You can see the latest product updates for all of Google Cloud on the
[Google Cloud](https://docs.cloud.google.com/release-notes) page, browse and filter all release notes in the
[Google Cloud console](https://console.cloud.google.com/release-notes),
or programmatically access release notes in
[BigQuery](https://console.cloud.google.com/bigquery?p=bigquery-public-data&d=google_cloud_release_notes&t=release_notes&page=table).
To get the latest product updates delivered to you, add the URL of this page to your
[feed
reader](https://wikipedia.org/wiki/Comparison_of_feed_aggregators), or add the
[feed URL](https://docs.cloud.google.com/feeds/cos-105-release-notes.xml) directly.
> [!WARNING]
> **Warning:** Milestone 105 introduces a new logging agent named fluent-bit that can be optionally used. However, fluent-bit will become the default logging agent in all future milestones after 105. See here for how to [enable fluent-bit on x86 COS 105 images.](https://docs.cloud.google.com/container-optimized-os/docs/how-to/logging)
## March 31, 2025
Change
### cos-105-17412-535-98
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-5.15.173](https://cos.googlesource.com/third_party/kernel/+/673f98d5eeb0fc72367650c48e10a752a26f00f7) | v23.0.3 | v1.7.23 | [See List](https://storage.googleapis.com/cos-tools/17412.535.98/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2024-57977 in the Linux kernel.
Security Fixed CVE-2025-21846 in the Linux kernel.
Security Updated dev-go/net to v0.33.0. This fixed CVE-2023-45288.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812690 -\> 812692
Security Fixed CVE-2025-21763 in the Linux kernel.
Security Fixed CVE-2025-21726 in the Linux kernel.
Security Fixed CVE-2024-57979 in the Linux kernel.
Security Fixed CVE-2024-53174 in the Linux kernel.
Security Fixed CVE-2025-21760 in the Linux kernel.
Security Fixed CVE-2024-56558 in the Linux kernel.
Security Fixed CVE-2025-21796 in the Linux kernel.
Security Fixed CVE-2025-21844 in the Linux kernel.
Security Fixed CVE-2025-21814 in the Linux kernel.
Security Fixed CVE-2024-58005 in the Linux kernel.
Security Fixed CVE-2024-53194 in the Linux kernel.
Security Fixed CVE-2025-21745 in the Linux kernel.
Security Fixed CVE-2025-21727 in the Linux kernel.
Security Fixed KCTF-fcdd224 in the Linux kernel.
Security Fixed CVE-2025-21764 in the Linux kernel.
Security Fixed CVE-2025-21762 in the Linux kernel.
## March 24, 2025
Change
### cos-105-17412-535-84
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-5.15.173](https://cos.googlesource.com/third_party/kernel/+/1df7116d574a7487f113bfac879d91cec7dea786) | v23.0.3 | v1.7.23 | [See List](https://storage.googleapis.com/cos-tools/17412.535.84/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2025-21791 in the Linux kernel.
Security Fixed CVE-2025-21858 in the Linux kernel.
Security Fixed CVE-2024-58017 in the Linux kernel.
Security Fixed CVE-2025-21785 in the Linux kernel.
Security Fixed CVE-2022-49728 in the Linux kernel.
Security Fixed KCTF-638ba50 in the Linux kernel.
Security Fixed KCTF-647cef2 in the Linux kernel.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812699 -\> 812690
## March 17, 2025
Change
### cos-105-17412-535-78
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-5.15.173](https://cos.googlesource.com/third_party/kernel/+/7af1b41f1f32166259c40a13c0aeebe5c1a8d11c) | v23.0.3 | v1.7.23 | [See List](https://storage.googleapis.com/cos-tools/17412.535.78/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2025-26465 and CVE-2025-26466 in net-misc/openssh.
Change Upgraded gzip to v1.13.
Security Upgraded dev-libs/libxml2 to version 1.12.10. This fixes CVE-2024-56171, CVE-2025-27113 and CVE-2025-24928.
Feature Added support for NVIDIA 570.124.06 GPU driver.
Updated the R570, LATEST GPU driver label to version 570.124.06 for all GPU devices.
Updated the DEFAULT GPU driver label to version 570.124.06 for NVIDIA_H200 GPU devices.
Security Upgraded dev-go/crypto to v0.35.0. This fixes CVE-2025-22869.
Security Fixed CVE-2024-53589 in sys-libs/libutils-libs.
Security Fixed CVE-2024-57946 in the Linux kernel.
Fixed Fixed console TTY leak in runc shim in containerd.
Security Fixed CVE-2024-26982 in the Linux kernel.
Change Updated the default tag of the GPU driver supporting the NVIDIA H200 GPU device to 570.86.15.
Security Fixed CVE-2023-45288 in app-containers/docker.
Feature Updated cos-gpu-installer to v2.4.8: Add the -skip-nvidia-smi flag to disable the execution of nvidia-smi verification during gpu driver installation.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812677 -\> 812699
Security Upgraded net-misc/wget to version 1.25.0. This fixes
CVE-2024-10524.
## March 03, 2025
Change
### cos-105-17412-535-63
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-5.15.173](https://cos.googlesource.com/third_party/kernel/+/2ad73a401e5c064c3b927f74acbec3ac1b03b7ed) | v23.0.3 | v1.7.23 | [See List](https://storage.googleapis.com/cos-tools/17412.535.63/lakitu/gpu_driver_versions.textproto) |
Fixed Upgraded sys-apps/which to v2.23.
Security Fixed CVE-2025-21690 in the Linux kernel.
Fixed Upgraded sys-apps/diffutils to v3.11-r1.
## February 24, 2025
Change
### cos-105-17412-535-61
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-5.15.173](https://cos.googlesource.com/third_party/kernel/+/52070ca369fc14ffeadb0b794325dd7174bfbf33) | v23.0.3 | v1.7.23 | [See List](https://storage.googleapis.com/cos-tools/17412.535.61/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2024-9287 in dev-lang/python.
Security Fixed CVE-2024-53215 in the Linux kernel.
Security Fixed CVE-2024-57951 in the Linux kernel.
Security Fixed CVE-2023-27043 in dev-lang/python.
Security Fixed CVE-2025-0395 in sys-libs/glibc.
Security Fixed CVE-2024-56569 in the Linux kernel.
## February 18, 2025
Change
### cos-105-17412-535-59
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-5.15.173](https://cos.googlesource.com/third_party/kernel/+/046e3bbc6bebe305d264f46620cc66f9b149f6d4) | v23.0.3 | v1.7.23 | [See List](https://storage.googleapis.com/cos-tools/17412.535.59/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2024-53215 in the Linux kernel.
Security Fixed CVE-2025-0395 in sys-libs/glibc.
Security Fixed CVE-2023-27043 in dev-lang/python.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812690 -\> 812681
Security Fixed CVE-2024-56569 in the Linux kernel.
Security Fixed CVE-2024-9287 in dev-lang/python.
## February 10, 2025
Change
### cos-105-17412-535-55
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-5.15.173](https://cos.googlesource.com/third_party/kernel/+/8c963bd224ec959e77d66017e5a7750ea9a80a23) | v23.0.3 | v1.7.23 | [See List](https://storage.googleapis.com/cos-tools/17412.535.55/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2025-21683 in the Linux kernel.
Security Fixed CVE-2025-21669 in the Linux kernel.
Fixed Upgraded sys-apps/diffutils to v3.11.
Security Fixed CVE-2024-48881 in the Linux kernel.
Security Fixed CVE-2025-21665 in the Linux kernel.
Security Fixed CVE-2024-56672 in the Linux kernel.
Security Fixed CVE-2025-0840 in binutils.
Change Updated Konlet to v0.13.4.
Security Fixed CVE-2024-50304 in the Linux kernel.
Security Fixed CVE-2024-57874 in the Linux kernel.
Security Fixed CVE-2024-53217 in the Linux kernel.
Security Fixed CVE-2025-21666 in the Linux kernel.
Security Fixed CVE-2025-21631 in the Linux kernel.
## February 03, 2025
Change
### cos-105-17412-535-42
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-5.15.173](https://cos.googlesource.com/third_party/kernel/+/fa6d12428f53596058ac4d613358d928470803be) | v23.0.3 | v1.7.23 | [See List](https://storage.googleapis.com/cos-tools/17412.535.42/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2024-56688 in the Linux kernel.
Security Fixed CVE-2024-53124 in the Linux kernel.
Security Fixed KCTF-bc50835 in the Linux kernel.
Security Fixed CVE-2024-47707 in the Linux kernel.
Security Fixed CVE-2024-40896 in libxml2.
Security Fixed KCTF-3d5ad2d in the Linux kernel.
Security Fixed CVE-2024-56756 in the Linux kernel.
Feature Added NVIDIA GPU driver's R570 branch. Updated the LATEST GPU driver label to version 570.86.15.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812681 -\> 812686
## January 27, 2025
Change
### cos-105-17412-535-34
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-5.15.173](https://cos.googlesource.com/third_party/kernel/+/8ecee723a27a310af5c1aaf68da0bf853463fda7) | v23.0.3 | v1.7.23 | [See List](https://storage.googleapis.com/cos-tools/17412.535.34/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2024-53121 in the Linux kernel.
Security Update NVIDIA GPU drivers to v535.230.02 for R535
and v550.144.03 for R550 for all GPUs. This resolves
CVE-2024-53869, CVE-2024-0150, CVE-2024-0149, CVE-2024-0147 and CVE-2024-0131.
Security Fixed CVE-2024-50275 in the Linux kernel.
Security Fixed CVE-2024-50055 in the Linux kernel.
Security Fixed CVE-2024-53206 in the Linux kernel.
Security Fixed KCTF-f8d4bc4 in the Linux kernel.
Security Fixed CVE-2024-56763 in the Linux kernel.
Security Fixed CVE-2024-53136 in the Linux kernel.
Feature Added NVIDIA GPU drivers R565 branch - Update R565, latest driver to v565.57.01.
Security Fixed CVE-2024-53140 in the Linux kernel.
Security Fixed CVE-2024-53119 in the Linux kernel.
Security Fixed CVE-2024-56779 in the Linux kernel.
Security Fixed CVE-2024-56601 in the Linux kernel.
Security Fixed CVE-2024-56600 in the Linux kernel.
Security Upgraded dev-go/crypto to v0.31.0. This fixes CVE-2024-45337.
Security Fixed CVE-2024-53142 in the Linux kernel.
Security Fixed CVE-2024-53173 in the Linux kernel.
Security Fixed CVE-2024-49996 in the Linux kernel.
Security Fixed CVE-2024-53113 in the Linux kernel.
Security Fixed CVE-2024-57841 in the Linux kernel.
Security Fixed CVE-2024-56615 in the Linux kernel.
Security Fixed CVE-2024-55916 in the Linux kernel.
Security Fixed CVE-2024-50121 in the Linux kernel.
Fixed Upgraded sys-apps/file to v5.46-r2.
Security Fixed KCTF-5eb7de8 in the Linux kernel.
Security Fixed CVE-2024-45306 and CVE-2024-47814 in vim-core.
Security Fixed CVE-2024-45306 and CVE-2024-47814 in vim.
