You can see the latest product updates for all of Google Cloud on the
[Google Cloud](https://docs.cloud.google.com/release-notes) page, browse and filter all release notes in the
[Google Cloud console](https://console.cloud.google.com/release-notes),
or programmatically access release notes in
[BigQuery](https://console.cloud.google.com/bigquery?p=bigquery-public-data&d=google_cloud_release_notes&t=release_notes&page=table).
To get the latest product updates delivered to you, add the URL of this page to your
[feed
reader](https://wikipedia.org/wiki/Comparison_of_feed_aggregators), or add the
[feed URL](https://docs.cloud.google.com/feeds/cos-109-release-notes.xml) directly.
## September 24, 2025
Change
### cos-109-17800-570-50
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.151](https://cos.googlesource.com/third_party/kernel/+/a4114b18351d2a6e0d84a3c7b02e4513ced87fcf) | v24.0.9 | v1.7.27 | [See List](https://storage.googleapis.com/cos-tools/17800.570.50/lakitu/gpu_driver_versions.textproto) |
Change Enabled Coherent Driver Memory Management by default when installing GPU drivers on GB2000.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812272 -\> 812258
Fixed Updated golang.org/x/crypto in google-osconfig-agent to v0.31.0.
Change Updated cos-gpu-installer to v2.5.7.
Fixed Upgraded dev-libs/libxslt to version 1.1.43-r1.
Fixed Updated the Linux kernel to v6.1.151.
Security Upgraded dev-libs/libxml2 to version 2.13.9. This fixes
CVE-2025-9714.
## September 16, 2025
Change
### cos-109-17800-570-46
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.143](https://cos.googlesource.com/third_party/kernel/+/21a09914420b38facc9d5d41d6790e66c9786c31) | v24.0.9 | v1.7.27 | [See List](https://storage.googleapis.com/cos-tools/17800.570.46/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2025-38539 in the Linux kernel.
Feature Added GDRCopy kernel module for NVIDIA drivers.
Security Fixed CVE-2025-38553 in the Linux kernel.
Security Fixed CVE-2025-38622 in the Linux kernel.
Security Fixed CVE-2025-38527 in the Linux kernel.
Security Fixed CVE-2025-38563 in the Linux kernel.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812270 -\> 812272
Security Fixed CVE-2025-38550 in the Linux kernel.
Security Fixed CVE-2025-38572 in the Linux kernel.
Security Fixed CVE-2025-38608 in the Linux kernel.
Security Fixed CVE-2025-38587 in the Linux kernel.
Security Fixed CVE-2025-38565 in the Linux kernel.
Security Fixed CVE-2025-38645 in the Linux kernel.
Security Fixed CVE-2025-38588 in the Linux kernel.
Security Fixed CVE-2025-38639 in the Linux kernel.
Security Fixed CVE-2025-38528 in the Linux kernel.
## September 08, 2025
Change
### cos-109-17800-570-43
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.143](https://cos.googlesource.com/third_party/kernel/+/251d4a8789b175c70dd0bc30d661571ca4535092) | v24.0.9 | v1.7.27 | [See List](https://storage.googleapis.com/cos-tools/17800.570.43/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2024-58240 in the Linux kernel.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812262 -\> 812270
Security Fixed CVE-2025-38676 in the Linux kernel.
Security Fixed CVE-2025-38322 in the Linux kernel.
## September 02, 2025
Change
### cos-109-17800-570-40
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.143](https://cos.googlesource.com/third_party/kernel/+/7ee6ea59a506ec4129b6bd62e046f8d180705344) | v24.0.9 | v1.7.27 | [See List](https://storage.googleapis.com/cos-tools/17800.570.40/lakitu/gpu_driver_versions.textproto) |
Security Fixed KCTF-aba0c94 in the Linux kernel.
Security Fixed KCTF-62708b9 in the Linux kernel.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812214 -\> 812262
## August 25, 2025
Change
### cos-109-17800-570-37
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.143](https://cos.googlesource.com/third_party/kernel/+/69a4dc1bdd77106e675905e62d935738f80567d2) | v24.0.9 | v1.7.27 | [See List](https://storage.googleapis.com/cos-tools/17800.570.37/lakitu/gpu_driver_versions.textproto) |
Feature Disabled DNSSEC by default for COS TPU VMs.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812258 -\> 812214
Security Fixed KCTF-abad3d0 in the Linux kernel.
## August 18, 2025
Change
### cos-109-17800-570-33
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.143](https://cos.googlesource.com/third_party/kernel/+/32eebab8d4fc97eb69fe095c4737e578f395ea56) | v24.0.9 | v1.7.27 | [See List](https://storage.googleapis.com/cos-tools/17800.570.33/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2025-38499 in the Linux kernel.
Security Upgraded sys-libs/binutils-libs to version 2.45. This fixes CVE-2025-8224,CVE-2025-8225 and CVE-2025-1153.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812266 -\> 812258
Security Fixed KCTF-01d3c84 in the Linux kernel.
Security Fixed CVE-2025-38499 in the linux kernel.
Feature Added NVIDIA GPU driver's R580 branch. Updated the LATEST GPU driver label to version 580.65.06.
## August 12, 2025
Change
### cos-109-17800-570-26
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.143](https://cos.googlesource.com/third_party/kernel/+/81651b50f5aebbcc9a6cd461d69c2acaf246cbdc) | v24.0.9 | v1.7.27 | [See List](https://storage.googleapis.com/cos-tools/17800.570.26/lakitu/gpu_driver_versions.textproto) |
Security Upgraded urllib3 to version 1.26.18. This fixes CVE-2021-33503, CVE-2023-43804, and CVE-2023-45803.
Security Fixed CVE-2024-52533 in dev-libs/glib.
Security Fixed KCTF-bfebdb8 in the kernel.
Security Fixed CVE-2025-8058 in glibc.
Security Added support for Nvidia driver version 535.261.03. This fixes CVE-2025-23286 and CVE-2025-23279.
Security Patched openssl to fix CVE-2023-50782 affecting
dev-python/crytography.
Fixed Updated dev-python/requests to v2.32.4.
Security Upgraded net-misc/netplan to 1.1.2. This fixes
CVE-2022-4968.
Security Added support for Nvidia driver version 570.172.08. This fixes CVE-2025-23279.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812262 -\> 812266
Security Fixed CVE-2024-11584 in cloud-init.
Security Fixed CVE-2024-6174 in cloud-init.
Security Upgraded dev-vcs/git to version 2.49.1. This fixes CVE-2025-48385, CVE-2025-27613, CVE-2025-27614, CVE-2025-48384, CVE-2025-46835.
Fixed Upgraded virtual/logger to v0-r2.
Fixed Upgraded sys-process/lsof to v4.99.5.
## August 06, 2025
Change
### cos-109-17800-570-23
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.143](https://cos.googlesource.com/third_party/kernel/+/66208798dd21d4ee2d28f8ea8b9b3a2df63e3f42) | v24.0.9 | v1.7.27 | [See List](https://storage.googleapis.com/cos-tools/17800.570.23/lakitu/gpu_driver_versions.textproto) |
Change Runtime sysctl changes:
- Changed: fs.file-max: 812262 -\> 812283
Security Added support for Nvidia driver version 535.261.03. This fixes CVE-2025-23286 and CVE-2025-23279.
Security Patched openssl to fix CVE-2023-50782 affecting
dev-python/cryptography.
Security Upgraded dev-vcs/git to version 2.49.1. This fixes CVE-2025-48385, CVE-2025-27613, CVE-2025-27614, CVE-2025-48384, CVE-2025-46835.
Security Added support for Nvidia driver version 570.172.08. This fixes CVE-2025-23279.
Security Upgraded net-misc/netplan to 1.1.2. This fixes
CVE-2022-4968.
Fixed Upgraded sys-process/lsof to v4.99.5.
Security Fixed CVE-2024-11584 in cloud-init.
Fixed Updated dev-python/requests to v2.32.4.
Security Fixed CVE-2024-6174 in cloud-init.
## July 28, 2025
Change
### cos-109-17800-570-8
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.143](https://cos.googlesource.com/third_party/kernel/+/66208798dd21d4ee2d28f8ea8b9b3a2df63e3f42) | v24.0.9 | v1.7.27 | [See List](https://storage.googleapis.com/cos-tools/17800.570.8/lakitu/gpu_driver_versions.textproto) |
Security Upgraded sqlite to v3.50.2. This resolves CVE-2025-6965.
Security Fixed KCTF-5e28d5a in the Linux kernel.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812234 -\> 812262
## July 21, 2025
Change
### cos-109-17800-570-5
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.143](https://cos.googlesource.com/third_party/kernel/+/934359bdc0f1081eed66a6db8dba3ea7c2948d3c) | v24.0.9 | v1.7.27 | [See List](https://storage.googleapis.com/cos-tools/17800.570.5/lakitu/gpu_driver_versions.textproto) |
Announcement This is an [LTS Refresh release](https://cloud.google.com/container-optimized-os/docs/concepts/versioning#lts_refresh_releases).
Fixed Upgraded app-containers/docker-credential-helpers to v0.9.3.
Fixed Upgraded dev-db/sqlite to v3.50.1.
Fixed Upgraded app-arch/gzip to v1.14.
Fixed Upgraded app-arch/unzip to v6.0_p29.
Fixed Upgraded app-admin/google-guest-configs to v20250516.00.
Fixed Fixed an issue where some workloads could cause a full
system hang when running close to their memory limit.
Fixed Upgraded sys-libs/talloc to v2.4.3.
Fixed Updated app-misc/jq to v1.8.1.
Security Fixed KCTF-103406b in the Linux kernel
Fixed Upgraded net-fs/cifs-utils to v7.4.
Change Updated the NVIDIA GPU driver policy for New Feature Branch (NFB) drivers. The LATEST tag has been updated to point to the stable 570.133.20 Production Branch. The 575.57.08 NFB driver remains available for development and testing but must now be selected by its specific version number.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812258 -\> 812234
Fixed Upgraded sys-libs/libcap to v2.76.
## July 14, 2025
Change
### cos-109-17800-519-47
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.141](https://cos.googlesource.com/third_party/kernel/+/80aa802c8b1dacdfd244bb9931499a2fa4fcd118) | v24.0.9 | v1.7.27 | [See List](https://storage.googleapis.com/cos-tools/17800.519.47/lakitu/gpu_driver_versions.textproto) |
Change Upgraded nvidia-container-toolkit to v1.17.8. This fixes CVE-2025-23266.
Fixed Upgraded sys-apps/less to v679.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812201 -\> 812258
Security Updated app-editors/nano to v8.5. This resolves
CVE-2024-5742.
Security Upgraded vim, vim-core to
version 9.1.1500. This fixes CVE-2025-26603, CVE-2025-27423,
CVE-2025-29768, CVE-2025-1215, CVE-2025-24014, CVE-2025-22134.
## July 07, 2025
Change
### cos-109-17800-519-41
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.141](https://cos.googlesource.com/third_party/kernel/+/80aa802c8b1dacdfd244bb9931499a2fa4fcd118) | v24.0.9 | v1.7.27 | [See List](https://storage.googleapis.com/cos-tools/17800.519.41/lakitu/gpu_driver_versions.textproto) |
Security Upgraded app-admin/sudo to v1.9.17_p1. This resolves
CVE-2025-32462 and CVE-2025-32463.
## June 30, 2025
Change
### cos-109-17800-519-40
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.141](https://cos.googlesource.com/third_party/kernel/+/80aa802c8b1dacdfd244bb9931499a2fa4fcd118) | v24.0.9 | v1.7.27 | [See List](https://storage.googleapis.com/cos-tools/17800.519.40/lakitu/gpu_driver_versions.textproto) |
Change Runtime sysctl changes:
- Changed: fs.file-max: 812288 -\> 812258
Security Upgrade libarchive to version 3.8.1. This fixes CVE-2025-5914.
Security Upgraded elfutils to version 0.193. This fixes CVE-2025-1365, CVE-2025-1371, CVE-2025-1372, and CVE-2025-1377.
Fixed Upgraded dev-libs/libusb to v1.0.29.
## June 23, 2025
Change
### cos-109-17800-519-36
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.141](https://cos.googlesource.com/third_party/kernel/+/80aa802c8b1dacdfd244bb9931499a2fa4fcd118) | v24.0.9 | v1.7.27 | [See List](https://storage.googleapis.com/cos-tools/17800.519.36/lakitu/gpu_driver_versions.textproto) |
Security Updated the Linux kernel to v6.1.141. This includes
mitigations for CVE-2024-28956, which may negatively impact the
performance of Intel machine types.
Security Fixed KCTF-d35acc1 in the Linux kernel.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812276 -\> 812288
## June 18, 2025
Change
### cos-109-17800-519-32
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.135](https://cos.googlesource.com/third_party/kernel/+/269aea26c0f2e9675236f141e0a182b8c58e8e52) | v24.0.9 | v1.7.27 | [See List](https://storage.googleapis.com/cos-tools/17800.519.32/lakitu/gpu_driver_versions.textproto) |
Change Runtime sysctl changes:
- Changed: fs.file-max: 812266 -\> 812276
Security Upgraded app-misc/jq to v1.8.0. This fixes CVE-2025-48060.
## June 17, 2025
Change
### cos-109-17800-519-30
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.135](https://cos.googlesource.com/third_party/kernel/+/269aea26c0f2e9675236f141e0a182b8c58e8e52) | v24.0.9 | v1.7.27 | [See List](https://storage.googleapis.com/cos-tools/17800.519.30/lakitu/gpu_driver_versions.textproto) |
Change Updated cos-gpu-installer to v2.5.3.
Security Fixed CVE-2024-36927 in the Linux kernel.
Security Fixed KCTF-ac9fe7d in the kernel.
Security Fixed CVE-2024-43840 in the Linux kernel.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812283 -\> 812266
Feature Added support for Nvidia driver version 575.57.08.
