-bootstrap to v1.84.1; dev-rust/protobuf-codegen to v2.28.0; dev-rust/system_api to v0.24.53-r1596; dev-rust/third-party-crates-src to v0.0.1-r288.
Updated dev-libs/isa-l to v2.32.1.
Updated sys-devel/gdb to v15.1; sys-apps/flashrom to v0.9.9-r1758; dev-python/cryptography to v43.0.3; Update dev-python/pyopenssl to v24.2.1.
Updated sys-devel/llvm to v20.0_pre547379; sys-libs/compiler-rt to v20.0_pre547379; sys-libs/libcxx to v20.0_pre547379; sys-libs/llvm-libunwind to v20.0_pre547379.
Upgrade Kubernetes to 1.36.1
Upgraded app-admin/oslogin to v20260626.00.
Upgraded app-crypt/sbsigntools to v0.42.0, and net-misc/m2crypto to v0.42.0.
Upgraded chromeos-base/debugd-client to v0.0.1-r2739.
Upgraded dev-db/sqlite to v3.53.3.
Upgraded dev-libs/expat to v2.8.2.
Upgraded dev-libs/openssl from v3.5.6 to v4.0.0.
Upgraded net-misc/chrony to v4.8-r2.
Upgraded net-misc/curl to 8.21.0.
Upgraded net-misc/socat to v1.8.1.3.
Upgraded sys-apps/acl to v2.4.0.
Upgraded sys-apps/attr to v2.6.0.
Fixed CVE-2026-29111 in sys-apps/systemd
Fixed CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, and CVE-2026-46598 in dev-go/crypto.
Fixed CVE-2026-40225 in sys-apps/systemd.
Fixed CVE-2026-40355 and CVE-2026-40356 in app-crypt/mit-krb5.
Fixed CVE-2026-58469, CVE-2026-58471, CVE-2026-58472 in net-misc/wget.
Fixed CVE-2026-58470 in net-misc/wget.
Fixed CVE-2026-59890 in dev-python/setuptools.
Updated glib and gdbus-codegen to v2.89.1. This resolves CVE-2026-58013,CVE-2026-58014,CVE-2026-58015,CVE-2026-58016.
Upgraded net-misc/openssh to version 10.3_p1. This resolves CVE-2026-35387 and CVE-2026-35388.
Runtime sysctl changes:
- Changed: fs.epoll.max_user_watches: 1808094 -> 1807627
- Changed: fs.fanotify.max_user_marks: 68395 -> 68378
- Changed: fs.inotify.max_user_watches: 64173 -> 64158
- Changed: kernel.threads-max: 63460 -> 63443
- Changed: net.ipv4.tcp_mem: 93993 125327 187986 -> 93969 125295 187938
- Changed: net.ipv4.udp_mem: 187989 250655 375978 -> 187941 250590 375882
- Changed: user.max_cgroup_namespaces: 31730 -> 31721
- Changed: user.max_fanotify_marks: 68395 -> 68378
- Changed: user.max_inotify_watches: 64173 -> 64158
- Changed: user.max_ipc_namespaces: 31730 -> 31721
- Changed: user.max_mnt_namespaces: 31730 -> 31721
- Changed: user.max_net_namespaces: 31730 -> 31721
- Changed: user.max_pid_namespaces: 31730 -> 31721
- Changed: user.max_time_namespaces: 31730 -> 31721
- Changed: user.max_user_namespaces: 31730 -> 31721
- Changed: user.max_uts_namespaces: 31730 -> 31721
- Changed: vm.lowmem_reserve_ratio: 256 256 32 0 -> 256 256 32 0 0
June 29, 2026
cos-dev-133-19907-0-0
| Kernel | Docker | Containerd | GPU Drivers |
| COS-6.18.36 | v29.4.3 | v2.2.3 | See List |
Updated app-arch/gzip to v1.14_p20260502, app-arch/xz-utils to v5.4.7, app-arch/zstd to v1.5.7, app-crypt/mit-krb5 to v1.22.2, app-editors/vim and app-editors/vim-core to v9.1.2148, dev-libs/libaio to v0.3.113-r2, dev-libs/xxhash to v0.8.3, dev-python/PySocks to v1.6.8, dev-python/cryptography to v39.0.2, dev-python/markupsafe to v2.1.5, dev-python/pyrsistent to v0.14.11, dev-python/python-magic to v0.4.27, dev-python/pyyaml to v6.0.3, dev-python/rfc3339-validator to v0.1.4-r1, net-misc/rsync to v3.4.4, sys-apps/mawk to v1.3.4_p20260302, sys-libs/libxcrypt to v4.4.38, sys-libs/talloc to v2.4.4, sys-fs/lvm2 to v2.03.39, sys-libs/binutils-libs to v2.46.1.