Security Fixed CVE-2024-57890 in the Linux kernel.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812682 -\> 812681
## January 17, 2025
Change
### cos-105-17412-535-16
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-5.15.173](https://cos.googlesource.com/third_party/kernel/+/58d3cd4d7459221c42f001549cb9ecf6fd78202f) | v23.0.3 | v1.7.23 | [See List](https://storage.googleapis.com/cos-tools/17412.535.16/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2024-56606 in the Linux kernel.
Security Fixed KCTF-35f56c5 in the Linux kernel.
Security Fixed CVE-2024-56614 in the Linux kernel.
Security Fixed CVE-2024-56745 in the Linux kernel.
Security Fixed CVE-2024-53146 in the Linux kernel.
Security Fixed CVE-2024-56739 in the Linux kernel.
Security Fixed CVE-2024-56694 in the Linux kernel.
Security Fixed CVE-2024-53151 in the Linux kernel.
Security Fixed CVE-2024-56780 in the Linux kernel.
Security Upgraded rsync to version 3.3.0-r2. This fixes CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087, CVE-2024-12088, and CVE-2024-12747.
Security Fixed CVE-2024-56720 in the Linux kernel.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812690 -\> 812682
## January 13, 2025
Change
### cos-105-17412-535-6
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-5.15.173](https://cos.googlesource.com/third_party/kernel/+/fa50651ae4450032ed8565f050845935213ceebc) | v23.0.3 | v1.7.23 | [See List](https://storage.googleapis.com/cos-tools/17412.535.6/lakitu/gpu_driver_versions.textproto) |
Announcement This is an [LTS Refresh release](https://docs.cloud.google.com/container-optimized-os/docs/concepts/versioning#lts_refresh_releases).
Change Runtime sysctl changes:
- Changed: fs.file-max: 812681 -\> 812690
Feature Added NVIDIA GPU drivers R560 branch - Update R560, latest driver to v560.35.03.
Fixed Upgraded sys-apps/file to v5.46-r1.
Fixed Fixed a kernel crash that occurred when running some BPF
programs.
## January 06, 2025
Change
### cos-105-17412-495-77
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-5.15.167](https://cos.googlesource.com/third_party/kernel/+/5d37e880d245396cc4fa166441cf6ce6a3d6c76b) | v23.0.3 | v1.7.23 | [See List](https://storage.googleapis.com/cos-tools/17412.495.77/lakitu/gpu_driver_versions.textproto) |
Change Runtime sysctl changes:
- Changed: fs.file-max: 812685 -\> 812681
Security Fixed CVE-2024-53099 in the Linux kernel.
## January 02, 2025
Change
### cos-105-17412-495-75
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-5.15.167](https://cos.googlesource.com/third_party/kernel/+/cc53f55433a4e01ea51d28dde1594514252eace2) | v23.0.3 | v1.7.23 | [See List](https://storage.googleapis.com/cos-tools/17412.495.75/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2024-50194 in the linux kernel.
## December 16, 2024
Change
### cos-105-17412-495-73
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-5.15.167](https://cos.googlesource.com/third_party/kernel/+/d013eadd440085609f9d97c64263e8122bad2c48) | v23.0.3 | v1.7.23 | [See List](https://storage.googleapis.com/cos-tools/17412.495.73/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2024-50186 in the Linux kernel.
Security Fixed CVE-2024-50191 in the Linux kernel.
## December 09, 2024
Change
### cos-105-17412-495-69
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-5.15.167](https://cos.googlesource.com/third_party/kernel/+/f498f0d657742da01b1e3223aa5e8184db67e464) | v23.0.3 | v1.7.23 | [See List](https://storage.googleapis.com/cos-tools/17412.495.69/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2024-50141 in the Linux kernel.
Feature Upgraded cos-gpu-installer to v2.4.6: Support NVIDIA_H200 GPU in cos-gpu-installer.
Security Fixed CVE-2024-50278 in the Linux kernel.
Security Fixed CVE-2024-53052 in the Linux kernel.
Security Upgraded dev-libs/libgcrypt to v1.10.1-r3. Fixes CVE-2024-2236.
Feature Support NVIDIA_H200 GPU - Added support for the R560 series, including driver versions 560.35.03. Added support for the R550 series, including driver versions 550.127.05 and 550.90.12. Assigned the latest, default, and R560 tags to driver version 560.35.03. Assigned the R550 tag to driver version 550.127.05.
## December 04, 2024
Change
### cos-105-17412-495-62
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-5.15.167](https://cos.googlesource.com/third_party/kernel/+/1772dc0f4ae79115c905f907f27e80efbb9da19d) | v23.0.3 | v1.7.23 | [See List](https://storage.googleapis.com/cos-tools/17412.495.62/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2024-50195 in the Linux kernel.
Security Fixed CVE-2024-53066 in the Linux kernel.
Security Fixed CVE-2024-50151 in the Linux kernel.
Security Fixed CVE-2024-50143 in the Linux kernel.
Security Fixed CVE-2024-38538 in the Linux kernel.
Security Fixed CVE-2024-50153 in the Linux kernel.
Security Fixed CVE-2024-50257 in the Linux kernel.
Security Updated net-misc/curl to v8.11.0. This fixes CVE-2024-9681.
Added duphandle-init-netrc.patch, netrc-large-file.patch, setopt-http_content_decoding.patch to fix regression issues in curl v8.11.0.
Security Updated runc to version 1.1.14. This fixes CVE-2024-45310, CVE-2024-9341, CVE-2024-9407, and CVE-2024-9675.
Change Upgraded app-shells/dash to v0.5.12-r1.
Security Fixed CVE-2024-50036 in the Linux kernel.
Security Fixed CVE-2024-50099 in the Linux kernel.
Security Fixed CVE-2024-50142 in the Linux kernel.
Security Fixed KCTF-6ca5753 in the Linux kernel.
Security Fixed CVE-2024-50228 in the Linux kernel.
Change Upgraded sys-apps/makedumpfile to v1.7.6.
Security Fixed CVE-2024-49927 in the Linux kernel.
Security Fixed CVE-2024-50279 in the Linux kernel.
Security Fixed CVE-2024-50095 in the Linux kernel.
Security Fixed CVE-2024-49949 in the Linux kernel.
Security Fixed CVE-2024-50072 in the Linux kernel.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812699 -\> 812685
Change Upgraded sys-process/lsof to v4.99.4.
Security Fixed CVE-2024-49878 in the Linux kernel.
Security Fixed CVE-2024-49946 in the Linux kernel.
Fixed Upgraded cos-gpu-installer to v2.4.4. This fixes an issue where GPU drivers that only have two numeric version components could not be loaded.
Security Fixed CVE-2024-50163 in the Linux kernel.
Security Fixed CVE-2024-50262 in the Linux kernel.
Security Fixed CVE-2024-50192 in the Linux kernel.
Security Fixed CVE-2024-50154 in the Linux kernel.
Security Fixed CVE-2024-49948 in the Linux kernel.
Security Fixed CVE-2024-50162 in the Linux kernel.
Security Fixed CVE-2024-50251 in the Linux kernel.
## November 18, 2024
Change
### cos-105-17412-495-45
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-5.15.167](https://cos.googlesource.com/third_party/kernel/+/5c89ab2f00de83b6a534efe9bc3d2a028c5b111a) | v23.0.3 | v1.7.23 | [See List](https://storage.googleapis.com/cos-tools/17412.495.45/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2024-46855 in the Linux kernel.
Security Fixed CVE-2024-50131 in the Linux kernel.
Security Fixed CVE-2024-50110 in the Linux kernel.
Security Fixed CVE-2024-49954 in the Linux kernel.
Security Fixed CVE-2024-50010 in the Linux kernel.
Security Fixed CVE-2024-49959 in the Linux kernel.
Security Fixed CVE-2024-49952 in the Linux kernel.
## November 11, 2024
Change
### cos-105-17412-495-37
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-5.15.167](https://cos.googlesource.com/third_party/kernel/+/3a44775cab80f15b1bd16884f7d5aba55930be85) | v23.0.3 | v1.7.23 | [See List](https://storage.googleapis.com/cos-tools/17412.495.37/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2024-50082 in the Linux kernel.
Security Fixed CVE-2024-50002 in the Linux kernel.
Security Fixed CVE-2024-50006 in the Linux kernel.
Security Fixed CVE-2024-50015 in the Linux kernel.
Security Fixed CVE-2024-50024 in the Linux kernel.
Security Fixed CVE-2024-50038 in the Linux kernel.
Security Fixed CVE-2024-49967 in the Linux kernel.
Security Fixed CVE-2024-50602 in dev-libs/expat.
Security Fixed KCTF-2e95c43 in the Linux kernel.
Security Fixed CVE-2024-50083 in the Linux kernel.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812681 -\> 812709
Security Fixed CVE-2024-50001 in the Linux kernel.
Security Fixed CVE-2024-49881 in the Linux kernel.
## November 06, 2024
Change
### cos-105-17412-495-28
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-5.15.167](https://cos.googlesource.com/third_party/kernel/+/0298be0c202bc1b5e42b2ba7d0e2018e5e7c419d) | v23.0.3 | v1.7.23 | [See List](https://storage.googleapis.com/cos-tools/17412.495.28/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2024-47679 in the Linux kernel.
Security Updated NVIDIA GPU drivers to v535.216.01 for default/R535
and v550.127.05 for R550 for all GPUs. This resolves CVE-2024-0126.
Security Fixed CVE-2024-50000 in the Linux kernel.
Security Fixed CVE-2024-49936 in the Linux kernel.
Security Fixed CVE-2024-47710 in the Linux kernel.
Security Fixed CVE-2024-50033 in the Linux kernel.
Security Fixed CVE-2024-47705 in the Linux kernel.
Security Fixed CVE-2024-47739 in the Linux kernel.
Security Fixed CVE-2024-49993 in the Linux kernel.
Security Fixed CVE-2024-47684 in the Linux kernel.
Security Fixed CVE-2024-49889 in the Linux kernel.
Security Fixed CVE-2024-47701 in the Linux kernel.
Security Fixed CVE-2024-50019 in the Linux kernel.
Security Fixed CVE-2024-50046 in the Linux kernel.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812685 -\> 812681
Security Fixed CVE-2024-50035 in the Linux kernel.
Security Fixed CVE-2024-49858 in the Linux kernel.
Security Fixed CVE-2024-50039 in the Linux kernel.
Security Fixed CVE-2024-49875 in the Linux kernel.
Security Fixed CVE-2024-47692 in the Linux kernel.
Security Fixed CVE-2024-47696 in the Linux kernel.
Security Fixed CVE-2024-50045 in the Linux kernel.
Security Fixed CVE-2024-49884 in the Linux kernel.
Security Fixed CVE-2024-47742 in the Linux kernel.
Feature Added NVIDIA GPU drivers R560 branch - Update R560, latest driver to v560.35.03.
Security Fixed CVE-2024-49975 in the Linux kernel.
Security Fixed CVE-2024-49983 in the Linux kernel.
Security Fixed CVE-2024-49860 in the Linux kernel.
Security Fixed CVE-2024-49851 in the Linux kernel.
Security Fixed CVE-2024-49883 in the Linux kernel.
Security Fixed CVE-2024-47693 in the Linux kernel.
Security Fixed CVE-2024-47737 in the Linux kernel.
