Container-Optimized OS cos-117 · Version Status

Container-Optimized OS cos-117 End of Life Date

Container-Optimized OS cos-117 end-of-life date, support status, and CVE risk. Data reconciled from official vendor documentation and endoflife.date at every build; the source of each date is on the product page.

Container-Optimized OS cos-117 is past end of life. This version no longer receives security patches. 22 days past EOL — migrate to a supported version immediately.
EOL Date
Sep 1, 2026
22 days past EOL
Latest Release
cos-117-18613-731-21
LTS release
Release Date
Oct 2, 2024
Container-Optimized OS cos-117 series
Lifecycle detail

Container-Optimized OS cos-117 was released on October 2, 2024 and support ended on September 1, 2026 — a supported lifespan of 1 year and 11 months, in line with the 1 year and 11 months median for Container-Optimized OS LTS releases. It was a long-term support (LTS) release, so it received a longer patch window than the interim releases around it. The last patch it will ever receive is cos-117-18613-731-21, published September 17, 2026 — 16 days after the published end-of-life date. It has been without security patches for 22 days.

← Container-Optimized OS cos-113 All Container-Optimized OS versions Container-Optimized OS cos-121 →
35 / 100
Medium Risk
EOL Risk Score™  How is this calculated? →
EOL Recency
25/40
Attack Surface
10/30 Medium tier
CISA KEV Exposure
0/20 Not in KEV
Extended Support
0/10 Available
EOL Risk Score™ — proprietary methodology by endoflife.ai. Factors: EOL recency, attack surface breadth, CISA KEV catalog presence, extended support availability. Updated at every build. Methodology →  ·  View score card →
Recommended upgrade path
Container-Optimized OS cos-129
Latest release: cos-129-19506-448-36 · EOL: Mar 1, 2028
View full Container-Optimized OS timeline →
Extended Support
Extended Container-Optimized OS cos-117 support is available

Commercial vendors offer security patches beyond EOL. Compare your options.

Compare Options →
All Container-Optimized OS Versions
VersionLatestEOL DateStatus
cos-69 LTS cos-69-10895-385-0 Dec 1, 2019 EOL
cos-73 LTS cos-73-11647-656-0 Sep 5, 2020 EOL
cos-77 LTS cos-77-12371-1109-0 Apr 1, 2021 EOL
cos-81 LTS cos-81-12871-1317-8 Jan 10, 2022 EOL
cos-85 LTS cos-85-13310-1498-13 Sep 1, 2022 EOL
cos-89 LTS cos-89-16108-798-22 Mar 1, 2023 EOL
cos-93 LTS cos-93-16623-461-42 Oct 24, 2023 EOL
cos-97 LTS cos-97-16919-450-41 Mar 27, 2024 EOL

What does Container-Optimized OS cos-117 end of life mean?

When Container-Optimized OS cos-117 reaches end of life, the maintainers stop issuing security patches for this version. CVEs discovered after the EOL date are publicly disclosed on the National Vulnerability Database with no patch available. Exploit code frequently appears on GitHub within days of disclosure.

The CVE blind spot: A CVE-based scan does not show the ongoing accumulation of unpatched vulnerabilities in EOL software versions. Some scanners flag unsupported versions of common products, but coverage varies, and none of them give you the date in advance. Running Container-Optimized OS cos-117 past its EOL date creates a growing attack surface that a clean scan result does not rule out.

Migrate to Container-Optimized OS cos-129 or implement compensating controls — network segmentation, enhanced monitoring, restricted access — while migration is underway.

Frequently Asked Questions
When does Container-Optimized OS cos-117 reach end of life?
Container-Optimized OS cos-117 reached end of life on September 1, 2026. This version is no longer receiving security patches.
Is Container-Optimized OS cos-117 still supported?
No. Container-Optimized OS cos-117 reached end of life on September 1, 2026 and is no longer receiving security patches.
What should I upgrade to from Container-Optimized OS cos-117?
The recommended upgrade from Container-Optimized OS cos-117 is Container-Optimized OS cos-129 — the latest actively supported version. Check the Container-Optimized OS full timeline for all supported versions.
What are the security risks of running Container-Optimized OS cos-117 past EOL?
When Container-Optimized OS cos-117 reaches end of life, the maintainers stop issuing security patches. Any CVEs disclosed after the EOL date accumulate with no vendor fix. A CVE-based scan does not show this — it is the CVE blind spot; some scanners flag unsupported versions of common products, but coverage varies and none give the date in advance. Organizations running EOL Container-Optimized OS should migrate immediately or implement compensating controls.
Data from endoflife.date API · Generated at build time · How we source data →