Security Updated systemd to v253.33. This resolves CVE-2025-4598.
Security Fixed CVE-2024-36903 in the Linux kernel.
Security Fixed CVE-2025-47273 in dev-python/setuptools.
Feature Fixed CVE-2024-41110 in Docker.
## June 02, 2025
Change
### cos-109-17800-519-18
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.135](https://cos.googlesource.com/third_party/kernel/+/2e89dc9fc1cfcb0184104491d7f412eee640086b) | v24.0.9 | v1.7.27 | [See List](https://storage.googleapis.com/cos-tools/17800.519.18/lakitu/gpu_driver_versions.textproto) |
Security Fixed KCTF-3f98113 in the Linux kernel.
Fixed Upgraded sys-apps/less to v678.
Security Fixed CVE-2024-26783 in the Linux kernel.
Fixed Updated cos-gpu-installer to v2.5.2: Added support for OTHER/NO_GPU cases to enable GPU driver preloading on the ARM64 architecture and added support for IMEX Driver configuration installation for NVIDIA_GB200 machine.
Security Fixed KCTF-8478a72 in the Linux kernel.
## May 27, 2025
Change
### cos-109-17800-519-12
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.135](https://cos.googlesource.com/third_party/kernel/+/8f41e7ee6fe9b8eb00f95b8b56858a7594b466b7) | v24.0.9 | v1.7.27 | [See List](https://storage.googleapis.com/cos-tools/17800.519.12/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-20250-3198 in sys-libs/bintuils-libs.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812270 -\> 812274
Security Fixed CVE-2025-46836 in sys-apps/net-tools.
Feature Support NVIDIA MFT Tools on COS.
## May 12, 2025
Change
### cos-109-17800-519-7
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.135](https://cos.googlesource.com/third_party/kernel/+/8f41e7ee6fe9b8eb00f95b8b56858a7594b466b7) | v24.0.9 | v1.7.27 | [See List](https://storage.googleapis.com/cos-tools/17800.519.7/lakitu/gpu_driver_versions.textproto) |
Fixed Fixed issue where modinfo could not display module signatures.
Security Updated NVIDIA GPU drivers to v535.247.01 for default/ R535,
v550.163.01 for R550 and v570.133.20 for latest/R570. This resolves
CVE-2025-23244.
Security Upgraded containerd to 1.7.27. Fixes CVE-2024-40635.
Security Updated apparmor to 3.1.6. This fixes CVE-2016-1585.
Security Fixed KCTF-3df275e in the Linux kernel.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812287 -\> 812270
Security Fixed CVE-2024-26739 in the Linux kernel.
## May 05, 2025
Change
### cos-109-17800-519-1
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.135](https://cos.googlesource.com/third_party/kernel/+/440b25e0098485dd1971331e86e5483fc2367f8c) | v24.0.9 | v1.7.24 | [See List](https://storage.googleapis.com/cos-tools/17800.519.1/lakitu/gpu_driver_versions.textproto) |
Announcement This is an [LTS Refresh release](https://cloud.google.com/container-optimized-os/docs/concepts/versioning#lts_refresh_releases).
Fixed Upgraded sys-apps/makedumpfile to v1.7.7.
Fixed Upgraded net-dns/libidn2 to v2.3.8.
Security Fixed CVE-2025-1178,CVE-2025-1182 and CVE-2025-1181 in sys-libs/binutils-libs.
Fixed Upgraded sys-apps/acl to v2.3.2-r2.
Fixed Upgraded net-firewall/iptables to v1.8.11-r1.
Fixed Upgraded app-admin/google-guest-configs to v20250221.00.
Fixed Upgraded app-admin/google-guest-configs to v20250124.00.
Security Updated dev-go/net to v0.39.0. This fixes CVE-2025-22870.
Security Updated dev-go/protobuf to v1.33.0. This fixes CVE-2024-24786.
Fixed Upgraded dev-libs/nss to v3.107.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812262 -\> 812287
Fixed Upgraded sys-auth/pambase to v20250228.
Security Fixed CVE-2025-22035 in the Linux kernel.
Fixed Upgraded dev-lang/go to v1.21.13.
Fixed Upgraded app-containers/docker-credential-helpers to v0.9.2.
Security Fixed CVE-2025-32414, CVE-2025-32415 in dev-libs/libxml2.
Security Fixed CVE-2025-32728 in net-misc/openssh.
Security Updated dev-vcs/git to version 2.49.0. This fixed CVE-2024-52006, CVE-2024-50349
Fixed Upgraded dev-libs/expat to v2.6.4.
Fixed Upgraded sys-apps/grep to v3.12.
Fixed Upgraded sys-libs/libcap to v2.71.
Fixed Upgraded net-libs/libnetfilter_conntrack to v1.1.0.
Fixed Upgraded net-fs/cifs-utils to v7.3, Upgraded sys-libs/talloc to v2.4.2.
Fixed Upgraded dev-db/sqlite to v3.49.1.
Fixed Upgraded app-arch/gzip to v1.13-r1.
Fixed Upgraded app-admin/sudo to v1.9.16_p2-r1.
Fixed Upgraded dev-python/configobj to v5.0.9.
Fixed Upgraded net-nds/rpcbind to v1.2.7.
Fixed Upgraded net-libs/libtirpc to v1.3.6.
## April 25, 2025
Change
### cos-109-17800-436-106
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.124](https://cos.googlesource.com/third_party/kernel/+/3d6073165b97be0111e2b25fbe5ace49f3f1f83c) | v24.0.9 | v1.7.24 | [See List](https://storage.googleapis.com/cos-tools/17800.436.106/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2025-21898 in the Linux kernel.
Security Fixed CVE-2025-21959 in the Linux kernel.
Security Fixed CVE-2025-21997 in the Linux kernel.
Security Fixed CVE-2025-21920 in the Linux kernel.
Security Fixed CVE-2025-21999 in the Linux kernel.
Security Fixed CVE-2025-21964 in the Linux kernel.
Security Fixed CVE-2024-48615 in app-arch/libarchive.
Security Fixed CVE-2025-21963 in the Linux kernel.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812288 -\> 812262
Security Fixed CVE-2025-21919 in the Linux kernel.
Security Fixed CVE-2025-21922 in the Linux kernel.
Security Fixed CVE-2025-22005 in the Linux kernel.
Security Fixed CVE-2025-21980 in the Linux kernel.
Security Fixed CVE-2025-21962 in the Linux kernel.
Fixed Reverted a change in the linux kernel which caused nfs directories to unexpectedly be mounted as ro instead of rw.
## April 14, 2025
Change
### cos-109-17800-436-99
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.124](https://cos.googlesource.com/third_party/kernel/+/36e3acfd29d5de4253e86a5eb084885fe7f4e486) | v24.0.9 | v1.7.24 | [See List](https://storage.googleapis.com/cos-tools/17800.436.99/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2024-58083 in the Linux kernel.
Security Fixed CVE-2025-21867 in the Linux kernel.
Fixed Upgraded dev-libs/libusb to v1.0.28.
Fixed Upgraded net-firewall/iptables to v1.8.11-r1.
Security Fixed KCTF-0c3057a in the Linux kernel.
Security Updated dev-libs/expat to v2.7.0. This fixes CVE-2024-8176.
Fixed Modified toolbox to use unified cgroup hierarchy mode, when possible, instead of hybrid mode.
Fixed Upgraded sys-apps/diffutils to v3.11-r2.
Security Fixed CVE-2025-21887 in the Linux kernel.
Security Fixed CVE-2025-22868 in dev-go/oauth2.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812258 -\> 812288
Security Fixed CVE-2024-35866 in the Linux kernel.
## March 31, 2025
Change
### cos-109-17800-436-91
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.124](https://cos.googlesource.com/third_party/kernel/+/5e17cd9189aae1306f456b5edf6207cbf46acd91) | v24.0.9 | v1.7.24 | [See List](https://storage.googleapis.com/cos-tools/17800.436.91/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2024-57977 in the Linux kernel.
Security Fixed CVE-2025-21812 in the Linux kernel.
Security Updated dev-go/net to v0.33.0. This fixed CVE-2023-45288.
Security Fixed CVE-2025-21763 in the Linux kernel.
Security Fixed CVE-2025-21726 in the Linux kernel.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812224 -\> 812258
Security Fixed CVE-2024-57979 in the Linux kernel.
Security Fixed CVE-2025-21760 in the Linux kernel.
Security Fixed CVE-2025-21796 in the Linux kernel.
Security Fixed CVE-2023-52927 in the Linux kernel.
Security Fixed CVE-2024-58005 in the Linux kernel.
Security Fixed CVE-2025-21727 in the Linux kernel.
Security Fixed KCTF-fcdd224 in the Linux kernel.
Security Fixed CVE-2024-56549 in the Linux kernel.
Security Fixed CVE-2025-21764 in the Linux kernel.
Security Fixed CVE-2025-21762 in the Linux kernel.
## March 24, 2025
Change
### cos-109-17800-436-79
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.124](https://cos.googlesource.com/third_party/kernel/+/137f4607b36c0dc2df5910d60cd322fd2cc8c5dc) | v24.0.9 | v1.7.24 | [See List](https://storage.googleapis.com/cos-tools/17800.436.79/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2025-21791 in the Linux kernel.
Security Fixed CVE-2025-21864 in the Linux kernel.
Security Fixed CVE-2024-26982 in the Linux kernel.
Security Fixed CVE-2025-21846 in the Linux kernel.
Security Fixed CVE-2025-21844 in the Linux kernel.
Security Fixed CVE-2025-21858 in the Linux kernel.
Fixed Fixed a race condition that could cause a kernel panic.
Security Fixed CVE-2025-21716 in the Linux kernel.
Security Fixed CVE-2025-21785 in the Linux kernel.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812258 -\> 812224
Security Fixed CVE-2024-53166 in the Linux kernel.
Security Fixed CVE-2024-57996 in the Linux kernel.
Fixed Upgraded sys-apps/which to v2.23.
Security Fixed KCTF-647cef2 in the Linux kernel.
Feature Added support for NVIDIA 570.124.06 GPU driver.
Updated the R570, LATEST GPU driver label to version 570.124.06 for all GPU devices.
Updated the DEFAULT GPU driver label to version 570.124.06 for NVIDIA_B200 and NVIDIA_H200 GPU devices.
Security Fixed CVE-2023-45288 in app-containers/docker.
Security Fixed CVE-2025-21779 in the Linux kernel.
## March 17, 2025
Change
### cos-109-17800-436-64
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.124](https://cos.googlesource.com/third_party/kernel/+/88b5ca7624b0a76434985610ecbfeeee48a647df) | v24.0.9 | v1.7.24 | [See List](https://storage.googleapis.com/cos-tools/17800.436.64/lakitu/gpu_driver_versions.textproto) |
Change Runtime sysctl changes:
- Changed: fs.file-max: 812157 -\> 812258
Security Fixed CVE-2025-21745 in the Linux kernel.
Security Fixed CVE-2025-21814 in the Linux kernel.
Security Fixed CVE-2024-58017 in the Linux kernel.
## March 12, 2025
Change
### cos-109-17800-436-60
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.124](https://cos.googlesource.com/third_party/kernel/+/ba3cc3689b7aec3a265ae8eab6ea6da27517824d) | v24.0.9 | v1.7.24 | [See List](https://storage.googleapis.com/cos-tools/17800.436.60/lakitu/gpu_driver_versions.textproto) |
Security Upgraded net-misc/wget to v1.25.0. This fixes
CVE-2024-10524.
Security Upgraded dev-libs/libxml2 to v1.12.10. This fixes CVE-2024-56171, CVE-2025-27113 and CVE-2025-24928.
Security Fixed KCTF-638ba50 in the Linux kernel.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812266 -\> 812157
Fixed Fixed console TTY leak in runc shim in containerd.
Change Updated gzip to v1.13.
Security Upgraded dev-go/crypto to v0.35.0. This fixes CVE-2025-22869.
Fixed Updated google.golang.org/grpc to v1.56.3 and upgrade
golang.org/x/net to v0.23.0 in docker and cri-tools. This fixes
CVE-2023-44487 and CVE-2023-45288.
Security Fixed CVE-2025-26465 and CVE-2025-26466 in net-misc/openssh.
Security Fixed CVE-2024-53589 in sys-libs/libutils-libs.
## March 03, 2025
Change
### cos-109-17800-436-48
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.124](https://cos.googlesource.com/third_party/kernel/+/8fd68e02310ed038999ccf777b4a4ea1c4cfc22d) | v24.0.9 | v1.7.24 | [See List](https://storage.googleapis.com/cos-tools/17800.436.48/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2025-21690 in the Linux kernel.
Fixed Upgraded sys-apps/diffutils to v3.11-r1.
Feature Updated cos-gpu-installer to v2.4.8: Add the -skip-nvidia-smi flag to disable the execution of nvidia-smi verification during gpu driver installation.
Security Upgraded moby/buildkit to v0.12.5. This fixes CVE-2024-23653 in app-containers/docker v24.0.9.
## February 24, 2025
Change
### cos-109-17800-436-42
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.124](https://cos.googlesource.com/third_party/kernel/+/31a852343550ac6012872e47e53a4d2e8e2f4f13) | v24.0.9 | v1.7.24 | [See List](https://storage.googleapis.com/cos-tools/17800.436.42/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2024-57949 in the Linux kernel.
Security Fixed CVE-2024-9287 in dev-lang/python.
Change Updated app-admin/google-guest-configs to v20250207.00.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812276 -\> 812258
Security Fixed CVE-2024-56664 in the Linux kernel.
Security Fixed CVE-2024-57951 in the Linux kernel.
Security Fixed CVE-2024-13176 in dev-libs/openssl.
Security Fixed CVE-2025-0395 in sys-libs/glibc.