Security Fixed CVE-2024-47706 in the Linux kernel.
## October 28, 2024
Change
### cos-105-17412-495-13
|---|---|---|---|---|
| Date | Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| Oct 28, 2024 | [COS-5.15.167](https://cos.googlesource.com/third_party/kernel/+/94b03f47e77a3b064860f46a3f9e0d6751b657eb) | v23.0.3 | v1.7.23 | [See List](https://storage.googleapis.com/cos-tools/17412.495.13/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2024-8096 and CVE-2024-7264 in net-misc/curl.
Change Upgraded app-containers/cni-plugins to v1.5.1.
Feature Updated R550, latest driver to v550.90.12.
Change Upgraded app-admin/google-guest-configs to v20240725.00.
Security Fixed CVE-2024-47685 in the Linux kernel.
Security Fixed CVE-2024-38632 in the Linux kernel.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812700 -\> 812685
Security Fixed CVE-2024-47674 in the Linux kernel.
Security Fixed CVE-2024-27017 in the Linux kernel.
Security Fixed CVE-2024-39463 in the Linux kernel.
## October 21, 2024
Change
### cos-105-17412-495-4
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-5.15.167](https://cos.googlesource.com/third_party/kernel/+/04e3290e686e97474c9ec5666384af8ffe42c2a9) | v23.0.3 | v1.7.23 | [See List](https://storage.googleapis.com/cos-tools/17412.495.4/lakitu/gpu_driver_versions.textproto) |
Announcement This is an [LTS Refresh release](https://docs.cloud.google.com/container-optimized-os/docs/concepts/versioning#lts_refresh_releases).
Change Updated app-containers/containerd to 1.7.23.
Change Upgraded app-arch/lz4 to v1.10.0-r1.
Security Fixed CVE-2024-43892 in the Linux kernel.
Change Upgraded net-nds/rpcbind to v1.2.6.
Security Fixed CVE-2024-44958 in the Linux kernel.
Security Updated app-arch/libarchive to version 3.7.6. This fixed CVE-2024-48957, CVE-2024-48958.
Change Upgraded sys-libs/libcap to v2.70.
Change Upgraded app-arch/pigz to v2.8.
Change Upgraded sys-libs/gdbm to v1.24.
Change Upgraded net-libs/libnetfilter_cthelper to v1.0.1-r1.
Change Upgraded net-libs/libnetfilter_queue to v1.0.5.
Change Upgraded net-libs/libmnl to v1.0.5.
Change Upgraded net-libs/libtirpc to v1.3.4-r3.
Change Upgraded sys-libs/zlib to v1.3.1-r1.
Change Upgraded dev-libs/nss to v3.103.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812681 -\> 812700
Change Upgraded net-libs/libnetfilter_cttimeout to v1.0.1.
## October 14, 2024
Change
### cos-105-17412-448-66
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-5.15.163](https://cos.googlesource.com/third_party/kernel/+/40fdfa9e37a776e89856f02048b8b83d5c4272b5) | v23.0.3 | v1.7.19 | [See List](https://storage.googleapis.com/cos-tools/17412.448.66/lakitu/gpu_driver_versions.textproto) |
Change Runtime sysctl changes:
- Changed: fs.file-max: 812685 -\> 812681
Security Fixed CVE-2024-44965 in the Linux kernel.
Fixed Update sosreport to v4.5.4
Security Fixed CVE-2024-46829 in the Linux kernel.
Security Fixed CVE-2024-45003 in the Linux kernel.
## October 07, 2024
Change
### cos-105-17412-448-61
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-5.15.163](https://cos.googlesource.com/third_party/kernel/+/ded3c18cc9e98e33afa0b1bdc23cc2227a8d449e) | v23.0.3 | v1.7.19 | [See List](https://storage.googleapis.com/cos-tools/17412.448.61/lakitu/gpu_driver_versions.textproto) |
Change Runtime sysctl changes:
- Changed: fs.file-max: 812662 -\> 812685
Feature Update R535 default driver to v535.183.06.
Security Fixed CVE-2024-46744 in the Linux kernel.
Fixed Updated the GPU installer to v2.4.1.
Security Fixed CVE-2024-46750 in the Linux kernel.
## September 30, 2024
Change
### cos-105-17412-448-57
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-5.15.163](https://cos.googlesource.com/third_party/kernel/+/df4343d455b11c55721db6445f53cd2dec3b5ccb) | v23.0.3 | v1.7.19 | [See List](https://storage.googleapis.com/cos-tools/17412.448.57/lakitu/gpu_driver_versions.textproto) |
Feature Fixed A3 Edge VM names in google guest agent configs.
Security Fixed CVE-2024-46679 in the Linux kernel.
Security Fixed CVE-2024-46743 in the Linux kernel
Fixed Updated cos-gpu-installer to v2.4.0. It identifies GPU drivers before installation.
Security Fixed CVE-2024-42246 in the Linux kernel
Security Fixed CVE-2024-46800 in the Linux kernel
Change Upgraded app-admin/google-guest-configs to v20240725.00.
Security Fixed CVE-2024-46763 in the Linux kernel.
Security Fixed CVE-2024-46738 in the Linux kernel
Security Fixed CVE-2024-46721 in the Linux kernel
Security Fixed CVE-2024-44940 in the Linux kernel
## September 23, 2024
Change
### cos-105-17412-448-49
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-5.15.163](https://cos.googlesource.com/third_party/kernel/+/7e8b7ee16581a33396249d4c134b3d4b73350123) | v23.0.3 | v1.7.19 | [See List](https://storage.googleapis.com/cos-tools/17412.448.49/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2024-45018 in the Linux kernel
Security Fixed CVE-2024-43817 in the Linux kernel
Security Fixed CVE-2024-45025 in the Linux kernel
Security Fixed CVE-2024-44983 in the Linux kernel
Security Fixed CVE-2024-43871 in the Linux kernel
Security Fixed CVE-2024-44947 in the Linux kernel
Security Fixed CVE-2024-44952 in the Linux kernel
Security Fixed CVE-2024-43893 in the Linux kernel
Security Fixed CVE-2024-45021 in the Linux kernel
Security Fixed CVE-2024-41012 in the Linux kernel
Change Runtime sysctl changes:
- Changed: fs.file-max: 812685 -\> 812689
Security Fixed CVE-2024-7592 in dev-lang/python.
## September 16, 2024
Change
### cos-105-17412-448-36
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-5.15.163](https://cos.googlesource.com/third_party/kernel/+/ebb1db417cd16a617a8bd6198e750a47ce2fe93b) | v23.0.3 | v1.7.19 | [See List](https://storage.googleapis.com/cos-tools/17412.448.36/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2024-44986 in the Linux kernel
Security Fixed CVE-2024-44944 in the Linux kernel
Security Fixed CVE-2024-44987 in the Linux kernel
Security Fixed CVE-2024-6232 in dev-lang/python and upgraded to v3.8.19 which fixes CVE-2007-4559.
Security Fixed CVE-2023-7256 in net-libs/libpcap.
Security Fixed CVE-2024-43882 in the Linux kernel
Security Fixed CVE-2024-43914 in the Linux kernel
Security Updated dev-libs/expat to v2.6.3. This fixed CVE-2024-45492, CVE-2024-45490, CVE-2024-45491.
Security Fixed CVE-2024-43853 in the Linux kernel
Security Fixed CVE-2024-44985 in the Linux kernel
## September 09, 2024
Change
### cos-105-17412-448-29
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-5.15.163](https://cos.googlesource.com/third_party/kernel/+/22b37798dac451de056c0653ad600c0641da86ba) | v23.0.3 | v1.7.19 | [See List](https://storage.googleapis.com/cos-tools/17412.448.29/lakitu/gpu_driver_versions.textproto) |
Change Runtime sysctl changes:
- Changed: fs.file-max: 812696 -\> 812685
- Changed: net.ipv4.tcp_rto_min_us: 200000 -\> 5000
Security Fixes CVE-2024-37370, CVE-2024-37371 in app-crypt/mit-krb5.
Security Fixes CVE-2024-41098 in Linux kernel.
Security Fixes CVE-2024-43854 in the Linux kernel.
Security Fixes CVE-2024-43856 in the Linux kernel.
Security Fixes CVE-2024-43889 in the Linux kernel.
Security Fixes CVE-2024-44934 in the Linux kernel.
Security Fixes CVE-2024-43828 in the Linux kernel.
Security Fixes CVE-2024-42302 in the Linux kernel.
Security Fixes CVE-2024-41073 in the Linux kernel.
## September 03, 2024
Change
### cos-105-17412-448-22
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-5.15.163](https://cos.googlesource.com/third_party/kernel/+/17aa7ea6d971cdb50d3f1c64a3e2f86865b7a240) | v23.0.3 | v1.7.19 | [See List](https://storage.googleapis.com/cos-tools/17412.448.22/lakitu/gpu_driver_versions.textproto) |
Security Fixed KCTF-c07ff85 in the Linux kernel.
Security Fixed CVE-2024-42270 in the Linux kernel.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812685 -\> 812696
Security Fixed CVE-2024-42285 in the Linux kernel.
Security Fixed CVE-2024-42269 in the Linux kernel.
Security Updated app-editors/vim, app-editors/vim-core to version 9.1.0686. This fixed CVE-2024-41957, CVE-2024-41965.
Security Fixed CVE-2024-42283 in the Linux kernel.
Security Fixed CVE-2023-52889 in the Linux kernel.
## August 26, 2024
Change
### cos-105-17412-448-16
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-5.15.163](https://cos.googlesource.com/third_party/kernel/+/a053a2f01c97d9048905c5526170361bb46ca762) | v23.0.3 | v1.7.19 | [See List](https://storage.googleapis.com/cos-tools/17412.448.16/lakitu/gpu_driver_versions.textproto) |
Change Runtime sysctl changes:
- Changed: fs.file-max: 812707 -\> 812685
- Changed: kernel.threads-max: 63552 -\> 63551
- Changed: net.ipv4.tcp_mem: 94140 125520 188280 -\> 94137 125519 188274
- Changed: net.ipv4.udp_mem: 188280 251041 376560 -\> 188277 251039 376554
- Changed: user.max_cgroup_namespaces: 31776 -\> 31775
- Changed: user.max_ipc_namespaces: 31776 -\> 31775
- Changed: user.max_mnt_namespaces: 31776 -\> 31775
- Changed: user.max_net_namespaces: 31776 -\> 31775
- Changed: user.max_pid_namespaces: 31776 -\> 31775
- Changed: user.max_time_namespaces: 31776 -\> 31775
- Changed: user.max_user_namespaces: 31776 -\> 31775
- Changed: user.max_uts_namespaces: 31776 -\> 31775
Security Fixed CVE-2023-0597 in the Linux kernel.
## August 20, 2024
Change
### cos-105-17412-448-12
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-5.15.163](https://cos.googlesource.com/third_party/kernel/+/2c14e9b09b12494731afee8d6ffa71c0395db9bd) | v23.0.3 | v1.7.19 | [See List](https://storage.googleapis.com/cos-tools/17412.448.12/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2024-6602 in dev-libs/nss.