Updated app-containers/cloud-provider-gcp to v35.0.8, app-containers/docker-credential-gcr to v2.1.32, app-containers/nvidia-container-toolkit to v1.17.9, dev-libs/isa-l to v2.31.1, dev-python/oauthlib to v3.0.2, net-fs/nfs-utils to v2.6.4, sec-policy/apparmor-profiles, sys-apps/apparmor, and sys-libs/libapparmor to v3.1.7.
Updated dev-libs/libtraceevent to v1.7.3, dev-libs/libtracefs to v1.6.4, net-firewall/conntrack-tools to v1.4.9, sys-fs/fuse to v2.9.9, sys-fs/fuse-common to v3.10.5.
Updated sys-apps/casfs to v0.1.14.
Updated the Linux kernel to v6.18.36.
Added support for loading the ublk kernel module.
Upgraded app-admin/sosreport to v4.11.2.
Upgraded app-containers/docker-credential-helpers to v0.9.8.
Upgraded app-emulation/cloud-init to v26.1.
Upgraded app-shells/dash to v0.5.13.4-r2.
Upgraded chromeos-base/google-breakpad to v2026.06.22.165940-r278.
Upgraded net-misc/curl to v8.20.0-r1.
Fixed CVE-2026-40226 in sys-apps/systemd.
Fixed CVE-2026-5928 in sys-libs/glibc.
Fixed CVE-2026-6238 in sys-libs/glibc.
Fixed CVE-2026-7210 in dev-lang/python.
Upgraded dev-libs/openssl to v3.5.7 to fix CVE-2026-9076, CVE-2026-34183,CVE-2026-45445,CVE-2026-42764,CVE-2026-7383,CVE-2026-45447, CVE-2026-34182,CVE-2026-34181,CVE-2026-34180.
Runtime sysctl changes:
- Changed: kernel.threads-max: 63459 -> 63460
- Changed: net.ipv4.udp_mem: 187989 250654 375978 -> 187989 250655 375978
- Changed: user.max_cgroup_namespaces: 31729 -> 31730
- Changed: user.max_ipc_namespaces: 31729 -> 31730
- Changed: user.max_mnt_namespaces: 31729 -> 31730
- Changed: user.max_net_namespaces: 31729 -> 31730
- Changed: user.max_pid_namespaces: 31729 -> 31730
- Changed: user.max_time_namespaces: 31729 -> 31730
- Changed: user.max_user_namespaces: 31729 -> 31730
- Changed: user.max_uts_namespaces: 31729 -> 31730
June 22, 2026
cos-dev-133-19879-0-0
| Kernel | Docker | Containerd | GPU Drivers |
| COS-6.18.35 | v29.4.3 | v2.2.3 | See List |
Upgraded app-admin/logrotate to v3.22.0-r1.
Upgraded app-admin/oslogin to v20260605.00.
Upgraded chromeos-base/google-breakpad to v2026.06.03.194714-r275.
Upgraded cos-gpu-installer to v2.7.4.
Upgraded dev-db/sqlite to v3.53.2-r1.
Upgraded sys-apps/less to v704.
Fixed CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, and CVE-2026-47262 in app-containers/containerd.
June 15, 2026
cos-dev-133-19862-0-0
| Kernel | Docker | Containerd | GPU Drivers |
| COS-6.18.35 | v29.4.3 | v2.2.3 | See List |
Allow overriding IMA policy from oem partition.
On cchost boards, autoload IMA policy on boot.
Set static UUID for the stateful partition.
Update sys-process/audit to v3.0.9.
Updated glib to v2.86.5.
Updated sys-libs/pam to v1.5.3.
Updated the Linux kernel to v6.18.35.
Upgraded net-misc/openssh to v10.0_p2.
Upgraded sys-apps/ek-cpu-balloon to v1.2.3.
Added support for NVIDIA driver v580.159.04.
Fixed a crash that occurs when using the configfile or
source GRUB2 commands when Secure Boot is enabled.
Upgraded app-containers/docker to v29.4.3, Upgraded app-containers/docker-test to v29.4.3, Upgraded app-containers/docker-cli to v29.4.3.
Upgraded app-containers/docker-credential-helpers to v0.9.7.
Upgraded cos-gpu-installer to v2.7.2.
Upgraded sys-apps/gentoo-functions to v1.7.7.
Upgraded sys-apps/less to v702.
Upgraded sys-libs/libcap-ng to v0.9.3.
Fixed CVE-2026-44431 in dev-python/urllib3.
Fixed CVE-2026-6732 in dev-libs/libxml2.