## February 18, 2025
Change
### cos-109-17800-436-37
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.124](https://cos.googlesource.com/third_party/kernel/+/35d0c2a788899c479eeeb355f9e2e7da0d33d5c3) | v24.0.9 | v1.7.24 | [See List](https://storage.googleapis.com/cos-tools/17800.436.37/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2025-0395 in sys-libs/glibc.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812276 -\> 812258
Security Fixed CVE-2024-9287 in dev-lang/python.
## February 12, 2025
Change
### cos-109-17800-436-33
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.124](https://cos.googlesource.com/third_party/kernel/+/6d837756c3d0b3b617c83468d345146a191adfeb) | v24.0.9 | v1.7.24 | [See List](https://storage.googleapis.com/cos-tools/17800.436.33/lakitu/gpu_driver_versions.textproto) |
Change Runtime sysctl changes:
- Changed: fs.file-max: 812272 -\> 812276
Change Added support for TPU v6 devices.
## February 10, 2025
Change
### cos-109-17800-436-32
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.124](https://cos.googlesource.com/third_party/kernel/+/6d837756c3d0b3b617c83468d345146a191adfeb) | v24.0.9 | v1.7.24 | [See List](https://storage.googleapis.com/cos-tools/17800.436.32/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2025-21683 in the Linux kernel.
Change Updated the default tag of the GPU driver supporting the NVIDIA H200 GPU device to 570.86.15.
Security Fixed CVE-2024-40945 in the Linux kernel.
Security Fixed CVE-2025-21669 in the Linux kernel.
Fixed Upgraded sys-apps/diffutils to v3.11.
Security Fixed CVE-2024-50047 in the Linux kernel.
Security Fixed CVE-2025-21665 in the Linux kernel.
Security Fixed CVE-2025-21671 in the Linux kernel.
Feature Updated cos-gpu-installer to v2.4.7: Added Support for NVIDIA B200 GPU.
Security Fixed CVE-2024-50014 in the Linux kernel.
Security Fixed CVE-2025-0840 in binutils.
Change Updated Konlet to v0.13.4.
Feature Support for NVIDIA B200 GPU -- Added support for the R570 driver series, including version 570.86.15. This version has been assigned the latest, default, and R570 tags.
Security Fixed CVE-2024-50304 in the Linux kernel.
Security Fixed CVE-2025-21667 in the Linux kernel.
Security Fixed CVE-2024-49994 in the Linux kernel.
Security Fixed CVE-2025-21666 in the Linux kernel.
Security Fixed CVE-2025-21631 in the Linux kernel.
## February 03, 2025
Change
### cos-109-17800-436-19
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.124](https://cos.googlesource.com/third_party/kernel/+/c68ebdfb3a884785c3070db4a6a6b78f4d5baa03) | v24.0.9 | v1.7.24 | [See List](https://storage.googleapis.com/cos-tools/17800.436.19/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2024-53124 in the Linux kernel.
Security Fixed KCTF-bc50835 in the Linux kernel.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812276 -\> 812300
Security Fixed CVE-2024-53170 in the Linux kernel.
Security Fixed CVE-2024-40896 in libxml2.
Feature Added NVIDIA GPU driver's R570 branch. Updated the LATEST GPU driver label to version 570.86.15.
## January 27, 2025
Change
### cos-109-17800-436-14
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.124](https://cos.googlesource.com/third_party/kernel/+/e9c242e034a9c9cbde8ec42e6dc941cf8e4e27a5) | v24.0.9 | v1.7.24 | [See List](https://storage.googleapis.com/cos-tools/17800.436.14/lakitu/gpu_driver_versions.textproto) |
Change Runtime sysctl changes:
- Changed: fs.file-max: 812258 -\> 812276
Feature Added NVIDIA GPU drivers R565 branch - Update R565, latest driver to v565.57.01.
Security Fixed KCTF-8ea6073 and CVE-2024-50164 in the Linux kernel.
Security Upgraded dev-go/crypto to v0.31.0. This fixes CVE-2024-45337.
Security Fixed CVE-2024-49926 in the Linux kernel.
Fixed Upgraded sys-apps/file to v5.46-r2.
Security Update NVIDIA GPU drivers to v535.230.02 for default/R535
and v550.144.03 for R550 for all GPUs. This resolves
CVE-2024-53869, CVE-2024-0150, CVE-2024-0149, CVE-2024-0147 and CVE-2024-0131.
Security Fixed CVE-2024-45306 and CVE-2024-47814 in vim-core.
Security Fixed CVE-2024-45306 and CVE-2024-47814 in vim.
Security Fixed CVE-2024-53128 in the Linux kernel.
## January 17, 2025
Change
### cos-109-17800-436-4
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.124](https://cos.googlesource.com/third_party/kernel/+/0b0e4f165e43daca51e046597e5cd52783f2caca) | v24.0.9 | v1.7.24 | [See List](https://storage.googleapis.com/cos-tools/17800.436.4/lakitu/gpu_driver_versions.textproto) |
Security Fixed KCTF-35f56c5 in the Linux kernel.
Security Fixed CVE-2024-56658 in the Linux kernel.
Security Fixed CVE-2024-50146 in the Linux kernel.
Security Fixed CVE-2024-56675 in the Linux kernel.
Feature Added NVIDIA GPU drivers R560 branch. Updates both the LATEST and R560 GPU driver label to v560.35.03.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812257 -\> 812258
Security Fixed CVE-2024-56756 in the Linux kernel.
Security Fixed CVE-2024-56672 in the Linux kernel.
Announcement This is an [LTS Refresh release](https://docs.cloud.google.com/container-optimized-os/docs/concepts/versioning#lts_refresh_releases).
Security Upgraded rsync to version 3.3.0-r2. This fixes CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087, CVE-2024-12088, and CVE-2024-12747.
Security Fixed CVE-2024-56720 in the Linux kernel.
Security Fixed CVE-2024-56755 in the Linux kernel.
Security Fixed CVE-2024-56783 in the Linux kernel.
## January 16, 2025
Change
### cos-109-17800-372-99
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.112](https://cos.googlesource.com/third_party/kernel/+/d09bcf996f5a6550b9f52e55a73218ee71ae9e1a) | v24.0.9 | v1.7.24 | [See List](https://storage.googleapis.com/cos-tools/17800.372.99/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2024-53052 in the Linux kernel.
Security Fixed CVE-2024-53096 in the Linux kernel.
Security Fixed CVE-2024-56780 in the Linux kernel.
Security Fixed CVE-2024-53146 in the Linux kernel.
Security Fixed CVE-2024-56606 in the Linux kernel.
Security Fixed CVE-2024-56688 in the Linux kernel.
Security Fixed CVE-2024-56614 in the Linux kernel.
Security Fixed CVE-2024-56745 in the Linux kernel.
Security Fixed CVE-2024-53151 in the Linux kernel.
Change Upgraded nvidia-container-toolkit to v1.17.3.
Security Fixed CVE-2024-56739 in the Linux kernel.
Security Fixed CVE-2024-56694 in the Linux kernel.
Security Fixed CVE-2024-53093 in the Linux kernel.
Security Fixed CVE-2024-56763 in the Linux kernel.
Fixed Upgraded sys-apps/file to v5.46-r1.
## January 06, 2025
Change
### cos-109-17800-372-87
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.112](https://cos.googlesource.com/third_party/kernel/+/d4e29870bc875b8f2b5742beab13007b71f2d68b) | v24.0.9 | v1.7.24 | [See List](https://storage.googleapis.com/cos-tools/17800.372.87/lakitu/gpu_driver_versions.textproto) |
Security Fixed KCTF-f8d4bc4 in the Linux kernel.
Security Fixed KCTF-5eb7de8 in the Linux kernel.
Security Fixed CVE-2024-53099 in the Linux kernel.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812261 -\> 812257
## January 02, 2025
Change
### cos-109-17800-372-84
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.112](https://cos.googlesource.com/third_party/kernel/+/78b75926d499bea4a9cc1328e16fe044ee727a8a) | v24.0.9 | v1.7.24 | [See List](https://storage.googleapis.com/cos-tools/17800.372.84/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2024-50186 in the Linux kernel.
Security Fixed CVE-2024-53140 in the Linux kernel.
Security Fixed CVE-2024-53136 in the Linux kernel.
Security Fixed CVE-2024-50256 in the Linux kernel.
Security Fixed CVE-2024-47745 in the Linux kernel.
Security Fixed CVE-2024-53119 in the Linux kernel.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812271 -\> 812261
Change Upgraded sys-apps/file to v5.46.
Security Fixed CVE-2024-50055 in the Linux kernel.
Security Fixed CVE-2024-49861 in the Linux kernel.
Security Fixed CVE-2024-50191 in the Linux kernel.
Security Fixed CVE-2024-53113 in the Linux kernel.
Fixed Disabled CONFIG_DEBUG_PREEMPT in the Linux kernel. This
should improve performance for some workloads.
Security Fixed CVE-2024-49996 in the Linux kernel.
Security Fixed CVE-2024-50194 in the linux kernel.
Security Upgraded nvidia-container-toolkit to v1.17.0. This fixes CVE-2024-0134.
Security Fixed CVE-2024-53135 in the Linux kernel.
Security Fixed CVE-2024-53121 in the Linux kernel.
## December 16, 2024
Change
### cos-109-17800-372-71
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.112](https://cos.googlesource.com/third_party/kernel/+/af9e0d14b3bab9a3e734fe4cbf8eb2f84a8f767e) | v24.0.9 | v1.7.24 | [See List](https://storage.googleapis.com/cos-tools/17800.372.71/lakitu/gpu_driver_versions.textproto) |
Change Updated app-admin/google-guest-configs to v20241205.00.
## December 09, 2024
Change
### cos-109-17800-372-69
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.112](https://cos.googlesource.com/third_party/kernel/+/af9e0d14b3bab9a3e734fe4cbf8eb2f84a8f767e) | v24.0.9 | v1.7.24 | [See List](https://storage.googleapis.com/cos-tools/17800.372.69/lakitu/gpu_driver_versions.textproto) |
Change Runtime sysctl changes:
- Changed: fs.file-max: 812253 -\> 812265
Feature Upgraded cos-gpu-installer to v2.4.6: Support NVIDIA_H200 GPU in cos-gpu-installer
Security Fixed CVE-2024-50278 in the Linux kernel.
Feature Support NVIDIA_H200 GPU - Added support for the R560 series, including driver versions 560.35.03. Added support for the R550 series, including driver versions 550.127.05 and 550.90.12. Assigned the latest, default, and R560 tags to driver version 560.35.03. Assigned the R550 tag to driver version 550.127.05.
## December 04, 2024
Change
### cos-109-17800-372-64
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.112](https://cos.googlesource.com/third_party/kernel/+/d094914bf2ca33138857d5042c7ffd2450803faf) | v24.0.9 | v1.7.24 | [See List](https://storage.googleapis.com/cos-tools/17800.372.64/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2024-50141 in the Linux kernel.
Security Fixed CVE-2024-50195 in the Linux kernel.
Security Fixed CVE-2024-53066 in the Linux kernel.
Security Fixed CVE-2024-50151 in the Linux kernel.
Security Fixed CVE-2024-50143 in the Linux kernel.
Security Fixed CVE-2024-53082 in the Linux kernel.
Security Fixed CVE-2024-50272 in the Linux kernel.
Security Fixed CVE-2024-49952 in the Linux kernel.
Security Fixed CVE-2024-50153 in the Linux kernel.
Security Fixed CVE-2024-53042 in the Linux kernel.
Security Fixed CVE-2024-50257 in the Linux kernel.
Security Updated net-misc/curl to v8.11.0. This fixes CVE-2024-9681.
Added duphandle-init-netrc.patch, netrc-large-file.patch, setopt-http_content_decoding.patch to fix regression issues in curl v8.11.0.
Security Fixed CVE-2024-50101 in the Linux kernel.
Security Fixed CVE-2024-50271 in the Linux kernel.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812261 -\> 812253
Change Updated app-admin/google-guest-configs to 20241121.00. This
enables intent based NIC naming scheme.
Change Upgraded app-shells/dash to v0.5.12-r1.
Security Fixed CVE-2024-50036 in the Linux kernel.
Security Fixed CVE-2024-50099 in the Linux kernel.
Security Fixed CVE-2024-50142 in the Linux kernel.
Security Fixed KCTF-6ca5753 in the Linux kernel.
Security Fixed CVE-2024-50228 in the Linux kernel.
Change Upgraded sys-apps/makedumpfile to v1.7.6.
Security Fixed CVE-2024-53054 in the Linux kernel.
Security Fixed CVE-2024-49927 in the Linux kernel.
Security Fixed CVE-2024-50279 in the Linux kernel.
Security Fixed CVE-2024-50095 in the Linux kernel.
Security Fixed CVE-2024-49949 in the Linux kernel.
Security Fixed CVE-2024-50072 in the Linux kernel.
Change Upgraded sys-process/lsof to v4.99.4.
Security Fixed CVE-2024-49878 in the Linux kernel.
Change Upgraded sys-apps/less to v668.
Security Fixed CVE-2024-49946 in the Linux kernel.
Fixed Upgraded cos-gpu-installer to v2.4.4. This fixes an issue where GPU drivers that only have two numeric version components could not be loaded.
Security Fixed CVE-2024-50147 in the Linux kernel.
Security Fixed CVE-2024-50163 in the Linux kernel.
Security Fixed CVE-2024-50262 in the Linux kernel.
Security Fixed CVE-2024-50046 in the Linux kernel.
Security Fixed CVE-2024-50192 in the Linux kernel.
Security Fixed CVE-2024-50154 in the Linux kernel.
Security Fixed CVE-2024-50060 in the Linux kernel.
Security Fixed CVE-2024-49948 in the Linux kernel.
Security Fixed CVE-2024-50162 in the Linux kernel.
Security Fixed CVE-2024-50251 in the Linux kernel.