Change Runtime sysctl changes:
- Added: vm.unprivileged_userfaultfd: 0
- Changed: fs.file-max: 812708 -\> 812707
## August 12, 2024
Change
### cos-105-17412-448-8
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-5.15.163](https://cos.googlesource.com/third_party/kernel/+/37b657c4733b4a8e09526f64bb89c8cd0d8298c9) | v23.0.3 | v1.7.19 | v470.256.02(default),v550.90.07(latest) |
Announcement This is an [LTS Refresh release.](https://docs.cloud.google.com/container-optimized-os/docs/concepts/versioning#lts_refresh_releases)
Security Fixed CVE-2023-5678 in dev-libs/openssl.
Change Upgraded dev-libs/nss to v3.100.
Security Fixed CVE-2024-39472 in the Linux kernel.
Feature Updated cos-gpu-installer to v2.3.5 - Improved error messaging for incompatible GPU driver input.
Change Upgraded dev-python/netifaces to v0.11.0-r2.
Change Upgraded dev-python/six to v1.16.0-r1.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812698 -\> 812708
Change Updated app-admin/google-guest-configs to 20240607.00.
Security Fixed CVE-2024-6345 in dev-python/setuptools.
Security Fixed CVE-2024-39894 in openssh.
Change Upgraded dev-libs/re2 to v0.2022.12.01.
Change Upgraded app-arch/unzip to v6.0_p27-r1.
Fixed Disable NVIDIA persistence mode with -no-verify flag.
Security Fixed CVE-2024-2511, CVE-2024-4741, CVE-2024-5535 in dev-libs/openssl.
Change Upgraded app-containers/cni-plugins to v1.4.1.
Change Upgraded sys-apps/gentoo-functions to v0.19.
Change Updated app-containers/containerd to 1.7.19.
Change Upgraded dev-lang/python-exec to v2.4.10.
Security Fixed CVE-2024-38577 in the Linux kernel.
Change Upgraded sys-auth/pambase to v20240128.
Security Upgraded curl to v8.9.0. This fixes CVE-2024-6197.
Feature Removed crash-reporter KVM support.
Feature Enabled the feature to utilize the `gpu_driver_versions proto` file for controlling the specific GPU driver version to be installed for each GPU type.
Feature Removed dev-go/grpc.
## July 22, 2024
Change
### cos-105-17412-370-78
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-5.15.154](https://cos.googlesource.com/third_party/kernel/+/2890fc8995cd68013377c0adcc1f6e985ee6e11e) | v23.0.3 | v1.7.15 | v470.256.02(default),v550.90.07(latest) |
Change Runtime sysctl changes:
- Changed: fs.file-max: 812694 -\> 812698
Security Fixed CVE-2024-39482 in the Linux kernel
Security Fixed CVE-2024-39476 in the Linux kernel
## July 15, 2024
Change
### cos-105-17412-370-75
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-5.15.154](https://cos.googlesource.com/third_party/kernel/+/b93385dc33055ec608e2f5f3f98f1a5139d37258) | v23.0.3 | v1.7.15 | v470.256.02(default),v550.90.07(latest) |
Change Upgraded app-admin/logrotate to v3.22.0.
Security Fixed CVE-2024-24790 and CVE-2024-24789 in dev-lang/go.
Change Upgraded app-shells/dash to v0.5.12.
Change Upgraded sys-apps/attr to v2.5.2-r1.
Security Fixed CVE-2024-36978 in the Linux kernel.
Change Upgraded sys-apps/dmidecode to v3.6.
Security Updated net-misc/wget to v1.24.5. This fixed CVE-2024-38428.
Change Upgraded dev-libs/libusb to v1.0.27-r1.
Change Upgraded net-dns/libidn2 to v2.3.7.
Feature Updated cos-gpu-installer to v2.3.5.
Change Upgraded net-analyzer/netcat to v110.20180111-r2.
Change Upgraded sys-apps/diffutils to v3.10.
Change Upgraded sys-apps/grep to v3.11-r1.
Change Upgraded app-misc/mime-types to v2.1.54.
Change Upgraded net-misc/wget to v1.21.4.
Feature Added the package revision number to the SSH banner in
net-misc/openssh.
## July 01, 2024
Change
### cos-105-17412-370-67
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.154](https://cos.googlesource.com/third_party/kernel/+/d05879b12f3a62db75f020edf0101777441e4ad9) | v23.0.3 | v1.7.15 | v470.256.02(default),v550.90.07(latest) |
Security Fixed CVE-2024-38662 in the Linux kernel.
Security Fixed CVE-2024-35195 in dev-python/requests.
Change Runtime sysctl changes:
- Added: net.ipv4.tcp_rto_min_us: 200000
- Changed: fs.file-max: 812707 -\> 812700
Security Fixed CVE-2024-6387 in net-misc/openssh.
## June 24, 2024
Change
### cos-105-17412-370-61
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.154](https://cos.googlesource.com/third_party/kernel/+/821a4d6d1203080a890ec6f362725fa73a3cd402) | v23.0.3 | v1.7.15 | v470.256.02(default),v550.90.07(latest) |
Security Fixed CVE-2024-26584 in the Linux kernel.
Security Fixed CVE-2024-26583 in the Linux kernel.
Fixed Fixed a crash in the Linux kernel.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812704 -\> 812707
## June 18, 2024
Change
### cos-105-17412-370-58
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.154](https://cos.googlesource.com/third_party/kernel/+/0c828dbf4fb1ee5d1f72586028cba68dd2558af1) | v23.0.3 | v1.7.15 | v470.256.02(default),v550.90.07(latest) |
Security Upgraded app-arch/libarchive to version 3.7.4. Fixes
CVE-2024-26256.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812695 -\> 812704
Security Fixes CVE-2024-36938 in the Linux kernel.
Security Update R550, latest driver to v550.90.07.This fixes CVE-2024-0090, CVE-2024-0091, CVE-2024-0092
Update R535 to v535.183.01.This fixes CVE-2024-0090, CVE-2024-0092
Update R470, default driver to v470.256.02.This fixes CVE-2024-0090, CVE-2024-0092
Security Upgraded app-arch/lz4 to 1.9.4. Fixes CVE-2021-3520.
Security Fixes CVE-2024-36902 in the Linux kernel.
## June 10, 2024
Change
### cos-105-17412-370-54
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.154](https://cos.googlesource.com/third_party/kernel/+/313e4424c97526254992576a55e561956332ab3f) | v23.0.3 | v1.7.15 | v470.239.06(default),v550.54.15(latest) |
Fixed Updated cos-gpu-installer to v2.3.3. This resolves potential synchronization issues and ensures proper cleanup of mounts in GPU driver installation directory configuration.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812685 -\> 812695
Fixed Fixed frequent restarts in fluent-bit stackdriver plugin.
Security Fixed CVE-2024-27020, CVE-2024-27015, CVE-2024-27016, CVE-2024-27013, CVE-2024-27018, CVE-2024-36008, CVE-2024-27019 and CVE-2024-27020 in the Linux kernel
Security Updated cos-gpu-installer to v2.3.4. This fixes CVEs: CVE-2023-29402, CVE-2023-29405, CVE-2023-29404, CVE-2023-24540, CVE-2023-24538, CVE-2022-41721, GHSA-m425-mq94-257g, CVE-2022-41715, CVE-2022-30633, CVE-2022-41724, CVE-2022-2880, CVE-2022-30631, CVE-2021-29923, CVE-2022-24675, CVE-2022-30580, CVE-2022-41723, CVE-2023-24534, CVE-2022-41725, CVE-2022-2879, CVE-2023-24539, CVE-2022-30635, CVE-2023-45285, CVE-2022-32149, CVE-2023-24537, CVE-2022-32189, CVE-2022-28131, CVE-2023-39323, CVE-2022-28327, CVE-2022-30630, CVE-2023-44487, CVE-2023-39325, CVE-2022-27664, CVE-2023-45287, CVE-2023-29400, CVE-2023-24536, CVE-2023-29403, CVE-2022-30632, CVE-2023-39318, CVE-2020-29511, CVE-2024-24786, CVE-2023-3978, CVE-2022-41717, CVE-2022-32148, CVE-2023-39326, CVE-2023-45288, CVE-2022-1962, CVE-2023-24532, CVE-2023-39319, CVE-2022-1705, CVE-2020-29509, CVE-2023-29406, CVE-2023-29409, CVE-2022-30629
## June 03, 2024
Change
### cos-105-17412-370-44
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.154](https://cos.googlesource.com/third_party/kernel/+/637ba15dd36b93c708cb7fde7756c8b0ecf3ffa6) | v23.0.3 | v1.7.15 | v470.239.06(default),v550.54.15(latest) |
Security Fixed CVE-2024-34459 in the libxml2 package.
Fixed Fixed a bug in auto update engine when confidential VMs are enabled.
Fixed Updated cos-gpu-installer to v2.3.2.
## May 28, 2024
Change
### cos-105-17412-370-39
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.154](https://cos.googlesource.com/third_party/kernel/+/437908069a4654010705ea35f6983e7ba8061603) | v23.0.3 | v1.7.15 | v470.239.06(default),v550.54.15(latest) |
Feature Improved boot time on A3 machines by around 5 seconds.
Security Fixed CVE-2024-21626 in github.com/opencontainers/runc in kubelet.
Security Updated dev-vcs/git to v2.45.1. This resolves
CVE-2024-32002, CVE-2024-32020, CVE-2024-32465, CVE-2024-32004, CVE-2024-32021.
Fixed Fixed system-accounts-secured benchmark by changing the system account range used in the benchmark.
Change Runtime sysctl changes:
- Changed: fs.file-max: 813024 -\> 812685
## May 20, 2024
Change
### cos-105-17412-370-34
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.154](https://cos.googlesource.com/third_party/kernel/+/d23e6c00df3118774ba64603da957683407326df) | v23.0.3 | v1.7.15 | v470.239.06(default),v550.54.15(latest) |
Change Updated cos-gpu-installer to v2.3.1.
Change Upgraded app-eselect/eselect-iptables to v20220320.
Change Upgraded sys-libs/timezone-data to v2024a-r1.
## May 13, 2024
Change
### cos-105-17412-370-29
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.154](https://cos.googlesource.com/third_party/kernel/+/4ea480d9ce7c7966753af94b56b69dd6bdd8caa5) | v23.0.3 | v1.7.15 | v470.239.06(default),v550.54.15(latest) |
Security Fixed CVE-2024-26900 in the Linux kernel.
## May 06, 2024
Change
### cos-105-17412-370-23
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.154](https://cos.googlesource.com/third_party/kernel/+/271d0cae9fbfec854e9b0d786afc625b906e9aec) | v23.0.3 | v1.7.15 | v470.239.06(default),v550.54.15(latest) |
Security Fixed CVE-2023-32681 in dev-python/requests.
Security Updated net-dns/c-ares to v1.27. This fixed CVE-2024-25629.
Change Upgraded sys-apps/makedumpfile to v1.7.5.
Security Fixed CVE-2024-26921 in the Linux kernel.
Security Fixed CVE-2023-0687, CVE-2024-2961, CVE-2024-33599, CVE-2024-33600, CVE-2024-33601, CVE-2024-33602 in sys-libs/glibc.
Change Updated cos-gpu-installer to v2.3.0.
Security Fixed CVE-2021-37600, CVE-2021-3995, CVE-2021-3996 in sys-apps/util-linux.