Updated dev-lang/go to 1.25.10. This fixes CVE-2026-33814,CVE-2026-39819,CVE-2026-39823,CVE-2026-39825,CVE-2026-42499,CVE-2026-39817,CVE-2026-39820,CVE-2026-39826,CVE-2026-39836.
Updated dev-python/pyjwt to v2.13.0. This fixes CVE-2026-48522, CVE-2026-48524, CVE-2026-48525, CVE-2026-485256.
Updated net-misc/curl to v8.20. This fixes CVE-2026-5545,CVE-2026-4873,CVE-2026-6429,CVE-2026-7168,CVE-2026-6253,CVE-2026-6276,CVE-2026-7009,CVE-2026-5773.
May 21, 2026
cos-dev-133-19804-0-0
| Kernel | Docker | Containerd | GPU Drivers |
| COS-6.18.32 | v27.5.1 | v2.2.3 | See List |
Added support for the R595 Nvidia driver production branch.
Apply hardening sysctls on cchost boards.
Dropped support for the NVIDIA 535 drivers.
Enabled mm hardening kernel cmdlines on cchost.
Increased the size of the EFI partition from 32 MiB to 64 MiB and increased the sizes of both kernel partitions from 16 MiB to 32 MiB on x86.
Made it so that /etc/machine-id is mounted with noexec, nosuid, and nodev.
Switch cchost-* boards to legacy iptables.
Updated the Linux kernel to v6.18.32.
Updated uhaul to v6.18-0.
Upgrade the Linux kernel to version 6.18.
Upgraded sys-apps/xemu to v0.0.9.
Upgraded sys-fs/cryptsetup to v2.8.6.
Upgraded sysram to v6.18-0.
Added the cos_kernel_args tool that allows manipulating kernel command line arguments of a COS image.
Added nvidia-fs support to the COS GPU installer.
Added support for NVIDIA driver v580.159.03.
Added support for NVIDIA driver v595.71.05.
Added support for NVIDIA drivers v580.126.16 and v580.126.20.
Dropped support for NVIDIA MFT Tools v4.32.0.
Upgraded CASFS to v0.1.3.
Upgraded app-admin/oslogin to v20260227.00.
Upgraded app-admin/oslogin to v20260430.00.
Upgraded app-admin/sosreport to v4.11.1.
Upgraded app-containers/docker-credential-helpers to v0.9.6.
Upgraded app-shells/dash to v0.5.13.3.
Upgraded app-shells/dash to v0.5.13.4.
Upgraded chromeos-base/chromeos-common-script to v0.0.1-r672.
Upgraded chromeos-base/debugd-client to v0.0.1-r2738.
Upgraded chromeos-base/google-breakpad to v2026.04.24.230834-r272.
Upgraded chromeos-base/google-breakpad to v2026.05.06.161957-r274.
Upgraded chromeos-base/power_manager-client to v0.0.1-r2973.
Upgraded chromeos-base/session_manager-client to v0.0.1-r2834.
Upgraded cos-gpu-installer to v2.7.1.
Upgraded dev-db/sqlite to v3.53.1.
Upgraded dev-libs/expat to v2.8.0.
Upgraded dev-libs/expat to v2.8.1.
Upgraded net-libs/libnetfilter_queue to v1.0.5-r1.
Upgraded net-misc/rsync to v3.4.2.
Upgraded sys-apps/makedumpfile to v1.7.9.
Upgraded sys-libs/libcap to v2.78.
Upgraded sys-process/lsof to v4.99.6.
Upgraded the dump capture kernel to Linux v6.18.
Fixed CVE-2026-0994 in dev-libs/protobuf.
Fixed CVE-2026-34743 in app-arch/xz-utils.
Fixed CVE-2026-35385 and CVE-2026-35386 in net-misc/openssh.
Fixed CVE-2026-35414 in net-misc/openssh.
Fixed CVE-2026-4046 in sys-libs/glibc.
Fixed CVE-2026-4437,CVE-2026-4438 in sys-libs/glibc.
Fixed EFI variable OOB read in grub config parsing.
Fixed argument injection in toolbox.
Updated go to v1.25.9. This resolves CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-27140, CVE-2026-27144.
Updated the Linux kernel to v6.18.31.
Upgraded containerd to v2.2.3. This fixes CVE-2026-35469.
Upgraded dev-libs/libgcrypt to v1.10.4 to fix CVE-2026-41989.
Upgraded dev-libs/openssl to v3.5.6 to fix CVE-2026-28387, CVE-2026-28388, CVE-2026-28389, CVE-2026-28390, CVE-2026-31790.
Runtime sysctl changes:
- Added: dev.raid.sync_io_depth: 32
- Added: fs.dentry-negative: 0
- Added: fs.fanotify.watchdog_timeout: 0
- Added: fs.fuse.default_request_timeout: 0