Views
3

Your rating
Rate update installation process

Log in to rate this update.
Login

Risk factor
No ratings yet. Be the first to rate this update.

Smooth installs 0%
Minor issues 0%
Major issues 0%

Update Summary

Include Cloud Trace bucket location expansion, multiple Container Optimized OS releases with kernel and security fixes, GKE Kubernetes 1.36 Rapid channel availability, and reCAPTCHA Mobile SDK v18.9.0 for iOS.

Update Details

Security

  • Container Optimized OS fixed many Linux kernel CVEs, including CVE-2026-23276, CVE-2026-23375, CVE-2026-23391, CVE-2026-23397, CVE-2026-23398, CVE-2026-23399, CVE-2026-23401, CVE-2026-23412, CVE-2026-23413, CVE-2026-23414, CVE-2026-23417, CVE-2026-23439, CVE-2026-23449, CVE-2026-23452, CVE-2026-23455, CVE-2026-23456, CVE-2026-23457, CVE-2026-23465, CVE-2026-23471, CVE-2026-31392, CVE-2026-31400, CVE-2026-31402, CVE-2026-31403, CVE-2026-31406, CVE-2026-31407, CVE-2026-31413, CVE-2026-31414, CVE-2026-31415, CVE-2026-31416, CVE-2026-31418, CVE-2026-31421, CVE-2026-31423, CVE-2026-31424, CVE-2026-31426, CVE-2026-31427, CVE-2026-31428, CVE-2026-31431, CVE-2026-31434, CVE-2026-31438, CVE-2026-31446, CVE-2026-31447, CVE-2026-31448, CVE-2026-31449, CVE-2026-31450, CVE-2026-31451, CVE-2026-31452, CVE-2026-31453, CVE-2026-31454, CVE-2026-31455, CVE-2026-31466, CVE-2026-31469, CVE-2026-31495, CVE-2026-31496, CVE-2026-31515, CVE-2026-31516, CVE-2026-31519, CVE-2026-31521, CVE-2026-31523, CVE-2026-31525, CVE-2026-31528, CVE-2026-31531, CVE-2026-31546, CVE-2026-31664, CVE-2026-31667, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-27140, CVE-2026-27144, CVE-2026-34743, and CVE-2026-4046.
  • Container Optimized OS hardened /etc/machine-id by mounting it with noexec, nosuid, and nodev.
  • Container Optimized OS fixed KCTF-42156f9 in the Linux kernel.

Bug Fixes

  • Container Optimized OS fixed an ext4/jbd2 performance regression on CPU Node.
  • Container Optimized OS optimized IOMMU reference counting using atomic64_inc_return().
  • Container Optimized OS serialized sequence allocation to prevent timeouts during concurrent TLB invalidations.
  • Container Optimized OS upgraded sys-apps/makedumpfile to v1.7.9.
  • Container Optimized OS added support for NVIDIA drivers v580.126.16 and v580.126.20.

New Features

  • Cloud Trace observability buckets now support additional locations, including australia-southeast1, europe-central2, europe-north1, europe-southwest1, europe-west2, europe-west10, europe-west12, me-central2, northamerica-northeast1, and us-east4.
  • Container Optimized OS added support for the R595 Nvidia driver production branch.
  • Container Optimized OS enabled CONFIG_SCHED_CLASS_EXT and CONFIG_EXT_GROUP_SCHED.
  • GKE Kubernetes 1.36 is now available in the Rapid channel.
  • Kubernetes 1.36 introduces default GKE subsetting for new L4 Internal Load Balancer services, GA Mutating Admission Policies, and a kube-dns switch to CoreDNS.
  • reCAPTCHA Mobile SDK v18.9.0 for iOS adds reliability improvements, score calibration changes, and beta support for visionOS, arm64e, and Enhanced Security Features.

Hints

  • The /etc/machine-id mount hardening may affect workflows that expect it to be executable or writable.
  • The reCAPTCHA score distribution changes may require threshold review to reduce false positives.
  • The GKE L4 Internal Load Balancer subsetting change applies only to newly created services; existing services remain on Instance Groups.
  • Kubernetes 1.36 Rapid channel availability is announced separately from the detailed Kubernetes 1.36 release notes.
Product Information

Vendor: Google

Product: Cloud

Product type: Other

Platform: Web

Version: cos-beta-129-19506-120-44; cos-125-19216-220-180; cos-121-18867-

Vendor release date: May 1, 2026

Published on updatealert.io: Jun 4, 2026

Description: Cloud platform for compute, data, networking, and developer services.