# Android - Security Edge Release

**URL:** <https://discuss.circleci.com/t/android-security-edge-release/54937>\
**Category:** CircleCI Images\
**Tags:** android\
**Created:** [October 22, 2026, 4:56pm UTC](https://discuss.circleci.com/t/android-security-edge-release/54937 "2026-10-22T16:56:00Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![notthepoint](https://sea2.discourse-cdn.com/circleci/user_avatar/discuss.circleci.com/notthepoint/32/37222_2.png) [@notthepoint](https://discuss.circleci.com/u/notthepoint)\
**Post date:** [October 22, 2026, 4:56pm UTC](https://discuss.circleci.com/t/android-security-edge-release/54937/1 "2026-10-22T16:56:00Z")

</div>

Hey Everyone!

An updated edge image is being released for the Android machine executor.

This release is available under the `:edge` tag and also as a dated tag if you wish to pin:

- `android:2026.10.1`

_ **Note: Edge-only dated tags will automatically redirect to the current published image once the new images are rolled out.** _

## What’s New

This is part of a security update, we’re releasing a new android machine with the latest patched security updates. See [CircleCI response to the eMudhra certificate authority compromise (CVE-2026-111943)](https://discuss.circleci.com/t/circleci-response-to-the-emudhra-certificate-authority-compromise-cve-2026-111943/54933)

### Security Updates

This image includes the latest Ubuntu 24.04 security patches. The toolchain updates below also bring in upstream security fixes, notably in Docker, containerd, Node.js, Python, and Ruby. See [CircleCI response to the eMudhra certificate authority compromise (CVE-2026-111943)](https://discuss.circleci.com/t/circleci-response-to-the-emudhra-certificate-authority-compromise-cve-2026-111943/54933)

### Standard Update

A refresh of toolchains: Docker, containerd, Docker Compose, Node.js, Python, pyenv, Ruby, Maven, and Fastlane have all been updated.

Changes worth calling out:

- **Ruby** moved across a major version from `3.4.9` to `4.0.7`. Gems with native extensions or pinned to Ruby 3.x may need updating.

- **Python** moved from `3.14.4` to `3.15.1` (pyenv `2.6.31` → `2.8.11`).

- **Maven** moved from `3.9.16` to `3.10.0`.

- **Node.js LTS** updated from `24.15.0` to `24.22.1`, and **Node.js Current** from `26.1.0` to `26.12.1`.

- **Docker** moved from `29.4.2` to `29.9.2`, **containerd** from `2.2.3` to `2.4.2`, and **Docker Compose** from `5.1.3` to `5.6.1`.

### Removed

- The global `grunt` npm package is no longer preinstalled, because it conflicts with `grunt-cli` under newer npm. `grunt-cli` is still installed, so if your project depends on `grunt`, add it to your project’s `devDependencies` (which is the setup Grunt recommends).

## Example

```yaml
version: 2.1
workflows:
  main:
    jobs:
     - build
jobs:
  build:
    machine:
      image: android:edge
    resource_class: medium
    steps:
      - checkout
      - run: echo "Do some things"

```

## Software Versions

**Notes:**

- The “Old version” column reflects the previous image (`2026.05.1`).
- The “New version” column reflects the new edge image (`2026.10.1`).

### Android (Ubuntu 24.04 base)

| Software | Old version (2026.05.1) | New version (2026.10.2) |
| --- | --- | --- |
| Google Cloud SDK | 562.0.0 | 562.0.0 |
| Git LFS | 3.1.4 | 3.1.4 |
| Gradle | 9.5.1 | 9.5.1 |
| Fastlane | 2.234.0 | 2.241.1 |
| OpenJDK 21 | 21 | 21 |
| Apache Maven | 3.9.16 | 3.10.0 |
| Node.js LTS | 24.15.0 | 24.22.1 |
| Node.js Current | 26.1.0 | 26.12.1 |
| Python 3 | 3.14.4 | 3.15.1 |
| pyenv | 2.6.31 | 2.8.11 |
| Ruby | 3.4.9 | 4.0.7 |
| Docker | 29.4.2 | 29.9.2 |
| containerd | 2.2.3 | 2.4.2 |
| Docker Compose | 5.6.1 | 5.6.1 |