## April 30, 2024
Change
### cos-105-17412-370-14
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.154](https://cos.googlesource.com/third_party/kernel/+/e925eda57c35a9c298cda6b52017e7735fa2d694) | v23.0.3 | v1.7.15 | v470.239.06(default),v550.54.15(latest) |
Announcement This is an [LTS Refresh release.](https://docs.cloud.google.com/container-optimized-os/docs/concepts/versioning#lts_refresh_releases)
Security Updated app-arch/tar to v1.35. This fixed CVE-2023-39804.
Security Updated app-admin/sudo to v1.9.15_p5. This fixed CVE-2022-43995, CVE-2023-22809, CVE-2023-27320, CVE-2023-28486, CVE-2023-28487, CVE-2023-42465.
Security Updated dev-libs/expat to v2.6.2. This fixed CVE-2022-40674, CVE-2022-43680, CVE-2023-52425, CVE-2023-52426, CVE-2024-28757.
Security Updated dev-python/pyyaml to v5.4.1. This fixed CVE-2017-18342, CVE-2019-20477, CVE-2020-14343, CVE-2020-1747.
Security Updated net-misc/curl to v8.7.1. This fixed CVE-2024-2004, CVE-2024-2379, CVE-2024-2398, CVE-2024-2466.
Security Fixed CVE-2023-4641 in sys-apps/shadow.
Security Fixed issues with the SRSO vulnerability mitigation (CVE-2023-20569). This fix might negatively impact the performance of your workloads on AMD machine types.
Security Fixed CVE-2024-26808 in the Linux kernel.
Security Updated dev-vcs/git to v2.44.0. This fixed CVE-2022-23521, CVE-2022-24765, CVE-2022-29187, CVE-2022-39253, CVE-2022-39260, CVE-2022-41903, CVE-2023-22490, CVE-2023-23946, CVE-2023-25652, CVE-2023-25815, CVE-2023-29007.
Security Fixed CVE-2023-50387, CVE-2023-50868, CVE-2023-7008 in sys-apps/systemd.
Security Updated net-dns/c-ares to v1.19.1. This fixed CVE-2022-4904, CVE-2023-31124, CVE-2023-31130, CVE-2023-31147, CVE-2023-32067
Feature Included nvidia plugin in sosreport.
Security Fixed CVE-2023-0767, CVE-2023-5388, CVE-2023-6135, CVE-2024-0743 in dev-libs/nss.
Feature Updated cos-gpu-installer to v2.1.11. Added major version specification for GPU driver installation.
Change Runtime sysctl changes:
- Changed: fs.file-max: 813029 -\> 813024
- Changed: net.ipv6.route.max_size: 4096 -\> 2147483647
Change Updated app-emulation/containerd to v1.7.15.
Security Fixed CVE-2024-28182 in net-libs/nghttp2.
## April 23, 2024
Change
### cos-105-17412-294-68
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.146](https://cos.googlesource.com/third_party/kernel/+/be8ab8cc2a1759a6b06a46edbd8ad9c80190c0da) | v23.0.3 | v1.7.13 | v470.239.06(default),v550.54.15(latest) |
Fixed Fixed a crash during CIFS volumes mount.
Security Fixed CVE-2024-26642 in the Linux kernel.
## April 15, 2024
Change
### cos-105-17412-294-66
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.146](https://cos.googlesource.com/third_party/kernel/+/21efe59f621a5f4aa3e34a296b87e4e57b7881fa) | v23.0.3 | v1.7.13 | v470.239.06(default),v550.54.15(latest) |
Fixed Updated NVIDIA GPU drivers to v550.54.15.
Fixed a potential corruption when launching kernels on H100 GPUs, which is more likely to occur when the GPU is shared between multiple processes.
Fixed Updated NVIDIA GPU drivers to v535.161.08.
Fixed a potential corruption when launching kernels on H100 GPUs.
Security Fixed CVE-2024-26642,CVE-2024-26643 in the Linux kernel.
## April 04, 2024
Change
### cos-105-17412-294-62
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.146](https://cos.googlesource.com/third_party/kernel/+/a7537d805f405f86617355ac6fab708fc2a4d95a) | v23.0.3 | v1.7.13 | v470.239.06(default),v550.54.14(latest) |
Security Fixed CVE-2024-26589 in the Linux kernel
Security Fixed CVE-2023-52434 in the Linux kernel.
Security Fixed CVE-2023-52439 in the Linux kernel.
Fixed Downgraded app-admin/localtoast to v1.1.5.
Change Upgraded app-admin/node-problem-detector to v0.8.17.
Change Updated app-emulation/containerd to 1.7.13.
Change Upgraded app-admin/localtoast to v1.1.7.
Security Fixed CVE-2024-26591 in the Linux kernel.
Change Upgraded sys-apps/makedumpfile to v1.7.4.
Feature Add NVIDIA GPU drivers R550 branch and update latest to
550.54.14.
Change Upgraded net-misc/chrony to v4.5.
Security Fixed CVE-2024-26585 in the Linux kernel.
Fixed Fix bug in google-guest-agent service enablement.
## March 27, 2024
Change
### cos-105-17412-294-48
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.146](https://cos.googlesource.com/third_party/kernel/+/98eaca07d1d9c17906fe27fa0f6ce9ae343f448c) | v23.0.3 | v1.7.10 | v470.239.06(default),v535.161.07(latest) |
Security Fixed CVE-2023-52443 in the Linux kernel.
Security Fixed CVE-2023-52435 in the Linux kernel.
## March 20, 2024
Change
### cos-105-17412-294-46
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.146](https://cos.googlesource.com/third_party/kernel/+/1f94d5205d2ad9350878e947097be6ae88f45aa4) | v23.0.3 | v1.7.10 | v470.239.06(default),v535.161.07(latest) |
Security Updated app-editors/vim to 9.0.2167. This fixed CVE-2023-48231, CVE-2023-48232, CVE-2023-48233, CVE-2023-48234, CVE-2023-48235, CVE-2023-48236, CVE-2023-48237, CVE-2023-48706, CVE-2024-22667.
Security Fixed CVE-2024-0727 in dev-libs/openssl.
Fixed Upgraded app-editors/vim to v9.0.2167, Upgraded app-editors/vim-core to v9.0.2167.
Security Fixed CVE-2023-52447 in the Linux kernel.
## March 11, 2024
Change
### cos-105-17412-294-40
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.146](https://cos.googlesource.com/third_party/kernel/+/3a3a1c12c77aebc63e52fc66a2ca01c622ecf859) | v23.0.3 | v1.7.10 | v470.239.06(default),v535.161.07(latest) |
Feature Updated cos-gpu-installer to v2.2.1. Fixed cached driver installation error with network disabled. Added force-fallback flag, major version specification for GPU driver installation and fixed ordering of kernel module loading for nvidia-modeset and nvidia-drm
Security Updated NVIDIA GPU drivers to v470.239.06 and v535.161.07. This fixes CVE-2024-0074, CVE-2024-0075 and CVE-2022-42265.
## March 06, 2024
Change
### cos-105-17412-294-36
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.146](https://cos.googlesource.com/third_party/kernel/+/3a3a1c12c77aebc63e52fc66a2ca01c622ecf859) | v23.0.3 | v1.7.10 | v470.223.02 (default),v535.154.05(latest),v470.223.02(R470 for compatibility with K80 GPUs) |
Security Fixed CVE-2024-23851 in the Linux kernel.
## February 27, 2024
Change
### cos-105-17412-294-34
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.146](https://cos.googlesource.com/third_party/kernel/+/22ab4f9e2983b524374643a79765d51a42e82e7e) | v23.0.3 | v1.7.10 | v470.223.02 (default),v535.154.05(latest),v470.223.02(R470 for compatibility with K80 GPUs) |
Security Fixed CVE-2024-26581 in the Linux kernel.
## February 20, 2024
Change
### cos-105-17412-294-29
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.146](https://cos.googlesource.com/third_party/kernel/+/81668026811f1248b6eaa73f8f60a949614ea3d1) | v23.0.3 | v1.7.10 | v470.223.02 (default),v535.154.05(latest),v470.223.02(R470 for compatibility with K80 GPUs) |
Security Fixed CVE-2024-24557 in app-emulation/docker.
Security Updated dev-libs/libxml2 to v2.11.7. This fixes CVE-2024-25062.
Security Upgraded net-misc/curl to v8.6.0. This fixes CVE-2024-0853.
Security Fixed CVE-2022-3566 in the Linux kernel.
Security Fixed CVE-2022-3567 in the Linux kernel.
## February 12, 2024
Change
### cos-105-17412-294-23
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.146](https://cos.googlesource.com/third_party/kernel/+/de59b324714477b7f8d4fa82b30f5f8db67dc398) | v23.0.3 | v1.7.10 | v470.223.02 (default),v535.154.05(latest),v470.223.02(R470 for compatibility with K80 GPUs) |
Security Fixed CVE-2023-40546, CVE-2023-40548, CVE-2023-40549 , CVE-2023-40551, CVE-2023-40547 and CVE-2023-40550 in
sys-boot/shim.
Security Fixed CVE-2023-5678 in dev-libs/openssl.
Security Fixed CVE-2024-1085 , CVE-2024-1086 and CVE-2023-46838 in the Linux kernel.
Feature Fragmented nvidia-drivers and nvidia-drivers-open pkg into separate packages per major version.
## February 05, 2024
Change
### cos-105-17412-294-13
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.146](https://cos.googlesource.com/third_party/kernel/+/648bcca106dfa54de751b38063854f711284b6c0) | v23.0.3 | v1.7.10 | v470.223.02 (default),v535.154.05(latest),v470.223.02(R470 for compatibility with K80 GPUs) |
Change Update latest NVIDIA GPU driver to v535.154.05.
Security Fixed CVE-2023-6915 in the Linux kernel.
## January 31, 2024
Change
### cos-105-17412-294-10
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.146](https://cos.googlesource.com/third_party/kernel/+/1105f6ce20debe482461418d62a2ba10b3e2f54c) | v23.0.3 | v1.7.10 | v470.223.02 (default),v535.129.03(latest),v470.223.02(R470 for compatibility with K80 GPUs) |
Announcement [This is an LTS Refresh release.](https://docs.cloud.google.com/container-optimized-os/docs/concepts/versioning#lts_refresh_releases)
Feature Added kernel compatibility with iptables-nft.
Change Updated cos-gpu-installer to v2.1.10.
Security Fixed CVE-2024-0646 in the Linux kernel.
Security Fixed CVE-2024-22195 in dev-python/jinja.
Feature Backported support for TCP RTO configuration in networkd.
Change Runtime sysctl changes:
- Added: net.ipv6.conf.all.accept_ra_min_lft: 0
- Added: net.ipv6.conf.default.accept_ra_min_lft: 0
- Added: net.ipv6.conf.docker0.accept_ra_min_lft: 0
- Added: net.ipv6.conf.eth0.accept_ra_min_lft: 0
- Added: net.ipv6.conf.lo.accept_ra_min_lft: 0
- Added: net.netfilter.nf_flowtable_tcp_timeout: 30
- Added: net.netfilter.nf_flowtable_udp_timeout: 30
- Changed: fs.file-max: 813031 -\> 813029
Security Fixed CVE-2024-21626 in app-emulation/runc.