Change Upgraded containerd from 1.7.23 to 1.7.24.
## November 18, 2024
Change
### cos-109-17800-372-45
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.112](https://cos.googlesource.com/third_party/kernel/+/38820b733db44e76c5909b4afbb9b8de83222711) | v24.0.9 | v1.7.23 | [See List](https://storage.googleapis.com/cos-tools/17800.372.45/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2024-50131 in the Linux kernel.
Security Fixed CVE-2024-50110 in the Linux kernel.
Security Fixed CVE-2024-50138 in the Linux kernel.
Security Fixed CVE-2024-49954 in the Linux kernel.
Security Fixed CVE-2024-50010 in the Linux kernel.
Security Fixed CVE-2024-49959 in the Linux kernel.
Security Fixed CVE-2024-50115 in the Linux kernel.
Security Fixed CVE-2024-45310 in app-containers/runc.
## November 11, 2024
Change
### cos-109-17800-372-38
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.112](https://cos.googlesource.com/third_party/kernel/+/9096efbe9994e186d5de1f601288e16a1a7a8755) | v24.0.9 | v1.7.23 | [See List](https://storage.googleapis.com/cos-tools/17800.372.38/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2024-50082 in the Linux kernel.
Security Fixed CVE-2024-50024 in the Linux kernel.
Security Fixed CVE-2024-50038 in the Linux kernel.
Security Fixed CVE-2024-50602 in dev-libs/expat.
Security Fixed KCTF-2e95c43 in the Linux kernel.
Security Fixed CVE-2024-50083 in the Linux kernel.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812248 -\> 812209
## November 06, 2024
Change
### cos-109-17800-372-31
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.112](https://cos.googlesource.com/third_party/kernel/+/3f5559ca7108972b92e2bb075ae6311932bf5f4b) | v24.0.9 | v1.7.23 | [See List](https://storage.googleapis.com/cos-tools/17800.372.31/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2024-47679 in the Linux kernel.
Security Updated NVIDIA GPU drivers to v535.216.01 for default/R535
and v550.127.05 for R550 for all GPUs. This resolves CVE-2024-0126.
Security Fixed CVE-2024-50015 in the Linux kernel.
Security Fixed CVE-2024-50000 in the Linux kernel.
Security Fixed CVE-2024-49936 in the Linux kernel.
Security Fixed CVE-2024-47743 in the Linux kernel.
Security Fixed CVE-2024-47710 in the Linux kernel.
Security Fixed CVE-2024-50033 in the Linux kernel.
Security Fixed CVE-2024-47705 in the Linux kernel.
Security Fixed CVE-2024-47728 in the Linux kernel.
Security Fixed CVE-2024-47739 in the Linux kernel.
Security Fixed CVE-2024-49993 in the Linux kernel.
Security Fixed CVE-2024-47707 in the Linux kernel.
Security Fixed CVE-2024-49881 in the Linux kernel.
Security Fixed CVE-2024-47684 in the Linux kernel.
Security Fixed CVE-2024-49889 in the Linux kernel.
Security Fixed CVE-2024-47734 in the Linux kernel.
Security Fixed CVE-2024-47701 in the Linux kernel.
Security Fixed CVE-2024-50019 in the Linux kernel.
Security Fixed CVE-2024-47727 in the Linux kernel.
Security Fixed CVE-2024-50001 in the Linux kernel.
Security Fixed CVE-2024-49978 in the Linux kernel.
Security Fixed CVE-2024-50035 in the Linux kernel.
Security Fixed CVE-2024-47682 in the Linux kernel.
Security Fixed CVE-2024-49967 in the Linux kernel.
Security Fixed CVE-2024-49858 in the Linux kernel.
Security Fixed CVE-2024-50039 in the Linux kernel.
Security Fixed CVE-2024-49875 in the Linux kernel.
Security Fixed CVE-2024-47692 in the Linux kernel.
Security Fixed CVE-2024-47696 in the Linux kernel.
Security Fixed CVE-2024-50045 in the Linux kernel.
Security Fixed CVE-2024-50002 in the Linux kernel.
Security Fixed CVE-2024-49884 in the Linux kernel.
Security Fixed CVE-2024-47742 in the Linux kernel.
Feature Added NVIDIA GPU drivers R560 branch - Update R560, latest driver to v560.35.03.
Security Fixed CVE-2024-49975 in the Linux kernel.
Security Fixed CVE-2024-49983 in the Linux kernel.
Security Fixed CVE-2024-49860 in the Linux kernel.
Security Fixed CVE-2024-49870 in the Linux kernel.
Security Fixed CVE-2024-49851 in the Linux kernel.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812253 -\> 812248
Security Fixed CVE-2024-47678 in the Linux kernel.
Security Fixed CVE-2024-49883 in the Linux kernel.
Security Fixed CVE-2024-49850 in the Linux kernel.
Security Fixed CVE-2024-47693 in the Linux kernel.
Security Fixed CVE-2024-50006 in the Linux kernel.
Security Fixed CVE-2024-47737 in the Linux kernel.
Security Fixed CVE-2024-47706 in the Linux kernel.
## October 28, 2024
Change
### cos-109-17800-372-12
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.112](https://cos.googlesource.com/third_party/kernel/+/240904489934041d082028d05a64ff8436dd7e5b) | v24.0.9 | v1.7.23 | [See List](https://storage.googleapis.com/cos-tools/17800.372.12/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2024-47685 in the Linux kernel.
Security Fixed CVE-2024-38632 in the Linux kernel.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812259 -\> 812253
## October 24, 2024
Change
### cos-109-17800-372-7
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.112](https://cos.googlesource.com/third_party/kernel/+/70429126fbd15e55a19dfd04f1f6582e6c9c4aa5) | v24.0.9 | v1.7.23 | [See List](https://storage.googleapis.com/cos-tools/17800.372.7/lakitu/gpu_driver_versions.textproto) |
Change Upgraded app-containers/docker-credential-helpers to v0.8.2.
Change Upgraded app-arch/lz4 to v1.10.0-r1.
Change Upgraded app-containers/containerd, app-containers/containerd-test to v1.7.20.
Change Upgraded app-containers/cni-plugins to v1.5.1.
Change Upgraded dev-python/jinja to v3.1.4.
Change Upgraded sys-libs/zlib to v1.3.1-r1.
Change Upgraded app-containers/docker-credential-gcr to v2.1.23.
Change Upgraded net-fs/cifs-utils to v7.0-r1, Upgraded sys-libs/talloc to v2.4.2.
Feature Updated R550, latest driver to v550.90.12.
Change Upgraded sys-libs/libcap to v2.70.
Announcement This is an [LTS Refresh release.](https://docs.cloud.google.com/container-optimized-os/docs/concepts/versioning#lts_refresh_releases)
Change Upgraded app-containers/containerd to 1.7.23.
Change Upgraded dev-lang/python-exec to v2.4.10.
Change Upgraded dev-python/netifaces to v0.11.0-r2.
Change Upgraded dev-python/jsonpatch to v1.33.
Change Upgraded sys-fs/xfsprogs to v6.8.0.
Change Upgraded sys-libs/libcap-ng to v0.8.5.
Security Upgraded app-arch/libarchive to version 3.7.6. This fixed CVE-2024-48957, CVE-2024-48958.
Change Upgraded sys-apps/acl to v2.3.2-r1.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812253 -\> 812259
Change Upgraded dev-python/pyserial to v3.5-r2.
Change Upgraded app-arch/pigz to v2.8.
Change Upgraded net-libs/libtirpc to v1.3.4-r3.
Change Upgraded app-admin/google-guest-configs to v20240725.00.
Change Upgraded sys-libs/gdbm to v1.24.
Change Upgraded dev-python/six to v1.16.0-r1.
Change Upgraded dev-python/configobj to v5.0.8.
Change Upgraded dev-libs/nss to v3.103.
Change Upgraded app-arch/unzip to v6.0_p27-r1.
Change Upgraded dev-db/sqlite to v3.46.0.
## October 21, 2024
Change
### cos-109-17800-309-93
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.100](https://cos.googlesource.com/third_party/kernel/+/019517d677a54d6d58ec1d6ea75b5b520e3fa854) | v24.0.9 | v1.7.22 | [See List](https://storage.googleapis.com/cos-tools/17800.309.93/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2024-43892 in the Linux kernel.
Security Fixed CVE-2024-44958 in the Linux kernel.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812261 -\> 812253
## October 14, 2024
Change
### cos-109-17800-309-88
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.100](https://cos.googlesource.com/third_party/kernel/+/b5d354212e320019e8821ae22bb0ee28e781afe1) | v24.0.9 | v1.7.22 | [See List](https://storage.googleapis.com/cos-tools/17800.309.88/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2024-43853 in the Linux kernel.
Security Fixed CVE-2024-44965 in the Linux kernel.
Security Fixed CVE-2024-46855 in the Linux kernel.
Security Fixed CVE-2024-46848 in the Linux kernel.
Security Fixed CVE-2024-44970 in the Linux kernel.
Security Fixed CVE-2024-46829 in the Linux kernel.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812257 -\> 812261
Security Fixed CVE-2024-45003 in the Linux kernel.
## October 07, 2024
Change
### cos-109-17800-309-84
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.100](https://cos.googlesource.com/third_party/kernel/+/6aa881a5f08422f7d341a29928f8764890429304) | v24.0.9 | v1.7.22 | [See List](https://storage.googleapis.com/cos-tools/17800.309.84/lakitu/gpu_driver_versions.textproto) |
Security Upgraded nvidia-container-toolkit to v1.16.2. Fixed CVE-2024-0132 and CVE-2024-0133.
Security Fixed CVE-2024-46744 in the Linux kernel.
Fixed Updated the GPU installer to v2.4.1.
Security Fixed CVE-2024-46750 in the Linux kernel.
Feature Update R535, default driver to v535.183.06.
## September 30, 2024
Change
### cos-109-17800-309-77
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.100](https://cos.googlesource.com/third_party/kernel/+/c07e619ff589061342e45107e65414c6bb6a9743) | v24.0.9 | v1.7.22 | [See List](https://storage.googleapis.com/cos-tools/17800.309.77/lakitu/gpu_driver_versions.textproto) |
Feature Fixed A3 Edge VM names in google guest agent configs.
Security Fixed CVE-2024-46679 in the Linux kernel.
Security Fixed CVE-2024-46743 in the Linux kernel
Fixed Updated cos-gpu-installer to v2.4.0. It identifies GPU drivers before installation.
Security Fixed CVE-2024-46800 in the Linux kernel
Change Upgraded app-admin/google-guest-configs to v20240725.00.
Security Fixed CVE-2024-46763 in the Linux kernel.
Security Fixed CVE-2024-46738 in the Linux kernel
Security Fixed CVE-2024-46721 in the Linux kernel
## September 23, 2024
Change
### cos-109-17800-309-69
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.100](https://cos.googlesource.com/third_party/kernel/+/995195af489d9ba9b21976e058cc51fa802db9f3) | v24.0.9 | v1.7.22 | [See List](https://storage.googleapis.com/cos-tools/17800.309.69/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2024-45018 in the Linux kernel
Security Fixed CVE-2024-43817 in the Linux kernel
Security Fixed CVE-2024-45025 in the Linux kernel
Security Fixed CVE-2024-44940 in the Linux kernel
Security Fixed CVE-2024-44947 in the Linux kernel
Security Fixed CVE-2024-45022 in the Linux kernel
Change Runtime sysctl changes:
- Changed: fs.file-max: 812257 -\> 812253
Security Fixed CVE-2024-45021 in the Linux kernel
Security Fixed CVE-2024-41012 in the Linux kernel
Security Fixed CVE-2024-46686 in the Linux kernel
Fixed Updated net-misc/curl to 8.10.0.
## September 16, 2024
Change
### cos-109-17800-309-59
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.100](https://cos.googlesource.com/third_party/kernel/+/cfa34288bca0e47eef0237d278e843081d254680) | v24.0.9 | v1.7.22 | [See List](https://storage.googleapis.com/cos-tools/17800.309.59/lakitu/gpu_driver_versions.textproto) |
Security Fixed CVE-2024-44983 in the Linux kernel
Security Fixed CVE-2024-44986 in the Linux kernel
Security Fixed CVE-2024-44990 in the Linux kernel
Change Updated app-containers/containerd to v1.7.22.
Security Fixed CVE-2024-44944 in the Linux kernel
Security Fixed CVE-2024-44989 in the Linux kernel
Security Fixed CVE-2024-43893 in the Linux kernel
Fixed Updated dev-lang/python to 3.8.19_p1. This fixes
Security Fixed CVE-2024-42307 in the Linux kernel
Security Fixed CVE-2024-43871 in the Linux kernel
Security Fixed CVE-2024-43882 in the Linux kernel
Security Fixed CVE-2024-43914 in the Linux kernel
Security Fixed CVE-2024-6232 in dev-lang/python.
Security Updated dev-libs/expat to v2.6.3. This fixed CVE-2024-45492, CVE-2024-45490, CVE-2024-45491.
Security Fixed CVE-2024-43873 in the Linux kernel
Security Fixed CVE-2024-7592 in dev-lang/python.
Security Fixed CVE-2024-45000 in the Linux kernel
Security Fixed CVE-2024-42302 in the Linux kernel
Security Fixed CVE-2024-6119 in net-libs/openssl.
Security Fixed CVE-2023-27043 in dev-lang/python.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812274 -\> 812257
Security Fixed CVE-2024-44985 in the Linux kernel
## September 09, 2024
Change
### cos-109-17800-309-46
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.100](https://cos.googlesource.com/third_party/kernel/+/3561c75e88c8db2e5bed27a0e591d93b17c4f92b) | v24.0.9 | v1.7.21 | [See List](https://storage.googleapis.com/cos-tools/17800.309.46/lakitu/gpu_driver_versions.textproto) |
Change Updated app-containers/containerd to 1.7.21.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812248 -\> 812274
Security Fixes CVE-2024-43856 in the Linux kernel.
Security Fixes CVE-2024-43889 in the Linux kernel.
Security Fixes CVE-2024-42316 in the Linux kernel
Security Fixes CVE-2024-44934 in the Linux kernel.
Security Fixes CVE-2023-7256 in net-libs/libpcap.
Change Upgraded app-containers/containerd to v1.7.20, Upgraded app-containers/containerd-test to v1.7.20.
Security Fixes CVE-2024-41076 in the Linux kernel.
Security Fixes CVE-2024-43828 in the Linux kernel.
Security Fixes CVE-2024-44987 in the Linux kernel.
Security Fixes CVE-2024-42302 in the Linux kernel.
Security Fixes CVE-2024-41057 in the linux kernel.
Security Fixes CVE-2024-41073 in the Linux kernel.
Security Fixes CVE-2024-43855 in the Linux kernel.
Security Fixes CVE-2024-43837 in the Linux kernel.
## September 03, 2024
Change
### cos-109-17800-309-33
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.100](https://cos.googlesource.com/third_party/kernel/+/46865618af6d18cb5b4a19f5df65fa9c9c17c4ac) | v24.0.9 | v1.7.19 | [See List](https://storage.googleapis.com/cos-tools/17800.309.33/lakitu/gpu_driver_versions.textproto) |
Change Runtime sysctl changes:
- Changed: fs.file-max: 812259 -\> 812248
Security Fixed KCTF-c07ff85 in the Linux kernel.
Security Updated app-editors/vim, app-editors/vim-core to version 9.1.0686. This fixed CVE-2023-46246, CVE-2024-41957, CVE-2024-41965.
Security Fixed CVE-2024-42270 in the Linux kernel.
Security Fixed CVE-2024-41098 in the Linux kernel.
Security Fixed CVE-2024-41058 in the Linux kernel.
Security Fixed CVE-2024-43854 in the Linux kernel.
Security Fixed CVE-2024-42285 in the Linux kernel.
Security Fixed CVE-2024-42268 in the Linux kernel.
Security Fixed CVE-2024-42269 in the Linux kernel.
Security Fixed CVE-2024-42283 in the Linux kernel.
Security Fixed CVE-2024-37370, CVE-2024-37371 in app-crypt/mit-krb5.
Security Fixed CVE-2023-52889 in the Linux kernel.
## August 26, 2024
Change
### cos-109-17800-309-24
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.100](https://cos.googlesource.com/third_party/kernel/+/bdff6a78b7b6a89a61d999867b875e85876f18bd) | v24.0.9 | v1.7.19 | [See List](https://storage.googleapis.com/cos-tools/17800.309.24/lakitu/gpu_driver_versions.textproto) |
Fixed Updated google-osconfig-agent to v20240822.00.
## August 20, 2024
Change
### cos-109-17800-309-20
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.100](https://cos.googlesource.com/third_party/kernel/+/bdff6a78b7b6a89a61d999867b875e85876f18bd) | v24.0.9 | v1.7.19 | [See List](https://storage.googleapis.com/cos-tools/17800.309.20/lakitu/gpu_driver_versions.textproto) |
Change Runtime sysctl changes:
- Added: vm.unprivileged_userfaultfd: 0
- Changed: fs.file-max: 812257 -\> 812229
- Changed: net.ipv4.tcp_rto_min_us: 200000 -\> 5000
Security Downgraded setuptools to v65.6.3. Cherry-picked upstream
fix for CVE-2024-6345.
Security Fixed CVE-2024-6602 in dev-libs/nss.
## August 12, 2024
Change
### cos-109-17800-309-13
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.100](https://cos.googlesource.com/third_party/kernel/+/3e0971e1551e88a5a9e615c239f034fd9fd8a423) | v24.0.9 | v1.7.19 | v535.183.01(default),v550.90.07(latest),v470.256.02(R470 for compatibility with K80 GPUs) |
Change Upgraded sys-apps/less to v661.
Security Fixed CVE-2024-39472 in the Linux kernel.
Fixed Downgraded sys-apps/ethtool to v6.3.
Security Updated dev-libs/openssl to version 3.0.14 and added patch for CVE-2024-5535. This fixed CVE-2024-2511, CVE-2024-4603, CVE-2024-4741, CVE-2024-5535.
Security Updated net-misc/curl to version 8.9.1. This fixed CVE-2024-7264.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812261 -\> 812257
## August 06, 2024
Change
### cos-109-17800-309-7
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.100](https://cos.googlesource.com/third_party/kernel/+/503e802054ba6c747539b24df8c3df73ddb3f9cf) | v24.0.9 | v1.7.19 | v535.183.01(default),v550.90.07(latest),v470.256.02(R470 for compatibility with K80 GPUs) |
Announcement This is an [LTS Refresh release.](https://docs.cloud.google.com/container-optimized-os/docs/concepts/versioning#lts_refresh_releases)
Change Upgraded app-containers/containerd to 1.7.19.
Security Fixed CVE-2021-36084, CVE-2021-36085, CVE-2021-36086, CVE-2021-36087 in sys-libs/libsepol.
Change Upgraded net-misc/rsync to v3.2.7-r5.
Feature Upgraded cos-gpu-installer to v2.3.5 - Improved error messaging for incompatible GPU driver input.
Change Upgraded sys-auth/pambase to v20240128.
Change Upgraded app-containers/cni-plugins to v1.4.1.
Change Upgraded app-admin/google-guest-configs to 20240607.00.
Change Upgraded app-containers/docker-credential-helpers to v0.8.1.
Security Upgraded curl to v8.9.0. This fixes CVE-2024-6197.
Security Upgraded dev-python/setuptools to v70.3.0. This fixes CVE-2024-6345.
Change Upgraded app-containers/docker-credential-gcr to v2.1.22.
Feature Removed dev-go/grpc.
Feature Removed crash-reporter KVM support.
Change Runtime sysctl changes:
- Added: net.core.mem_pcpu_rsv: 256
Change Upgraded app-containers/docker, app-containers/docker-test, app-containers/docker-cli to v24.0.9.
Feature Enabled the feature to utilize the `gpu_driver_versions proto` file for controlling the specific GPU driver version to be installed for each GPU type.
## July 30, 2024
Change
### cos-109-17800-218-88
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.85](https://cos.googlesource.com/third_party/kernel/+/f7149027e393d12f0cd1209b37b45c360be1bd7c) | v24.0.9 | v1.7.15 | v535.183.01(default),v550.90.07(latest),v470.256.02(R470 for compatibility with K80 GPUs) |
Security Fixed CVE-2024-36891 in the Linux kernel.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812285 -\> 812261
Security Upgraded app-arch/libarchive to version 3.7.4. This fixes CVE-2024-26256.
Security Fixed CVE-2024-39894.
## July 22, 2024
Change
### cos-109-17800-218-83
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.85](https://cos.googlesource.com/third_party/kernel/+/3f9ee50d8bc200e1d89b46183d2f66759f3c7970) | v24.0.9 | v1.7.15 | v535.183.01(default),v550.90.07(latest),v470.256.02(R470 for compatibility with K80 GPUs) |
Fixed Disable NVIDIA persistence mode with -no-verify flag
Security Fixed CVE-2024-39482 in the Linux kernel
Security Fixed CVE-2024-38662 in the Linux kernel
Security Fixed CVE-2024-39476 in the Linux kernel
Security Fixed CVE-2024-39474 in the Linux kernel
## July 15, 2024
Change
### cos-109-17800-218-76
|---|---|---|---|
| Kernel | Docker | Containerd | [GPU Drivers](https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus) |
| [COS-6.1.85](https://cos.googlesource.com/third_party/kernel/+/9f3648e7bd8acd6bd79a03142fdfe78cfafca830) | v24.0.9 | v1.7.15 | v535.183.01(default),v550.90.07(latest),v470.256.02(R470 for compatibility with K80 GPUs) |
Change Upgraded app-admin/logrotate to v3.22.0.
Change Upgraded sys-apps/file to v5.45-r4.
Change Upgraded net-misc/curl to v8.8.0-r1.
Feature Updated cos-gpu-installer to v2.3.5 - Improved error messaging for incompatible GPU driver input.
Change Upgraded sys-apps/attr to v2.5.2-r1.
Security Updated net-misc/wget to version 1.24.5. This fixed CVE-2024-38428.
Change Upgraded app-editors/vim to v9.1.0470, Upgraded app-editors/vim-core to v9.1.0470.
Security Fixed CVE-2024-36978 in the Linux kernel.
Change Upgraded sys-apps/dmidecode to v3.6.
Change Upgraded dev-libs/libusb to v1.0.27-r1.
Change Upgraded sys-apps/sed to v4.9-r1.
Change Upgraded net-dns/libidn2 to v2.3.7.
Change Upgraded sys-apps/ethtool to v6.9.
Change Upgraded sys-process/lsof to v4.99.3.
Change Upgraded sys-apps/grep to v3.11-r1.
Change Upgraded net-misc/rsync to v3.2.7-r4.
Change Upgraded sys-block/thin-provisioning-tools to v0.9.0-r4.
Feature Added the package revision number to the SSH banner in
net-misc/openssh.
## July 01, 2024
Change
### cos-109-17800-218-69
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.85](https://cos.googlesource.com/third_party/kernel/+/1a8b1dfd94df6f28729aca0565343c0a9f6906ee) | v24.0.9 | v1.7.15 | v535.183.01(default),v550.90.07(latest),v470.256.02(R470 for compatibility with K80 GPUs) |
Change Runtime sysctl changes:
- Added: net.ipv4.tcp_rto_min_us: 200000
- Changed: fs.file-max: 812261 -\> 812270
Security Fixed CVE-2024-35195 in dev-python/requests.
Security Fixed CVE-2024-36901 in the Linux kernel.
Security Fixed CVE-2024-6387 in net-misc/openssh.
## June 24, 2024
Change
### cos-109-17800-218-62
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.85](https://cos.googlesource.com/third_party/kernel/+/227a01f3a457447f7564325a8eac556cf195d7ce) | v24.0.9 | v1.7.15 | v535.183.01(default),v550.90.07(latest),v470.256.02(R470 for compatibility with K80 GPUs) |
Change Runtime sysctl changes:
- Changed: fs.file-max: 812259 -\> 812261
Fixed Fixed a crash in the Linux kernel.
## June 18, 2024
Change
### cos-109-17800-218-61
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.85](https://cos.googlesource.com/third_party/kernel/+/8b697d60d9d6caf9eb436868efc5e188d13b9766) | v24.0.9 | v1.7.15 | v535.183.01(default),v550.90.07(latest),v470.256.02(R470 for compatibility with K80 GPUs) |
Security Update R550, latest driver to v550.90.07.This fixes CVE-2024-0090, CVE-2024-0091, CVE-2024-0092
Update R535, default driver to v535.183.01.This fixes CVE-2024-0090, CVE-2024-0092
Update R470 to v470.256.02.This fixes CVE-2024-0090, CVE-2024-0092
Security Fixes CVE-2024-36938 in the Linux kernel.
Security Upgraded app-arch/lz4 to 1.9.4. Fixes CVE-2021-3520.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812271 -\> 812259
Security Fixes CVE-2024-36902 in the Linux kernel.
## June 11, 2024
Fixed Fixed a performance issue observed in some Postgres databases.
Change
### cos-109-17800-218-52
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.85](https://cos.googlesource.com/third_party/kernel/+/d05a4653cc1aab64f3ff90e74ac18b1b12b695ad) | v24.0.9 | v1.7.15 | v535.161.08(default),v550.54.15(latest),v470.239.06(R470 for compatibility with K80 GPUs) |
Change Runtime sysctl changes:
- Changed: fs.file-max: 812253 -\> 812271
Security Updated cos-gpu-installer to v2.3.4 - This fixes CVEs: CVE-2023-29402, CVE-2023-29405, CVE-2023-29404, CVE-2023-24540, CVE-2023-24538, CVE-2022-41721, GHSA-m425-mq94-257g, CVE-2022-41715, CVE-2022-30633, CVE-2022-41724, CVE-2022-2880, CVE-2022-30631, CVE-2021-29923, CVE-2022-24675, CVE-2022-30580, CVE-2022-41723, CVE-2023-24534, CVE-2022-41725, CVE-2022-2879, CVE-2023-24539, CVE-2022-30635, CVE-2023-45285, CVE-2022-32149, CVE-2023-24537, CVE-2022-32189, CVE-2022-28131, CVE-2023-39323, CVE-2022-28327, CVE-2022-30630, CVE-2023-44487, CVE-2023-39325, CVE-2022-27664, CVE-2023-45287, CVE-2023-29400, CVE-2023-24536, CVE-2023-29403, CVE-2022-30632, CVE-2023-39318, CVE-2020-29511, CVE-2024-24786, CVE-2023-3978, CVE-2022-41717, CVE-2022-32148, CVE-2023-39326, CVE-2023-45288, CVE-2022-1962, CVE-2023-24532, CVE-2023-39319, CVE-2022-1705, CVE-2020-29509, CVE-2023-29406, CVE-2023-29409, CVE-2022-30629
## June 10, 2024
Change
### cos-109-17800-218-50
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.85](https://cos.googlesource.com/third_party/kernel/+/b51ef2ba98251fc7e36d96d274a1f26a898e4be1) | v24.0.9 | v1.7.15 | v535.161.08(default),v550.54.15(latest),v470.239.06(R470 for compatibility with K80 GPUs) |
Fixed Updated cos-gpu-installer to v2.3.3. This resolves potential synchronization issues and ensures proper cleanup of mounts in GPU driver installation directory configuration.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812257 -\> 812253
Security Fixed CVE-2024-26987, CVE-2024-27020, CVE-2024-27014, CVE-2024-27022, CVE-2024-27019 ,CVE-2024-27013, CVE-2024-36008, CVE-2024-27018 ,CVE-2024-27016 and CVE-2024-27015 in the Linux kernel
Fixed Fixed frequent restarts in fluent-bit stackdriver plugin.