Security Fixed CVE-2023-6040 in the Linux kernel.
## January 16, 2024
Change
### cos-105-17412-226-68
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.133](https://cos.googlesource.com/third_party/kernel/+/8b2bb0cebdd91f592cd3d02755e4ebeb2f1ddd87) | v23.0.3 | v1.7.10 | v470.223.02 (default),v535.129.03(latest),v470.223.02(R470 for compatibility with K80 GPUs) |
Security Upgraded dev-db/sqlite to v3.44.2-r2. This fixes CVE-2023-7104.
## January 08, 2024
Change
### cos-105-17412-226-67
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.133](https://cos.googlesource.com/third_party/kernel/+/8b2bb0cebdd91f592cd3d02755e4ebeb2f1ddd87) | v23.0.3 | v1.7.10 | v470.223.02 (default),v535.129.03(latest),v470.223.02(R470 for compatibility with K80 GPUs) |
Fixed Updated net-misc/openssh to v9.6_p1-r1.
Change Runtime sysctl changes:
- Changed: net.core.optmem_max: 20480 -\> 131072
Security Updated dev-lang/go to v1.20.12. This resolves
CVE-2023-45285 and CVE-2023-39326.
Security Upgraded sys-apps/dbus to v1.12.28. This fixes
CVE-2023-34969, CVE-2022-42012, CVE-2022-42011 and CVE-2022-42010.
## January 02, 2024
Change
### cos-105-17412-226-62
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.133](https://cos.googlesource.com/third_party/kernel/+/37c79a2c2008543e2c9a5dc749faa91fb0d806b5) | v23.0.3 | v1.7.10 | v470.223.02 (default),v535.129.03(latest),v470.223.02(R470 for compatibility with K80 GPUs) |
Security Fixed CVE-2023-6931 in the Linux kernel.
Fixed Updated docker-credential-gcr to v2.1.21.
Security Fixed CVE-2023-6932 in the Linux kernel.
Security Updated net-misc/curl to v8.5.0. This resolves CVE-2023-46218.
Security Fixed CVE-2023-6817 in the Linux kernel.
## December 19, 2023
Change
### cos-105-17412-226-52
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.133](https://cos.googlesource.com/third_party/kernel/+/ef4d4b5eb1c59a7fd5d68a8da70462bace5ed0e7) | v23.0.3 | v1.7.10 | v470.223.02 (default),v535.129.03(latest),v470.223.02(R470 for compatibility with K80 GPUs) |
Change Updated app-containers/containerd to 1.7.10.
Security Fixed CVE-2023-6111 in the Linux kernel.
Security Fixed CVE-2023-6622 in the Linux kernel.
Fixed Fixed a container performance issue that occurred after
running `systemctl start cloud-audit-setup`.
## December 04, 2023
Change
### cos-105-17412-226-43
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.133](https://cos.googlesource.com/third_party/kernel/+/18583056092ea19b312eb543c1dbf4ba36163249) | v23.0.3 | v1.7.7 | v470.223.02 (default),v535.129.03(latest),v470.223.02(R470 for compatibility with K80 GPUs) |
Feature Backported support for TCP RTO configuration in networkd.
Security Fixed CVE-2023-46862 in the Linux kernel.
## November 29, 2023
Change
### cos-105-17412-226-41
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.133](https://cos.googlesource.com/third_party/kernel/+/6c8028e3c0978f85667d9d6bbae5fe364bd43984) | v23.0.3 | v1.7.7 | v470.223.02 (default),v535.129.03(latest),v470.223.02(R470 for compatibility with K80 GPUs) |
Security Updated app-editors/vim, app-editors/vim-core to v9.0.2092. This resolves CVE-2023-4733, CVE-2023-4734, CVE-2023-4735, CVE-2023-4736
CVE-2023-4738, CVE-2023-4750, CVE-2023-4752, CVE-2023-4781
CVE-2023-5344, CVE-2023-5441 and CVE-2023-5535.
Security Fixed CVE-2023-46813 in the Linux kernel.
Security Updated dev-libs/libxml2 to v2.11.5. This resolves CVE-2023-45322.
Feature Updated NVIDIA GPU drivers. This resolves CVE-2023-31022.
## November 09, 2023
Change
### cos-105-17412-226-34
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.133](https://cos.googlesource.com/third_party/kernel/+/b8d723f1a43195fb77d24f9ba3f0d28a4fb0b9b9) | v23.0.3 | v1.7.7 | v470.199.02(default),v535.104.12(latest) |
Change Sync TCPX changes to commit 2e6e06f61bdb
Security Updated net-libs/nghttp2 to v1.57.0. This resolves CVE-2023-44487 and CVE-2023-35945.
Security Update dev-lang/go to 1.20.10. This resolves CVE-2023-44487, CVE-2023-39325.
## November 07, 2023
Change
### cos-105-17412-226-28
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.133](https://cos.googlesource.com/third_party/kernel/+/c1b4da9eec029db751c2e60c188f52aa4c855bef) | v23.0.3 | v1.7.7 | v470.199.02(default),v535.104.12(latest) |
Fixed Updated google-guest-configs to 20230929.00.
Security Fixed CVE-2023-42754 in the Linux kernel.
Security Fixed CVE-2023-5717 in the Linux kernel.
## October 30, 2023
Change
### cos-105-17412-226-23
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.133](https://cos.googlesource.com/third_party/kernel/+/452c7dc194955ffefec5e22dfd0f6bc22a1b45ba) | v23.0.3 | v1.7.7 | v470.199.02(default),v535.104.12(latest) |
Security Updated dev-lang/go to v1.20.9. This resolves CVE-2023-39323.
Feature Enable portmapper registration reporting for lsof. This also fixes an issue where `lsof` is missing from SOS reports.
## October 26, 2023
Change
### cos-105-17412-226-18
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.133](https://cos.googlesource.com/third_party/kernel/+/452c7dc194955ffefec5e22dfd0f6bc22a1b45ba) | v23.0.3 | v1.7.7 | v470.199.02(default),v535.104.12(latest) |
Change Sync TCPX changes to commit e34a5bbcc20d.
## October 24, 2023
Change
### cos-105-17412-226-17
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.133](https://cos.googlesource.com/third_party/kernel/+/452c7dc194955ffefec5e22dfd0f6bc22a1b45ba) | v23.0.3 | v1.7.7 | v470.199.02(default),v535.104.12(latest) |
Change Updated app-containers/containerd to 1.7.7.
Change Sync TCPX changes to commit 3cac7b2856a0
Feature Sync TCPX changes to commit da99a91cffb1
Fixed Update latest NVIDIA GPU drivers to 535.104.12.
## October 16, 2023
Change
### cos-105-17412-226-10
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.133](https://cos.googlesource.com/third_party/kernel/+/9566facb2be70712d05bd7a07e148c1d30736402) | v23.0.3 | v1.7.6 | v470.199.02(default),v535.104.05(latest) |
Announcement [This is an LTS Refresh Release.](https://cloud.google.com/container-optimized-os/docs/concepts/versioning#lts_refresh_releases)
Security Fixed CVE-2023-42753 in the Linux kernel.
Security Fixed CVE-2023-4244 in the Linux kernel.
Fixed Updated cos-gpu-installer to v2.1.9.
Change Updated app-containers/containerd to v1.7.6.
Security Fixed CVE-2023-5197 in the Linux kernel.
Security Fixed CVE-2023-38039 in net-misc/curl.
Security Upgraded net-misc/curl to v8.4.0. This resolves CVE-2023-38545.
Fixed Synced TCPX changes to commit 90ce0a6aa201.
Security Fixed CVE-2023-42756 in COS kernel.
## October 11, 2023
Change
### cos-105-17412-156-69
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.120](https://cos.googlesource.com/third_party/kernel/+/1f740a206a556e2bc6f0816587cb8e917835b7ec) | v23.0.3 | v1.7.2 | v470.199.02(default),v535.104.05(latest) |
Security Fixed CVE-2023-38039 in net-misc/curl.
Security Fixed CVE-2023-42753 in the Linux kernel.
Fixed Upgraded cos-gpu-installer to v2.1.9.
## September 26, 2023
Change
### cos-105-17412-156-63
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.120](https://cos.googlesource.com/third_party/kernel/+/9445d2ea32282cb7e3e5011391c354beef88eb93) | v23.0.3 | v1.7.2 | v470.199.02(default),v535.104.05 |
Security Fixed CVE-2023-40217 in the dev-lang/python package.
Security Fixed CVE-2023-4623 in the Linux kernel.
Security Fixed CVE-2023-4921 in the Linux kernel.
Security Fixed CVE-2023-4569 in the Linux kernel.
## September 20, 2023
Change
### cos-105-17412-156-59
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.120](https://cos.googlesource.com/third_party/kernel/+/3ca1929bfcf693c0285a58d940e45bd1b403b18e) | v23.0.3 | v1.7.2 | v470.199.02(default),v535.104.05 |
Fixed Fixed an issue where IPv6 networking would fail under high CPU load.
## September 19, 2023
Change
### cos-105-17412-156-57
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.120](https://cos.googlesource.com/third_party/kernel/+/3ca1929bfcf693c0285a58d940e45bd1b403b18e) | v23.0.3 | v1.7.2 | v470.199.02(default),v535.104.05 |
Security Fixed CVE-2023-4015, CVE-2023-4622 in the linux kernel.
Change Updated cos-gpu-installer to v2.1.8.
## September 12, 2023
Change
### cos-105-17412-156-49
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.120](https://cos.googlesource.com/third_party/kernel/+/d966b047cff013652b470b402a5e35e820c51cb9) | v23.0.3 | v1.7.2 | v470.199.02(default),v535.104.05 |
Security Updated dev-lang/go to v1.20.8. This resolves
CVE-2023-29409.
Change Fixed an issue where symlinks could not be moved.
Change Updated latest GPU driver to v535.104.05.
Security Fixed the following CVEs in sys-libs/binutils-libs: CVE-2022-47007, CVE-2022-47008, CVE-2022-47010, CVE-2022-47011, CVE-2022-48063, CVE-2022-48064, CVE-2022-48065.
Change Updated cos-gpu-installer to v2.1.7. Precompiled drivers are now downloaded from COS build artifacts.
Fixed Fixed an issue with NFS reconnects on GKE.
Change Runtime sysctl changes:
- Added: net.ipv4.tcp_backlog_ack_defer: 1
Fixed The `get_metadata_value` script will now retry if it experiences a connection error.
## September 07, 2023
Change
### cos-105-17412-156-34
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.120](https://cos.googlesource.com/third_party/kernel/+/3962d535692a8e24713a8b92feb8a46c09b736a9) | v23.0.3 | v1.7.2 | v470.199.02(default),v525.125.06 |
Security Upgraded sys-fs/mdadm to v4.2. This resolves CVE-2023-28938 and CVE-2023-28736.
Security Fixed CVE-2023-4016 in sys-process/procps.
Fixed Enabled persistence mode with Nvidia GPU driver
installation.
## August 24, 2023
Change
### cos-105-17412-156-30
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.120](https://cos.googlesource.com/third_party/kernel/+/3962d535692a8e24713a8b92feb8a46c09b736a9) | v23.0.3 | v1.7.2 | v470.199.02(default),v525.125.06 |
Fixed Fixed a kernel crash in device memory TCP behavior.