## June 03, 2024
Change
### cos-109-17800-218-44
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.85](https://cos.googlesource.com/third_party/kernel/+/ef510c5527bffd26cd33ce8ba42320eb0ac0361b) | v24.0.9 | v1.7.15 | v535.161.08(default),v550.54.15(latest),v470.239.06(R470 for compatibility with K80 GPUs) |
Security Fixed CVE-2024-34459 in the libxml2 package.
Fixed Fixed a bug in auto update engine when confidential VMs are enabled.
Fixed Updated cos-gpu-installer to v2.3.2.
## May 28, 2024
Change
### cos-109-17800-218-37
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.85](https://cos.googlesource.com/third_party/kernel/+/38f9cd7eac467c63832369a206acda4a72dc2c1f) | v24.0.9 | v1.7.15 | v535.161.08(default),v550.54.15(latest),v470.239.06(R470 for compatibility with K80 GPUs) |
Security Fixed CVE-2024-21626 in `https://github.com/opencontainers/runc` in kubelet.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812597 -\> 812196
Feature Improved boot time on A3 machines by around 5 seconds.
Security Updated dev-vcs/git to v2.45.1. This resolves
CVE-2024-32002, CVE-2024-32020, CVE-2024-32465, CVE-2024-32004, CVE-2024-32021.
## May 20, 2024
Change
### cos-109-17800-218-32
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.85](https://cos.googlesource.com/third_party/kernel/+/41f76d6850fe6a7f1941074c81a84390f8f713b0) | v24.0.9 | v1.7.15 | v535.161.08(default),v550.54.15(latest),v470.239.06(R470 for compatibility with K80 GPUs) |
Change Upgraded sys-apps/less to v643-r2.
Change Updated cos-gpu-installer to v2.3.1.
Change Upgraded app-eselect/eselect-iptables to v20220320.
Change Upgraded sys-libs/timezone-data to v2024a-r1.
Change Upgraded app-editors/vim to v9.1.0366, Upgraded app-editors/vim-core to v9.1.0366.
## May 13, 2024
Change
### cos-109-17800-218-26
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.85](https://cos.googlesource.com/third_party/kernel/+/b53e4d6b6eddd40ed75aba7ba51a25346e65e674) | v24.0.9 | v1.7.15 | v535.161.08(default),v550.54.15(latest),v470.239.06(R470 for compatibility with K80 GPUs) |
Fixed Uprev GPU driver version to v470.239.06.
Security Fixed CVE-2024-26900 in the Linux kernel.
## May 06, 2024
Change
### cos-109-17800-218-20
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.85](https://cos.googlesource.com/third_party/kernel/+/e4710a2b15e0a2af35f81d4f034cb6472bb0a230) | v24.0.9 | v1.7.15 | v535.161.08(default),v550.54.15(latest),v470.239.06(R470 for compatibility with K80 GPUs) |
Security Fixed CVE-2023-32681 in dev-python/requests.
Security Updated net-dns/c-ares to v1.27. This fixed CVE-2024-25629.
Change Upgraded sys-apps/makedumpfile to v1.7.5.
Security Fixed CVE-2023-0687, CVE-2024-2961, CVE-2024-33599, CVE-2024-33600, CVE-2024-33601, CVE-2024-33602 in sys-libs/glibc.
Change Updated cos-gpu-installer to v2.3.0.
Change Upgraded app-admin/node-problem-detector to v0.8.18.
## April 30, 2024
Change
### cos-109-17800-218-14
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.85](https://cos.googlesource.com/third_party/kernel/+/c28e9f9f0c190b4d52bae66281111a7f682f8d4c) | v24.0.9 | v1.7.15 | v535.161.08(default),v550.54.15(latest),v470.239.06(R470 for compatibility with K80 GPUs) |
Announcement This is an [LTS Refresh release.](https://docs.cloud.google.com/container-optimized-os/docs/concepts/versioning#lts_refresh_releases)
Change Updated app-containers/containerd to v1.7.15.
Change Runtime sysctl changes:
- Changed: fs.file-max: 812605 -\> 812597
- Changed: kernel.threads-max: 63520 -\> 63519
- Changed: net.ipv4.tcp_mem: 94092 125456 188184 -\> 94089 125455 188178
- Changed: net.ipv4.udp_mem: 188184 250912 376368 -\> 188181 250911 376362
- Changed: user.max_cgroup_namespaces: 31760 -\> 31759
- Changed: user.max_ipc_namespaces: 31760 -\> 31759
- Changed: user.max_mnt_namespaces: 31760 -\> 31759
- Changed: user.max_net_namespaces: 31760 -\> 31759
- Changed: user.max_pid_namespaces: 31760 -\> 31759
- Changed: user.max_time_namespaces: 31760 -\> 31759
- Changed: user.max_user_namespaces: 31760 -\> 31759
- Changed: user.max_uts_namespaces: 31760 -\> 31759
Security Updated net-misc/curl to v8.7.1. This fixed CVE-2024-2004, CVE-2024-2379, CVE-2024-2398, CVE-2024-2466.
Security Fixed CVE-2023-4641 in sys-apps/shadow.
Security Fixed issues with the SRSO vulnerability mitigation (CVE-2023-20569). This fix might negatively impact the performance of your workloads on AMD machine types.
Security Fixed CVE-2024-26808 in the Linux kernel.
Security Fixed CVE-2023-50387, CVE-2023-50868, CVE-2023-7008 in sys-apps/systemd.
Security Updated dev-libs/expat to v2.6.2. This fixed CVE-2023-52425, CVE-2023-52426, CVE-2024-28757.
Feature Included nvidia plugin in sosreport.
Security Fixed CVE-2023-0767, CVE-2023-5388, CVE-2023-6135, CVE-2024-0743 in dev-libs/nss.
Security Updated dev-python/pyyaml to v6.0.1. This fixed CVE-2017-18342, CVE-2019-20477, CVE-2020-14343, CVE-2020-1747.
Security Fixed CVE-2024-26642,CVE-2024-26643 in the Linux kernel.
Feature Updated cos-gpu-installer to v2.1.11. Added major version specification for GPU driver installation.
Feature Set serial port baudrate to 115200.
Security Fixed CVE-2024-26642 in the Linux kernel.
Security Updated app-admin/sudo to v1.9.15_p5. This fixed CVE-2023-42465.
Security Updated dev-vcs/git to v2.44.0 This fixed CVE-2023-22490, CVE-2023-23946, CVE-2023-25652, CVE-2023-25815, CVE-2023-29007.
Security Fixed CVE-2024-3772 in dev-python/pydantic.
Security Fixed CVE-2024-28182 in net-libs/nghttp2.
## April 15, 2024
Change
### cos-109-17800-147-60
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.75](https://cos.googlesource.com/third_party/kernel/+/769c8003ee85ac5fd89aea375db5f7b58a1ebce2) | v24.0.9 | v1.7.13 | v535.161.08(default),v550.54.15(latest),v470.239.06(R470 for compatibility with K80 GPUs) |
Fixed Updated NVIDIA GPU drivers to v550.54.15.
Fixed a potential corruption when launching kernels on H100 GPUs, which is more likely to occur when the GPU is shared between multiple processes.
Fixed Updated NVIDIA GPU drivers to v535.161.08.
Fixed a potential corruption when launching kernels on H100 GPUs.
## April 01, 2024
Change
### cos-109-17800-147-54
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.75](https://cos.googlesource.com/third_party/kernel/+/769c8003ee85ac5fd89aea375db5f7b58a1ebce2) | v24.0.9 | v1.7.13 | v535.161.07(default),v550.54.14(latest),v470.239.06(R470 for compatibility with K80 GPUs) |
Fixed Fixed a bug in google-guest-agent service enablement.
Change Upgraded app-admin/node-problem-detector to v0.8.17.
Change Upgraded net-misc/chrony to v4.5.
Change Upgraded app-admin/fluent-bit to v1.9.10.
Security Fixed CVE-2024-26585 in the Linux kernel.
Change Upgraded localtoast to v1.1.7 and opted out of
logging-service-running benchmark by default for cis-level2.
Change Upgraded sys-apps/makedumpfile to v1.7.4.
Feature Added NVIDIA GPU drivers R550 branch and update latest to
550.54.14.
Change Updated app-containers/nvidia-container-toolkit to v1.14.6.
Security Fixed CVE-2024-26584 in the Linux kernel.
## March 27, 2024
Change
### cos-109-17800-147-41
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.75](https://cos.googlesource.com/third_party/kernel/+/3265654063acb9af7a134735e634af0a1bbabb93) | v24.0.9 | v1.7.13 | v535.161.07(default, latest),v470.239.06(R470 for compatibility with K80 GPUs) |
Security Fixed CVE-2024-26583 in the Linux kernel.
Security Fixed CVE-2023-52435 in the Linux kernel.
Security Fixed CVE-2023-52434 in the Linux kernel.
Security Fixed CVE-2024-26582 in the Linux kernel.
## March 20, 2024
Change
### cos-109-17800-147-38
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.75](https://cos.googlesource.com/third_party/kernel/+/ecc56f516dbf4935452425fc8f5b79bbaf067d6d) | v24.0.9 | v1.7.13 | v535.161.07(default, latest),v470.239.06(R470 for compatibility with K80 GPUs) |
Feature Added support for iSCSI targets and RAM block devices.
Security Updated app-editors/vim to 9.0.2167. This fixed CVE-2023-48231, CVE-2023-48232, CVE-2023-48233, CVE-2023-48234, CVE-2023-48235, CVE-2023-48236, CVE-2023-48237, CVE-2023-48706, CVE-2024-22667.
## March 11, 2024
Change
### cos-109-17800-147-33
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.75](https://cos.googlesource.com/third_party/kernel/+/d7b0d57ca7071d3e6567b3ce465c3c6bf24ed7a4) | v24.0.9 | v1.7.13 | v535.161.07(default, latest),v470.239.06(R470 for compatibility with K80 GPUs) |
Feature Updated cos-gpu-installer to v2.2.1. Fixed cached driver installation error with network disabled. Added force-fallback flag, major version specification for GPU driver installation and fixed ordering of kernel module loading for nvidia-modeset and nvidia-drm
Security Updated NVIDIA GPU drivers to v470.239.06 and v535.161.07. This fixes CVE-2024-0074, CVE-2024-0075 and CVE-2022-42265.
## March 06, 2024
Change
### cos-109-17800-147-28
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.75](https://cos.googlesource.com/third_party/kernel/+/d7b0d57ca7071d3e6567b3ce465c3c6bf24ed7a4) | v24.0.9 | v1.7.13 | v535.154.05 (default),v535.154.05(latest),v470.223.02(R470 for compatibility with K80 GPUs) |
Security Fixed CVE-2024-23851 in the Linux kernel.
## February 27, 2024
Change
### cos-109-17800-147-22
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.75](https://cos.googlesource.com/third_party/kernel/+/f394f12169e7ba0dc7770794ea623e255028cb93) | v24.0.9 | v1.7.13 | v535.154.05 (default),v535.154.05(latest),v470.223.02(R470 for compatibility with K80 GPUs) |
Security Upgraded Docker to v24.0.9. This fixes CVE-2024-24557.
Security Fixed CVE-2024-26581 in the Linux kernel.
Security Fixed CVE-2024-0684 in sys-apps/coreutils.
## February 20, 2024
Change
### cos-109-17800-147-15
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.75](https://cos.googlesource.com/third_party/kernel/+/f2325b62460b827790918512e220f6432411b9b1) | v24.0.5 | v1.7.13 | v535.154.05 (default),v535.154.05(latest),v470.223.02(R470 for compatibility with K80 GPUs) |
Change Updated app-containers/containerd to v1.7.13.
Security Updated dev-libs/libxml2 to v2.11.7. This fixes CVE-2024-25062.
Security Upgraded net-misc/curl to v8.6.0. This fixes CVE-2024-0853.
## February 12, 2024
Change
### cos-109-17800-147-9
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.75](https://cos.googlesource.com/third_party/kernel/+/f2325b62460b827790918512e220f6432411b9b1) | v24.0.5 | v1.7.10 | v535.154.05 (default),v535.154.05(latest),v470.223.02(R470 for compatibility with K80 GPUs) |
Announcement This is an LTS Refresh Release.
Change Runtime sysctl changes:
- Added: net.ipv4.tcp_backlog_ack_defer: 1
- Added: net.ipv4.tcp_shrink_window: 0
- Changed: fs.file-max: 812608 -\> 812605
- Changed: net.core.optmem_max: 20480 -\> 131072
- Changed: net.ipv6.route.max_size: 4096 -\> 2147483647
- Changed: vm.lowmem_reserve_ratio: 256 256 32 0 -\> 256 256 32 0 0
Security Fixed CVE-2024-1086 in the linux kernel.
Feature Backported support for TCP RTO configuration in networkd.
Change Update default NVIDIA GPU drivers to 535.154.05.
Security Fixed CVE-2023-40546, CVE-2023-40547, CVE-2023-40548, CVE-2023-40549, CVE-2023-40550 and CVE-2023-40551 in
sys-boot/shim.
Change Updated cos-gpu-installer to v2.1.10.
Security Updated dev-libs/openssl to v3.0.13. This resolves
CVE-2024-0727 and CVE-2023-6129.
Feature Fragmented nvidia-drivers and nvidia-drivers-open pkg into separate packages per major version.
## February 05, 2024
Change
### cos-109-17800-66-81
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.58](https://cos.googlesource.com/third_party/kernel/+/778300f82726797ef3a523710ee0d6853dfa52b1) | v24.0.5 | v1.7.10 | v535.129.03(default),v535.154.05(latest),v470.223.02(R470 for compatibility with K80 GPUs) |
Change Update latest NVIDIA GPU driver to v535.154.05.
Security Fixed CVE-2023-6531 in the Linux kernel.
Security Fixed CVE-2024-0607 in the Linux kernel.
## January 31, 2024
Change
### cos-109-17800-66-78
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.58](https://cos.googlesource.com/third_party/kernel/+/a75611e516d2d29d1e04e26e345c3313a5b04b90) | v24.0.5 | v1.7.10 | v535.129.03(default, latest),v470.223.02(R470 for compatibility with K80 GPUs) |
Feature Added kernel compatibility with iptables-nft.
Security Fixed CVE-2024-0565 in the Linux kernel.
Change Runtime sysctl changes:
- Added: net.netfilter.nf_flowtable_tcp_timeout: 30
- Added: net.netfilter.nf_flowtable_udp_timeout: 30
Security Fixed CVE-2024-0646 in the Linux kernel.
Security Fixed CVE-2024-21626 in app-containers/runc.
Security Fixed CVE-2024-0193 in the Linux kernel.
Security Fixed CVE-2023-6915 in the Linux kernel.
Security Upgraded dev-python/jinja to v3.1.3. This resolves CVE-2024-22195.
## January 22, 2024
Change
### cos-109-17800-66-65
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.58](https://cos.googlesource.com/third_party/kernel/+/cae2a4ba460540e89684919a50e56260bc943bbf) | v24.0.5 | v1.7.10 | v535.129.03(default, latest),v470.223.02(R470 for compatibility with K80 GPUs) |
Fixed Fixed a performance issue observed in Postgres databases.
## January 16, 2024
Change
### cos-109-17800-66-58
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.58](https://cos.googlesource.com/third_party/kernel/+/9f130806127d10ace29196cd880855d34b01bfed) | v24.0.5 | v1.7.10 | v535.129.03(default, latest),v470.223.02(R470 for compatibility with K80 GPUs) |
Security Upgraded dev-db/sqlite to v3.44.2-r2. This fixes CVE-2023-7104.
## January 08, 2024
Change
### cos-109-17800-66-57
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.58](https://cos.googlesource.com/third_party/kernel/+/9f130806127d10ace29196cd880855d34b01bfed) | v24.0.5 | v1.7.10 | v535.129.03(default, latest),v470.223.02(R470 for compatibility with K80 GPUs) |
Fixed Updated net-misc/openssh to v9.6_p1-r1.
Security Upgraded dev-go/crypto to v0.17.0. This fixes
CVE-2023-48795.
Security Upgraded sys-apps/dbus to v1.12.28. This fixes
CVE-2023-34969.
## January 02, 2024
Change
### cos-109-17800-66-54
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.58](https://cos.googlesource.com/third_party/kernel/+/9f130806127d10ace29196cd880855d34b01bfed) | v24.0.5 | v1.7.10 | v535.129.03(default, latest),v470.223.02(R470 for compatibility with K80 GPUs) |
Security Fixed CVE-2023-6931 in the Linux kernel.
Fixed Fixed a performance issue that was observed in Postgres databases.
Fixed Updated docker-credential-gcr to v2.1.21.
Security Fixed CVE-2023-6932 in the Linux kernel.
Security Updated dev-lang/go to v1.21.5. This resolves
CVE-2023-45285 and CVE-2023-39326.
Security Updated net-misc/curl to v8.5.0. This resolves CVE-2023-46218.
Security Fixed CVE-2023-6817 in the Linux kernel.
## December 19, 2023
Change
### cos-109-17800-66-43
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.58](https://cos.googlesource.com/third_party/kernel/+/ad3da45235c2c878399c886d60c632a039424154) | v24.0.5 | v1.7.10 | v535.129.03(default, latest),v470.223.02(R470 for compatibility with K80 GPUs) |
Change Updated app-containers/containerd to 1.7.10.
Security Fixed CVE-2023-49083 in package dev-python/cryptography.
Security Fixed CVE-2023-6622 in the Linux kernel.
Fixed Fixed a container performance issue that occurred after
running `systemctl start cloud-audit-setup`.
Fixed Fixed a kernel crash that occurred when running Postgres databases.
## December 11, 2023
Change
### cos-109-17800-66-33
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.58](https://cos.googlesource.com/third_party/kernel/+/5384c5015506de785504eb25ef668d31431786e5) | v24.0.5 | v1.7.7 | v535.129.03(default, latest),v470.223.02(R470 for compatibility with K80 GPUs) |
Security Fixed CVE-2023-6111 in the Linux kernel.
## November 29, 2023
Change
### cos-109-17800-66-32
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.58](https://cos.googlesource.com/third_party/kernel/+/99fbd76e7b74692d078e7eb9feaf121fa3af3e4b) | v24.0.5 | v1.7.7 | v535.129.03(default, latest),v470.223.02(R470 for compatibility with K80 GPUs) |
Security Updated dev-libs/openssl to v3.0.12. This resolves CVE-2023-5363 and CVE-2023-5678.
Security Updated dev-libs/libxml2 to v2.11.5. This resolves CVE-2023-45322.
Security Fixed CVE-2023-5090 in the linux kernel.
Feature Updated NVIDIA GPU drivers. This resolves CVE-2023-31022.
## November 15, 2023
Change
### cos-109-17800-66-27
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.58](https://cos.googlesource.com/third_party/kernel/+/46fb160ebf1736bf65acf4d5cd6a12de06384337) | v24.0.5 | v1.7.7 | v535.104.12(default, latest),v470.199.02(R470 for compatibility with K80 GPUs) |
Security Updated net-libs/nghttp2 to v1.57.0. This resolves CVE-2023-44487 and CVE-2023-35945.
Security Updated dev-lang/go to v1.21.3. This resolves CVE-2023-44487 and CVE-2023-39325.
Security Updated dev-go/net to v0.17.0. This fixes CVE-2023-44487 and CVE-2023-39325.
Security Fixed CVE-2023-46862 in the Linux kernel.
Security Updated app-editors/vim,app-editors/vim-core to v9.0.2092.
This resolves CVE-2023-4733, CVE-2023-4734, CVE-2023-4735, CVE-2023-4736,
CVE-2023-4738, CVE-2023-4750, CVE-2023-4752, CVE-2023-4781,
CVE-2023-5344, CVE-2023-5441, CVE-2023-5535.
Security Fixed CVE-2023-46813 in the Linux kernel.
## November 14, 2023
Change
### cos-109-17800-66-27
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.58](https://cos.googlesource.com/third_party/kernel/+/46fb160ebf1736bf65acf4d5cd6a12de06384337) | v24.0.5 | v1.7.7 | v535.104.12(default, latest),v470.199.02(R470 for compatibility with K80 GPUs) |
Security Updated net-libs/nghttp2 to v1.57.0. This resolves CVE-2023-44487 and CVE-2023-35945.
Security Updated dev-go/net to v0.17.0. This fixes CVE-2023-44487 and CVE-2023-39325.
Security Updated app-editors/vim,app-editors/vim-core to v9.0.2092.
This resolves CVE-2023-4733, CVE-2023-4734, CVE-2023-4735, CVE-2023-4736,
CVE-2023-4738, CVE-2023-4750, CVE-2023-4752, CVE-2023-4781,
CVE-2023-5344, CVE-2023-5441, CVE-2023-5535.
Security Fixed CVE-2023-46813 in the Linux kernel.
Security Update dev-lang/go to 1.21.3. This resolves CVE-2023-44487 and CVE-2023-39325.
Security Fixed CVE-2023-46862 in the Linux kernel.
## November 07, 2023
Change
### cos-109-17800-66-19
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.58](https://cos.googlesource.com/third_party/kernel/+/77d913a39ed76e488be139379dffe44e172527f9) | v24.0.5 | v1.7.7 | v535.104.12(default, latest),v470.199.02(R470 for compatibility with K80 GPUs) |
Fixed Updated google-guest-configs to 20230929.00.
Security Fixed CVE-2023-5717 in the Linux kernel.
## October 30, 2023
Announcement This is an [LTS Refresh Release](https://docs.cloud.google.com/container-optimized-os/docs/concepts/versioning#lts_refresh_releases)
Change
### cos-109-17800-66-15
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.58](https://cos.googlesource.com/third_party/kernel/+/d233388d81b4e91fb281273d5c949800e5717e7c) | v24.0.5 | v1.7.7 | v535.104.12(default, latest),v470.199.02(R470 for compatibility with K80 GPUs) |
Change Updated the Linux kernel to v6.1.58.
Change Updated app-containers/containerd to v1.7.7.
Change Updated default and latest NVIDIA GPU drivers to v535.104.12.
Security Upgraded net-misc/curl to v8.4.0. This resolves CVE-2023-38545.
Feature Enable portmapper registration reporting for lsof. This also fixes an issue where `lsof` is missing from SOS reports.
Fixed Restore systemd-logind restart behavior when dbus restarts.
Security Updated dev-lang/go to v1.21.2. This resolves CVE-2023-39323.
Security Fixed CVE-2023-4244 in the Linux kernel.
Change Runtime sysctl changes:
- Added: net.ipv6.conf.all.accept_ra_min_lft: 0
- Added: net.ipv6.conf.default.accept_ra_min_lft: 0
- Added: net.ipv6.conf.docker0.accept_ra_min_lft: 0
- Added: net.ipv6.conf.eth0.accept_ra_min_lft: 0
- Added: net.ipv6.conf.lo.accept_ra_min_lft: 0
- Changed: fs.file-max: 812619 -\> 812608
- Changed: kernel.threads-max: 63519 -\> 63520
- Changed: net.netfilter.nf_conntrack_sctp_timeout_shutdown_recd: 0 -\> 3
- Changed: net.netfilter.nf_conntrack_sctp_timeout_shutdown_sent: 0 -\> 3
- Changed: user.max_cgroup_namespaces: 31759 -\> 31760
- Changed: user.max_ipc_namespaces: 31759 -\> 31760
- Changed: user.max_mnt_namespaces: 31759 -\> 31760
- Changed: user.max_net_namespaces: 31759 -\> 31760
- Changed: user.max_pid_namespaces: 31759 -\> 31760
- Changed: user.max_time_namespaces: 31759 -\> 31760
- Changed: user.max_user_namespaces: 31759 -\> 31760
- Changed: user.max_uts_namespaces: 31759 -\> 31760
## October 11, 2023
Change
### cos-109-17800-0-51
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.42](https://cos.googlesource.com/third_party/kernel/+/265ec4c1b39fbe6e6f7b450f1953792122454214) | v24.0.5 | v1.7.2 | v535.104.05(default, latest),v470.199.02(R470 for compatibility with K80 GPUs) |
Security Fixed CVE-2023-38039 in net-misc/curl.
Security Fixed CVE-2023-5197 in the Linux kernel.
## October 03, 2023
Change
### cos-109-17800-0-47
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.42](https://cos.googlesource.com/third_party/kernel/+/0b80490c4d70f6c7093f2cfd4e971f979c6d6d36) | v24.0.5 | v1.7.2 | v535.104.05(default),v470.199.02(R470) |
Security Fixed CVE-2023-42753 in the Linux kernel.
Fixed Updated cos-gpu-installer to v2.1.9.
## September 27, 2023
Change
### cos-109-17800-0-45
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.42](https://cos.googlesource.com/third_party/kernel/+/c8585e2312256e860351eb05836e6a3518026cff) | v24.0.5 | v1.7.2 | v535.104.05(default, latest),v470.199.02(R470 for K80 compatibility) |
Announcement Promoted to stable.
## September 26, 2023
Change
### cos-beta-109-17800-0-45
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.42](https://cos.googlesource.com/third_party/kernel/+/c8585e2312256e860351eb05836e6a3518026cff) | v24.0.5 | v1.7.2 | v535.104.05(default),v470.199.02(R470) |
Security Updated dev-lang/go to 1.21.1. This fixes CVE-2023-39318 and CVE-2023-39319.
Security Fixed CVE-2023-40217 in the dev-lang/python package.
Fixed Fixed an issue where IPv6 networking would fail under high CPU load.
Security Fixed CVE-2023-4921 in the Linux kernel.
Security Fixed CVE-2023-4569 in the Linux kernel.
## September 18, 2023
Change
### cos-beta-109-17800-0-37
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.42](https://cos.googlesource.com/third_party/kernel/+/f3567042b10a7ef4d60edb2a9ab904297f091355) | v24.0.5 | v1.7.2 | v535.104.05(default),v470.199.02(R470) |
Change Fixed an issue where symlinks could not be moved.
Security Fixed CVE-2023-4015, CVE-2023-4622, CVE-2023-4623 in the kernel.
Fixed Fixed an issue with NFS reconnects on GKE.
Change Updated cos-gpu-installer to v2.1.8.
## September 11, 2023
Change
### cos-beta-109-17800-0-32
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.42](https://cos.googlesource.com/third_party/kernel/+/749c55cd9e141f409975724ae5d5639db2655524) | v24.0.5 | v1.7.2 | v535.104.05(default),v470.199.02(R470) |
Change Updated latest GPU driver to v535.104.05.
## September 07, 2023
Change
### cos-beta-109-17800-0-31
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.42](https://cos.googlesource.com/third_party/kernel/+/749c55cd9e141f409975724ae5d5639db2655524) | v24.0.5 | v1.7.2 | v535.54.03(default),v470.199.02(R470) |
Security Upgraded sys-fs/mdadm to v4.2. This resolves CVE-2023-28938 and CVE-2023-28736.
Change Updated dev-lang/go to v1.21.0.
Security Fixed CVE-2023-33953 in the Linux kernel.
Security Fixed CVE-2022-40896 in pygments package.
Security Fixed CVE-2023-4016 in sys-process/procps.
Change Updated dev-go/go-tools to v0.11.1_p20230712.
Fixed Fixed an issue in ip6tables where the `-C` option did not
work correctly.