Change Runtime sysctl changes:
- Added: kernel.io_uring_disabled: 0
Security Fixed CVE-2023-4128 in the Linux kernel.
## August 21, 2023
Change
### cos-105-17412-156-23
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.120](https://cos.googlesource.com/third_party/kernel/+/f0d6dcd5188bababf189e3aede8360342859fcb8) | v23.0.3 | v1.7.2 | v470.199.02(default),v525.125.06 |
Fixed Fixed an issue in systemd where a container out-of-memory
event caused all processes in the container to be killed.
Security Fixed CVE-2023-4194 in the Linux kernel.
Security Fixed CVE-2023-4147 in the Linux kernel.
Security Upgrade app-misc/jq to v1.7_pre20201109-r1. This fixes CVE-2016-4074.
Change Simplified GPU driver installation by remounting the driver
installation path as executable from cos-extensions.
Security Updated dev-libs/openssl to v1.1.1v. This resolves CVE-2023-3817.
## August 14, 2023
Change
### cos-105-17412-156-15
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.120](https://cos.googlesource.com/third_party/kernel/+/05dc99f3538aecb0550a603bec81a0b8a0f3f3ad) | v23.0.3 | v1.7.2 | v470.199.02(default),v525.125.06 |
Security Fixed CVE-2023-32001 in net-misc/curl.
Security Fixed CVE-2023-4004, CVE-2023-3776, CVE-2023-3777, CVE-2023-1206, and CVE-2023-3611 in the Linux kernel.
Security Fixed CVE-2022-40896 in dev-python/pygments.
Fixed Update cos-gpu-installer to v2.1.4. This fixes permission issue in GPU driver install directory with OSS drivers.
## August 01, 2023
Change
### cos-105-17412-156-5
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.120](https://cos.googlesource.com/third_party/kernel/+/3bb56bb911389a792e7134bc22628ecd46068fae) | v23.0.3 | v1.7.2 | v470.199.02(default),v525.125.06 |
Change Updated cos-gpu-installer to v2.1.1.
## July 21, 2023
Change
### cos-105-17412-156-4
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.120](https://cos.googlesource.com/third_party/kernel/+/3bb56bb911389a792e7134bc22628ecd46068fae) | v23.0.3 | v1.7.2 | v470.199.02(default),v525.125.06 |
Security Fixed CVE-2023-35001 in the Linux kernel.
Security Fixed CVE-2023-31248 in the Linux kernel.
Fixed Fixed stability issues in the device memory TCP feature.
## July 18, 2023
Change
### cos-105-17412-156-2
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.120](https://cos.googlesource.com/third_party/kernel/+/8956dbfffd3a5ead6eec995202545aa67f745a74) | v23.0.3 | v1.7.2 | v470.199.02(default),v525.125.06 |
Announcement [This is an LTS Refresh Release.](https://cloud.google.com/container-optimized-os/docs/concepts/versioning#lts_refresh_releases)
Security Fixed CVE-2023-3609 in the Linux kernel.
Security Updated default GPU driver to v470.199.02 and latest GPU driver to v525.125.06. This resolves CVE-2023-25515 and CVE-2023-25516.
Security Updated open-vm-tools to v12.2.5. This resolves CVE-2023-20867.
Change Updated containerd to v1.7.2.
## July 13, 2023
Change
### cos-105-17412-101-51
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.109](https://cos.googlesource.com/third_party/kernel/+/ad11cdfea9625254c8e83f20095287ef55e1cec4) | v23.0.3 | v1.7.0 | v470.182.03(default),v525.105.17 |
Security Fixed CVE-2023-3390 in the Linux kernel.
Security Fixed CVE-2023-3090 in the Linux kernel.
## July 05, 2023
Change
### cos-105-17412-101-42
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.109](https://cos.googlesource.com/third_party/kernel/+/22f7aa045867edeb16ed085e67428f508f437228) | v23.0.3 | v1.7.0 | v470.182.03(default),v525.105.17 |
Security Fixed CVE-2023-3268 in the Linux kernel.
## June 29, 2023
Change
### cos-105-17412-101-37
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.109](https://cos.googlesource.com/third_party/kernel/+/fbb84db56cc75d8d3fcd6b22597b9d764405e297) | v23.0.3 | v1.7.0 | v470.182.03(default),v525.105.17 |
Feature Added support for GPUDirect-TCPX.
Change Runtime sysctl changes:
- Changed: vm.lowmem_reserve_ratio: 256 256 32 0 -\> 256 256 32 0 0
## June 26, 2023
Change
### cos-105-17412-101-36
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.109](https://cos.googlesource.com/third_party/kernel/+/fbb84db56cc75d8d3fcd6b22597b9d764405e297) | v23.0.3 | v1.7.0 | v470.182.03(default),v525.105.17 |
Security Fix CVE-2023-1972 in binutils.
Security Fix CVE-2023-1972 in binutils-libs.
Fixed Updated toolbox to v20230615.
Security Updated dev-lang/go to v1.20.5. This fixes CVE-2023-29403, CVE-2023-29402, CVE-2023-29405 and CVE-2023-29404.
Security Fixed CVE-2023-34256 in the Linux kernel.
Change Updated google-guest-configs to v20230526.00.
## June 12, 2023
Change
### cos-105-17412-101-24
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.109](https://cos.googlesource.com/third_party/kernel/+/1bc63ace6716f85fe792dcea65f46313874ade7b) | v23.0.3 | v1.7.0 | v470.182.03(default),v525.105.17 |
Security Fixed CVE-2023-24329 in dev-lang/python.
Security Updated net-misc/curl to v8.1.0-r1. This resolves CVE-2023-28319, CVE-2023-28320, CVE-2023-28321, and CVE-2023-28322.
Security Fixed CVE-2023-2124 in the Linux kernel.
Security Updated dev-libs/openssl to v1.1.1u. This resolves CVE-2023-2650.
## June 05, 2023
Change
### cos-105-17412-101-17
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.109](https://cos.googlesource.com/third_party/kernel/+/3f78393e3888bca4fdd7aae9d405f27017334f87) | v23.0.3 | v1.7.0 | v470.182.03(default),v525.105.17 |
Security Updated ncurses to v6.4p20220423. This resolves CVE-2023-29491.
## May 22, 2023
Change
### cos-105-17412-101-13
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.109](https://cos.googlesource.com/third_party/kernel/+/3f78393e3888bca4fdd7aae9d405f27017334f87) | v23.0.3 | v1.7.0 | v470.182.03(default),v525.105.17 |
Security Fixed CVE-2023-32233.
Security Updated app-editors/vim, app-editors/vim-core to v9.0.1562.
This resolves CVE-2023-2609, CVE-2023-2610, CVE-2023-2426.
Security Updated app-emulation/cloud-init to 23.1.2 which fixes CVE-2023-1786.
## May 09, 2023
Change
### cos-105-17412-101-4
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.109](https://cos.googlesource.com/third_party/kernel/+/4c0ef99fbc74bd4a4dce8851652be68038bec83e) | v23.0.3 | v1.7.0 | v470.182.03(default),v525.105.17 |
Announcement [This is an LTS Refresh Release.](https://cloud.google.com/container-optimized-os/docs/concepts/versioning#lts_refresh_releases)
Security Fixes CVE-2015-20107, CVE-2020-10735, CVE-2021-28861, and
CVE-2022-45061 in dev-lang/python.
Security Updated dev-libs/libxml2 to v2.10.4. This resolves CVE-2023-28484.
Fixed Updated google-guest-agent to v20230330.00.
Fixed Updated docker to v23.0.3.
Change Updated docker to v23.0.0.
Change Updated app-admin/google-osconfig-agent to v20230403.00.
Change Updated sys-fs/e2fsprogs package to v1.46.6.
Change Runtime sysctl changes:
- Added: kernel.ops_limit: 10000
- Added: kernel.warn_limit: 0
- Changed: net.core.bpf_jit_limit: 264241152 -\> 528482304
- Changed: net.netfilter.nf_conntrack_sctp_timeout_established: 432000 -\> 210
- Changed: vm.mmap_rnd_bits: 32 -\> 31
- Deleted: net.netfilter.nf_conntrack_sctp_timeout_heartbeat_acked: 210
Security Updated ncurses to 6.4p20220423. This resolves CVE-2023-29491.
## May 01, 2023
Change
### cos-105-17412-1-75
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.90](https://cos.googlesource.com/third_party/kernel/+/4f62732e109206761b785b693d1cba558ea50573) | v23.0.0 | v1.7.0 | v470.182.03(default),v525.105.17 |
Security Upgraded net-misc/curl to v8.0.1. This resolves CVE-2023-27534.
Feature Fallback to installing compatible drivers when installer
is invoked for certain GPU devices and incompatible drivers.
Fixed Fixed an issue where chronyd does not restart after failure, resulting in the system time being out of sync.
## April 25, 2023
Change
### cos-105-17412-1-71
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-5.15.90](https://cos.googlesource.com/third_party/kernel/+/4f62732e109206761b785b693d1cba558ea50573) | v23.0.0 | v1.7.0 | v470.182.03(default),v525.105.17 |
Change Updated containerd to v1.7.0.
Fixed Fixed race condition in io_uring in the Linux kernel.
Security Updated dev-lang/go to v1.20.3. This resolves CVE-2023-24536,CVE-2023-24537,CVE-2023-24538.
## cos-105-17412-1-66
|---|---|---|---|---|
| Date | Kernel | Docker | Containerd | GPU Drivers |
| Apr 17, 2023 | [COS-5.15.90](https://cos.googlesource.com/third_party/kernel/+/f9454f9e953871fa6dc191c7f4a4e619e6fd5a5f) | v23.0.0 | v1.7.0-beta.1 | v470.182.03(default),v525.105.17 |
Fixed
Fixed an issue where pstore is not cleaned
at boot time if COS metrics are disabled.
Security
Update default driver to 470.182.03. This resolves CVE
CVE-2023-0184, CVE-2023-0189, CVE-2023-0180, CVE-2023-0185,
CVE-2023-0187, CVE-2023-0198, CVE-2023-0199, CVE-2023-0188,
CVE-2023-0190, CVE-2023-0194, CVE-2023-0195, CVE-2023-0191. Also update
latest driver to 525.105.17. This resolves CVE-2023-0184, CVE-2023-0189,
CVE-2023-0180, CVE-2023-0183, CVE-2023-0185, CVE-2023-0187,
CVE-2023-0198, CVE-2023-0199, CVE-2023-0188, CVE-2023-0190,
CVE-2023-0194, CVE-2023-0195, CVE-2023-0191.
Security
Fixed CVE-2023-25809 in app-containers/runc.
Security
Fixed CVE-2023-0465, CVE-2023-0466 in dev-libs/openssl.
Security
Fixed CVE-2023-1652 in the Linux kernel.
## cos-105-17412-1-61
|---|---|---|---|---|
| Date | Kernel | Docker | Containerd | GPU Drivers |
| Apr 10, 2023 | [COS-5.15.90](https://cos.googlesource.com/third_party/kernel/+/d9e127ebae508635fed5f76fbc4cb7bad714a758) | v23.0.0 | v1.7.0-beta.1 | v470.161.03(default),v525.60.13 |
Feature
Add support for L4 GPU in cos-gpu-installer and fix cached
driver installation for prebuilt driver modules.