Fixed Enabled persistence mode with Nvidia GPU driver
installation.
Fixed The `get_metadata_value` script will now retry if it experiences a connection error.
Change Runtime sysctl changes:
- Added: kernel.io_uring_disabled: 0
## August 21, 2023
Change
### cos-beta-109-17800-0-13
|---|---|---|---|
| Kernel | Docker | Containerd | GPU Drivers |
| [COS-6.1.42](https://cos.googlesource.com/third_party/kernel/+/6ff435b8f1fa494c3daba3754053d06740affdee) | v24.0.5 | v1.7.2 | v535.54.03(default),v470.199.02(R470) |
Security Updated dev-go/yaml to v3.0.1. This resolves CVE-2022-28948.
Change Fixed CVE-2023-4194 in the Linux kernel.
Security Fixed CVE-2023-4147 in the Linux kernel.
Fixed Updated app-containers/docker-cli to 24.0.5.
Fixed Updated app-containers/docker to 24.0.5.
Security Updated dev-libs/openssl to v3.0.10. This resolves CVE-2023-3817.
## August 14, 2023
Announcement
### Updates to Major Packages:
Change
### cos-beta-109-17800-0-8
|---|---|---|---|---|
| Date | Kernel | Docker | Containerd | GPU Drivers |
| Aug 14, 2023 | [COS-6.1.42](https://cos.googlesource.com/third_party/kernel/+/d3792f1ae42a38b726aa2a0ecd01cd8692cda8de) | v24.0.4 | v1.7.2 | v535.54.03(default),v470.199.02(R470) |
Change Upgraded localtoast from v1.1.5.1 to v1.1.6.
Change Updated docker-credential-gcr to v2.1.10.
Change Updated google-osconfig-agent to v20230706.02.
Change Updated google-guest-agent to v20230628.00.
Change Updated toolbox to v20230714.
Change Updated Docker and docker-cli to v24.0.4.
Change Updated containerd to 1.7.2. This also resolves CVE-2023-25173 and
CVE-2023-25153.
Change Updated kubernetes to v1.27.3.
Change
Updated cos-gpu-installer to v2.1.4. Some key features of this update
include:
- Support for gsp_tu10x.bin and gsp_ad10x.bin gsp firmware files and removes the container dependency on python2.
- Simplifies GPU driver installation by remounting driver installation path as executable from cos-extensions.
- Support for L4 GPU in cos-gpu-installer and fixed cached driver installation for prebuilt driver modules.
- Fallback to installing compatible drivers when installer is invoked for certain GPU devices and incompatible drivers.
- Switch precompiled driver and signature location to COS build artifacts.
- Added flag `--no-verify` to preload GPU drivers with no GPU attached.
- Added support for NVIDIA R535 drivers by preparing gsp_ga10x.bin firmware file.
- Added flag `--module-arg` to specify kernel module parameters.
- Switch generic NVIDIA driver installer download url in cos-gpu-installer from us.downloads.nvidia to gs://nvidia-drivers--public.
- Fix permission issue in GPU driver install directory with OSS drivers.
Change Updated sosreport to v4.5.4.
Change Updated google-guest-configs to v20230526.00.
Change Updated systemd to v253.3.
Change Updated default and latest drivers to v535.54.03 (NVIDIA LTSB).
This also resolves: CVE-2023-0184, CVE-2023-0189, CVE-2023-0180,
CVE-2023-0183, CVE-2023-0185, CVE-2023-0187, CVE-2023-0198,
CVE-2023-0199, CVE-2023-0188, CVE-2023-0190, CVE-2023-0194,
CVE-2023-0195, CVE-2023-0191. CVE-2023-25515 and
CVE-2023-25516.
Also updated R470 drivers to 470.199.02. This also resolves:
CVE-2023-0184, CVE-2023-0189, CVE-2023-0180, CVE-2023-0185,
CVE-2023-0187, CVE-2023-0198, CVE-2023-0199, CVE-2023-0188,
CVE-2023-0190, CVE-2023-0194, CVE-2023-0195, CVE-2023-0191.
Change Updated oslogin to v20230531.00.
Change Updated runc to 1.1.7. This also resolves CVE-2023-25809 and CVE-2023-27561.
Change Updated cloud-init to v23.1.2.
Change Upgraded net-libs/libnetfilter_cttimeout to v1.0.1.
Change Upgraded dev-libs/libverto to v0.3.2.
Change Upgraded net-dns/c-ares to v1.19.0.
Change Upgraded dev-libs/libpcre2 to v2-10.42-r1.
Change Updated dev-go/go-tools to 070db2996ebe3aa00667288f8e5749e867deeb39.
Change Upgraded app-admin/logrotate to v3.21.0.
Change Upgraded dev-libs/nspr to v4.35-r1.
Fixed Fixed an issue where pstore is not cleaned at boot time if COS metrics are disabled.
Change Upgraded dev-libs/nettle to v3.8.1.
Security Upgraded dev-python/cryptography to v39.0.1. This resolves CVE-2023-23931.
Security Upgraded sys-fs/cryptsetup from 2.3.4 to 2.4.3. This resolves CVE-2021-4122.
Change Upgraded net-misc/wget to v1.21.4.
Change Upgraded sys-process/lsof to v4.98.0.
Change Upgraded dev-libs/re2 to v2-0.2022.12.01.
Announcement
### Updates for Minor packages:
Change Upgraded net-libs/libnetfilter_cthelper to v1.0.1-r1.
Change Updated iproute2 to v6.2.0.
Change Upgraded net-firewall/iptables to v1.8.9.
Change Upgraded sys-fs/e2fsprogs to v1.47.0-r2.
Change Upgraded sys-apps/grep to v3.11.
Change Upgraded dev-libs/libzip to v1.9.2.
Change Upgraded dev-libs/userspace-rcu to v0.13.2.
Change Updated the gvnic driver in the Linux kernel.
Change Upgraded dev-db/sqlite to v3.41.0.
Change Upgraded dev-libs/elfutils to v0.189.
Feature Allowed preloading GPU driver dependencies through cos-extensions.
Change Upgraded dev-libs/dbus-glib to v0.112.
Change Upgraded net-libs/libnetfilter_conntrack to v1.0.9-r1.
Change Upgraded sys-apps/coreutils to v9.3-r1.
Security Upgraded sys-apps/less to v633-r1. This resolves CVE-2022-46663.
Change Upgraded net-libs/gnutls to v3.8.0.
Change Upgraded dev-libs/libpcre to v8.45-r1.
Feature Toolbox is now compatible with both Artifact Registry (AR) and Google Container Registry (GCR).
Security Updated open-iscsi to v2.1.8. This resolves CVE-2020-17437.
Feature Installed fluent-bit for stackdriver logging in x86 images.
See [this page](https://cloud.google.com/container-optimized-os/docs/how-to/logging)
for more details.
Fixed Fixed an issue where chronyd does not restart after failure, resulting in the system time being out of sync.
Change Upgraded sys-apps/coreutils to v9.3.
Change Upgraded net-libs/libmnl to v1.0.5.
Announcement
### New Features and Changes in the Image:
Change Upgraded sys-apps/ethtool to v6.2.
Feature Enabled TDX Guest support in the Linux Kernel.
Change Upgraded sys-apps/diffutils to v3.10.
Security Updated to pick up CVE-2023-0394 patch for ipv6 raw.
Change Upgraded sys-libs/libcap to v2.69.
Change Upgraded app-arch/pigz to v2.7-r1.
Change Upgraded sys-fs/xfsprogs to v6.2.0.
Change Upgraded dev-libs/libgcrypt to v1.10.1-r3.
Change Upgraded sys-libs/timezone-data to v2023c.
Change Upgraded app-misc/ca-certificates to v20230311.3.90.
Change Upgraded dev-libs/popt to v1.19.
Change Upgraded bind-tools to v9.16.37.
Feature Increase /dev/stateful wait timeout with protected stateful partition.
Change Upgraded sys-fs/lvm2 to v2-2.03.20.
Change Upgraded net-libs/libnetfilter_queue to v1.0.5.
Change Updated the Linux kernel to v6.1.40.
Security Fixed CVE-2022-2928 and CVE-2022-2929 in net-misc/dhcp.
Security Updated to pick up CVE-2023-0179 patch for netfilter in kernel.
Change Upgraded net-misc/rsync to v3.2.7-r2.
Security Fixed CVE-2021-27291 and CVE-2021-20270 in dev-python/pygments.
Security Fixed CVE-2022-48303 in app-arch/tar.
Change Upgraded sys-libs/libcap-ng to v0.8.3.
Security Upgraded dev-libs/confuse to v3.3 and fixed CVE-2022-40320.
Change Upgraded net-nds/rpcbind to v1.2.6.
Change Upgraded dev-libs/gmp to v6.2.1-r5.
Change Upgraded net-dns/c-ares to v1.19.1.
Change Upgraded app-misc/mime-types to v2.1.54.
Change Upgraded app-misc/jq to v1.7_pre20201109-r1.
Announcement
### New Features and Changes in the Linux Kernel:
Security Updated dev-libs/openssl to v3.0.9. This resolves CVE-2023-2650, CVE-2022-4450, CVE-2023-0215, CVE-2022-4304, CVE-2023-0286, CVE-2023-0464, CVE-2023-1255, CVE-2023-0465 and CVE-2023-0466.
Feature Retry starting systemd-networkd permanently in case of failure instead of default limit of 5.
Security Upgraded net-misc/openssh package to v9.3. This resolves CVE-2023-28531 and CVE-2023-25136.
Security Upgraded net-misc/curl to v8.1.2. This resolves CVE-2022-43552.
Feature Added kernel support for nftables.
Change Upgraded net-dns/libidn2 to v2-2.3.4.
Change Updated dev-go/go-sys to v0.5.0.
Change Upgraded sys-apps/net-tools to v2.10.
Change Disabled CONFIG_DEBUG_CREDENTIALS in the kernel due to its performance impact on some container workloads.
Security Update open-vm-tools to v12.2.5. This resolves CVE-2023-20867.
Security Updated to pick up CVE-2023-0386 and CVE-2023-1281 patches for net-sched in the kernel.
Change Upgraded dev-libs/expat to v2.5.0.
Feature Added kernel modules for SquashFS, RAID1, and DM RAID.
Feature Enabled the following kernel configs: `CONFIG_AMD_IOMMU`,
`CONFIG_AMD_IOMMU_V2` and `INET_DIAG_DESTROY`.
Change Upgraded sys-apps/gentoo-functions to v0.19.
Feature Enabled fluent-bit to use customized configuration.
Change Upgraded sys-apps/ethtool to v6.3.
Change Upgraded dev-libs/libevent to v2.1.12-r1.
Security Updated app-editors/vim, app-editors/vim-core to v9.0.1562. This resolves CVE-2023-2609, CVE-2023-2610, CVE-2023-2426, CVE-2023-0512, CVE-2023-1127, CVE-2023-1175, CVE-2023-1170, CVE-2023-1355 and CVE-2023-1264.
Change Upgraded net-libs/libnfnetlink to v1.0.2.
Change Removed support for Rust symbol demangling in google-breakpad.
Security Updated dev-lang/go to v1.20.5 and dev-go/net to v0.7.0. This resolves CVE-2023-29403, CVE-2023-29404, CVE-2023-29402, CVE-2023-29405, CVE-2023-24532, CVE-2023-24536, CVE-2023-24537, CVE-2023-24538, CVE-2023-24539, CVE-2023-24540, CVE-2023-29400, CVE-2022-41723 and CVE-2022-41725.
Fixed Fixed containers losing access to GPUs with error "Failed to initialize NVML: Unknown error".
Security Updated binutils-libs to v2.40. This resolves CVE-2022-4285.
Announcement
### CVE/Security Fixes:
Security Updated the dev-libs/libxml2 package to 2.10.4. This resolves CVE-2023-28484.
Security Fixed CVE-2023-24329, CVE-2015-20107, CVE-2020-10735, CVE-2021-28861, and CVE-2022-45061 in dev-lang/python.
Change Upgraded sys-apps/acl to v2.3.1-r1.
Change Upgraded sys-apps/attr to v2.5.1-r2.
Change Upgraded dev-libs/libyaml to v0.2.5.
Change Upgraded net-analyzer/netcat to v110.20180111-r2.
Feature Enabled KVM-based nested virtualization for the x86 architecture.
Change Upgraded app-shells/dash to v0.5.12.
Change Upgraded sys-apps/kexec-tools to v2.0.24.
Feature Add noexec, nodev, nosuid to /etc/resolv.conf bind mount. Fixes
`EPERM` errors when running a pod in UserNS in COS.
Change Add `MAX_SKB_FRAGS` configuration in the Linux kernel.
Change Upgraded sys-apps/dmidecode to v3.5-r2.
Feature Enabled vrf, ip_gre, and ip6_gre modules.
Change Upgraded net-misc/wget to v1.21.3-r1.
Change Upgraded sys-libs/libcap to v2.68.
Security Fixed ncurses upgrade to 6.4p20220423. This resolves CVE-2023-29491.
Change Upgraded dev-libs/libgpg-error to v1.46-r1.
Feature Use the Fluent-bit logging agent when the `google-logging-use-fluentbit`
metadata key is true and logging is enabled.
Feature Enabled support for `MGLRU` in the Linux kernel.
Change Upgraded app-arch/xz-utils to v5.4.3.
Change Upgraded sys-apps/file to v5.44-r3.
Feature Added nvidia-container-toolkit v1.13.5.
Change Upgraded sys-apps/acl to v2.3.1-r2.
Security Updated net-fs/cifs-utils to v6.15. This resolves CVE-2022-29869, CVE-2021-20208, and CVE-2022-27239.
Change Upgraded net-fs/autofs to v5.1.8-r1.
Change Upgraded net-misc/bridge-utils to v1.7.1-r1.
Change Upgraded app-admin/sudo to v1.9.13_p3-r1.