Security
Fixed CVE-2023-27561 in app-containers/runc.
Security
Fixed CVE-2023-0464 in dev-libs/openssl.
Security
Upgraded net-misc/openssh package to 9.3. This fixed
CVE-2023-28531 in net-misc/openssh.
Security
Fixed CVE-2023-0386 in overlayfs.
## cos-105-17412-1-55
|---|---|---|---|---|
| Date | Kernel | Docker | Containerd | GPU Drivers |
| Apr 03, 2023 | [COS-5.15.90](https://cos.googlesource.com/third_party/kernel/+/70610db043b050d7eca233b51a15e9ff98360100) | v23.0.0 | v1.7.0-beta.1 | v470.161.03(default),v525.60.13 |
Announcement
Promoted M105 to stable.
## cos-beta-105-17412-1-55
|---|---|---|---|---|
| Date | Kernel | Docker | Containerd | GPU Drivers |
| Mar 27, 2023 | [COS-5.15.90](https://cos.googlesource.com/third_party/kernel/+/70610db043b050d7eca233b51a15e9ff98360100) | v23.0.0 | v1.7.0-beta.1 | v470.161.03(default),v525.60.13 |
Change
Added warning to stackdriver logging agent to inform users that they are
running a deprecated logging agent.
Fixed
Removed `CONFIG_NET_CLS_TCINDEX` kernel config entry.
Security
Updated dev-lang/go to v1.20.2. This resolves CVE-2023-24532.
Security
Updated net-misc/curl to v7.88.1. This resolves CVE-2023-23916.
Security
Fixed CVE-2023-28466 in the Linux kernel.
## cos-beta-105-17412-1-44
|---|---|---|---|---|
| Date | Kernel | Docker | Containerd | GPU Drivers |
| Mar 20, 2023 | [COS-5.15.90](https://cos.googlesource.com/third_party/kernel/+/04b827fdd9d1df38c38e08e209c673009cbc58a0) | v23.0.0 | v1.7.0-beta.1 | v470.161.03(default),v525.60.13 |
Change
Updated docker to v23.0.0.
Feature
Added `amd_iommu=off` in the kernel command line to turn off
`AMD IOMMU` by default.
Feature
Enabled `CONFIG_AMD_IOMMU` and `CONFIG_AMD_IOMMU_V2`.
Security
Fixed CVE-2023-23931 in dev-python/cryptography
Security
Updated app-editors/vim,app-editors/vim-core to v9.0.1403.
This resolves CVE-2022-4292, CVE-2022-4141, CVE-2023-0049, CVE-2023-0433, CVE-2023-0288, CVE-2023-0512, CVE-2023-1127, CVE-2023-1170, CVE-2023-1175, CVE-2023-1355 and CVE-2023-1264.
Security
Fixed CVE-2022-40320 in dev-libs/confuse.
## cos-beta-105-17412-1-37
|---|---|---|---|---|
| Date | Kernel | Docker | Containerd | GPU Drivers |
| Mar 13, 2023 | [COS-5.15.90](https://cos.googlesource.com/third_party/kernel/+/11e6911bf8d312f2fe013d2b756bdacd3aa55fa4) | v23.0.0rc3 | v1.7.0-beta.1 | v470.161.03(default),v525.60.13 |
Change
Updated containerd to 1.7.0-beta.1.
Change
Allow preloading GPU driver dependencies through cos-extensions for dev-channel images.
Change
Fixed a regression in the Linux kernel that caused listen()
to no longer return -EADDRINUSE.
Fixed
Fixed a use-after-free issue in net/sched in the Linux
kernel.
Fixed
Fixed conntrack issue with random timeouts.
## cos-beta-105-17412-1-28
|---|---|---|---|---|
| Date | Kernel | Docker | Containerd | GPU Drivers |
| Mar 06, 2023 | [COS-5.15.90](https://cos.googlesource.com/third_party/kernel/+/0a08ee92b443851cebd1a7d86ebc82fb89471f5f) | v23.0.0rc3 | v1.6.18 | v470.161.03(default),v525.60.13 |
Change
Removed support for Rust symbol demangling in
google-breakpad.
Change
Updated app-emulation/containerd to v1.6.18. This resolves
CVE-2023-25173 and CVE-2023-25153.
Change
Update dev-go/go-tools to
070db2996ebe3aa00667288f8e5749e867deeb39.
Change
Upgraded dev-lang/go to v1.20.
Feature
Installed fluent-bit for stackdriver logging in x86 images.
It can be enabled by the metadata `google-logging-use-fluentbit=true`.
See [https://cloud.google.com/container-optimized-os/docs/how-to/logging](https://docs.cloud.google.com/container-optimized-os/docs/release-notes/m105/url)
for more details.
Fixed
Fix containers losing access to GPUs with error "Failed to
initialize NVML: Unknown error"
Fixed
Updated dev-go/go-sys to v0.5.0.
Security
Update open-iscsi to 2.1.8 to fix CVE-2020-17437
Security
Updated dev-lang/go to v1.20.1. Updated dev-go/net to
v0.7.0. This resolves CVE-2022-41723 and CVE-2022-41725.
Security
Fix CVE-2022-4285 in binutils and CVE-2022-4285 in binutils-libs.
Security
Fixed CVE-2022-48303 in app-arch/tar
Security
Fixed CVE-2023-25136 in net-misc/openssh. Also upgraded
net-misc/openssh from 9.1 to 9.2.
Security
Fixed CVE-2022-1304 in the sys-fs/e2fsprogs package.
Security
Fixed CVE-2022-2928 and CVE-2022-2929 in net-misc/dhcp.
Security
Fixed CVE-2022-46663 in sys-apps/less.
Security
Fixed CVE-2021-4122 in sys-fs/cryptsetup. Upgraded
sys-fs/cryptsetup from 2.3.4 to 2.4.3.
Security
Update net-fs/cifs-utils to v6.15. Fixes CVE-2022-29869, CVE-2021-20208, and CVE-2022-27239 in net-fs/cifs-utils.
Security
Fixed CVE-2021-27291 and CVE-2021-20270 in dev-python/pygments.
Change
Add prebuilt NVIDIA GPU kernel module installation support using the cos-extensions script/ cos-gpu-installer:v2 container.
## cos-beta-105-17412-1-2 (vs Milestone 101)
|---|---|---|---|---|
| Date | Kernel | Docker | Containerd | GPU Drivers |
| Feb 14, 2023 | [COS-5.15.90](https://cos.googlesource.com/third_party/kernel/+/0a08ee92b443851cebd1a7d86ebc82fb89471f5f) | v23.0.0rc3 | v1.6.15 | v470.161.03(default),v525.60.13 |
Feature
Enabled trusted IMA certificate loading from
/etc/ima/pubkey.x509.
Feature
Retry starting systemd-networkd permanently in case of failure instead of default limit of 5.
Feature
Enabled fluent-bit to use customized configuration.
Feature
Moved standalone kubelet runtime to containerd.
Feature
Added cni-plugins by default.
Feature
Moved containerd default cgroup to systemd.
Feature
Added kernel flag to protect stateful partition and support for cryptsetup with AEAD.
Feature
Enabled CONFIG_SCHED_CORE and FANOTIFY_ACCESS_PERMISSIONS in the kernel config.
Change
Upgraded Nvidia latest drivers from v510.108.03 to v525.60.13 (OSS).
Change
Updated cos-gpu-installer to v2.0.31. This adds support for
gsp_tu10x.bin and gsp_ad10x.bin gsp firmware files and removes the
container dependency on python2.
Change
Updated the Linux kernel to v5.15.90.
Change
Updated dev-python/pexpect to v4.8.0.
Change
Updated dev-go/go-tools to v0.1.11.
Change
Upgraded dev-lang/go to v1.19.3.
Change
Updated sys-boot/shim to v15.6.
Change
Upgraded pam to v1.5.2.
Change
Updated libseccomp to v2.5.4.
Change
Upgraded openssh package to v9.1_p1.
Change
Upgraded docker to v23.0.0-rc.3.
Change
Upgraded Python to v3.8 and removed Python 2.
Change
Updated cloud-init to v22.4.
Change
Upgraded nfs-utils to v2.6.2.
Change
Updated built-in kubelet/kubectl to v1.25.5.
Change
Updated localtoast from v1.1.4.3 to v1.1.5.1.
Change
Updated sosreport to v4.4.
Change
Updated sys-apps/apparmor to v3.1.2.
Change
Upgraded systemd to v252.1.
Change
Updated app-emulation/cri-tools to v1.25.0.
Change
Updated stackdriver logging agent to v1.9.9.
Change
Updated app-emulation/docker-credential-helpers to v0.7.0.
Change
Updated sys-apps/shadow to v4.12.3.
Change
Updated sys-apps/makedumpfile to v1.7.2.
Change
Updated app-emulation/runc to v1.1.4.
Change
Updated grub2 to Fedora-38.
Change
Removed Network Time Security support in Chrony.
Change
Updated google-guest-agent to v20220614.00.
Change
Removed the mosys package.
Change
Updated app-admin/sudo to v1.9.12_p1.
Change
Updated app-arch/pigz to v2.7.
Change
Updated app-arch/xz-utils to v5.2.9.
Change
Updated app-editors/vim-core to v9.0.1000.
Change
Updated app-eselect/eselect-awk to v0.4.
Change
Updated app-eselect/eselect-vi to v20221122.
Change
Updated dev-libs/inih to v56-r1.
Change
Updated net-misc/curl to v7.86.0-r3.
Change
Updated sys-apps/file to v5.43-r1.
Change
Updated sys-apps/findutils to v4.9.0-r2.
Change
Updated sys-apps/grep to v3.8-r1.
Change
Updated sys-apps/less to v608-r1.
Change
Updated sys-apps/sed to v4.9.
Change
Updated sys-auth/passwdqc to v2.0.2-r1.
Change
Updated sys-block/thin-provisioning-tools to v0.9.0-r1.
Change
Updated sys-fs/e2fsprogs to v2fsprogs-1.46.5-r4.
Change
Updated sys-libs/libcap to v2.66.
Change
Updated sys-libs/timezone-data to v2022g.
Change
Updated sys-libs/zlib to v1.2.13-r1.
Change
Updated sys-process/lsof to v4.96.4.
Change
Updated virtual/editor to v0-r4.
Fixed
Fixed an issue where `sudo -i` is not working correctly.
Security
Updated x11-libs/pixman to v0.42.2. This resolves CVE-2022-44638.
Security
Fixed CVE-2022-40768 and CVE-2022-43750 in the Linux
kernel.
Security
Updated app-arch/libarchive to v3.6.1. This resolves CVE-2022-26280.
Security
Fixed CVE-2022-37454 in dev-lang/python.
Security
Fixed CVE-2023-0054 in vim.
Security
Upgraded vim to v9.0.1000. This fixes CVE-2022-4292.
Security
Fixed CVE-2022-3715 in bash.
Change
Runtime sysctl changes:
- Changed: vm.mmap_rnd_bits: 28 -\> 32