<?xml version="1.0" encoding="UTF-8"?>
<!-- AUTOGENERATED FILE. DO NOT EDIT. -->
<feed xmlns="http://www.w3.org/2005/Atom">
  <id>tag:google.com,2016:cos-109-release-notes</id>
  <title>Container Optimized OS 109 - Release notes</title>
  <link rel="self" href="https://docs.cloud.google.com/feeds/cos-109-release-notes.xml"/>
  <author>
    <name>Google Cloud Platform</name>
  </author>
  <updated>2025-09-24T00:00:00-07:00</updated>

  <entry>
    <title>September 24, 2025</title>
    <id>tag:google.com,2016:cos-109-release-notes#September_24_2025</id>
    <updated>2025-09-24T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#September_24_2025"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-109-17800-570-50_">cos-109-17800-570-50 <a id='"cos-arm64-109-17800-570-50"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/a4114b18351d2a6e0d84a3c7b02e4513ced87fcf
">COS-6.1.151</a></td>
<td>v24.0.9</td>
<td>v1.7.27</td>
<td><a href="https://storage.googleapis.com/cos-tools/17800.570.50/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Change</h3>
<p>Enabled Coherent Driver Memory Management by default when installing GPU drivers on GB2000.</p>
<h3>Change</h3>
<p>Runtime sysctl changes:
<ul>
<li>Changed: fs.file-max: 812272 -&gt; 812258</li>
</ul></p>
<h3>Fixed</h3>
<p>Updated golang.org/x/crypto in google-osconfig-agent to v0.31.0.</p>
<h3>Change</h3>
<p>Updated cos-gpu-installer to v2.5.7.</p>
<h3>Fixed</h3>
<p>Upgraded dev-libs/libxslt to version 1.1.43-r1.</p>
<h3>Fixed</h3>
<p>Updated the Linux kernel to v6.1.151.</p>
<h3>Security</h3>
<p>Upgraded dev-libs/libxml2 to version 2.13.9. This fixes
CVE-2025-9714.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>September 16, 2025</title>
    <id>tag:google.com,2016:cos-109-release-notes#September_16_2025</id>
    <updated>2025-09-16T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#September_16_2025"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-109-17800-570-46_">cos-109-17800-570-46 <a id='"cos-arm64-109-17800-570-46"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/21a09914420b38facc9d5d41d6790e66c9786c31
">COS-6.1.143</a></td>
<td>v24.0.9</td>
<td>v1.7.27</td>
<td><a href="https://storage.googleapis.com/cos-tools/17800.570.46/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Security</h3>
<p>Fixed CVE-2025-38539 in the Linux kernel.</p>
<h3>Feature</h3>
<p>Added GDRCopy kernel module for NVIDIA drivers.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-38553 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-38622 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-38527 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-38563 in the Linux kernel.</p>
<h3>Change</h3>
<p>Runtime sysctl changes:
<ul>
<li>Changed: fs.file-max: 812270 -&gt; 812272</li>
</ul></p>
<h3>Security</h3>
<p>Fixed CVE-2025-38550 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-38572 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-38608 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-38587 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-38565 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-38645 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-38588 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-38639 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-38528 in the Linux kernel.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>September 08, 2025</title>
    <id>tag:google.com,2016:cos-109-release-notes#September_08_2025</id>
    <updated>2025-09-08T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#September_08_2025"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-109-17800-570-43_">cos-109-17800-570-43 <a id='"cos-arm64-109-17800-570-43"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/251d4a8789b175c70dd0bc30d661571ca4535092
">COS-6.1.143</a></td>
<td>v24.0.9</td>
<td>v1.7.27</td>
<td><a href="https://storage.googleapis.com/cos-tools/17800.570.43/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Security</h3>
<p>Fixed CVE-2024-58240 in the Linux kernel.</p>
<h3>Change</h3>
<p>Runtime sysctl changes:
<ul>
<li>Changed: fs.file-max: 812262 -&gt; 812270</li>
</ul></p>
<h3>Security</h3>
<p>Fixed CVE-2025-38676 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-38322 in the Linux kernel.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>September 02, 2025</title>
    <id>tag:google.com,2016:cos-109-release-notes#September_02_2025</id>
    <updated>2025-09-02T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#September_02_2025"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-109-17800-570-40_">cos-109-17800-570-40 <a id='"cos-arm64-109-17800-570-40"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/7ee6ea59a506ec4129b6bd62e046f8d180705344
">COS-6.1.143</a></td>
<td>v24.0.9</td>
<td>v1.7.27</td>
<td><a href="https://storage.googleapis.com/cos-tools/17800.570.40/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Security</h3>
<p>Fixed KCTF-aba0c94 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed KCTF-62708b9 in the Linux kernel.</p>
<h3>Change</h3>
<p>Runtime sysctl changes:
<ul>
<li>Changed: fs.file-max: 812214 -&gt; 812262</li>
</ul></p>
]]>
    </content>
  </entry>

  <entry>
    <title>August 25, 2025</title>
    <id>tag:google.com,2016:cos-109-release-notes#August_25_2025</id>
    <updated>2025-08-25T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#August_25_2025"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-109-17800-570-37_">cos-109-17800-570-37 <a id='"cos-arm64-109-17800-570-37"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/69a4dc1bdd77106e675905e62d935738f80567d2
">COS-6.1.143</a></td>
<td>v24.0.9</td>
<td>v1.7.27</td>
<td><a href="https://storage.googleapis.com/cos-tools/17800.570.37/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Feature</h3>
<p>Disabled DNSSEC by default for COS TPU VMs.</p>
<h3>Change</h3>
<p>Runtime sysctl changes:
<ul>
<li>Changed: fs.file-max: 812258 -&gt; 812214</li>
</ul></p>
<h3>Security</h3>
<p>Fixed KCTF-abad3d0 in the Linux kernel.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>August 18, 2025</title>
    <id>tag:google.com,2016:cos-109-release-notes#August_18_2025</id>
    <updated>2025-08-18T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#August_18_2025"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-109-17800-570-33_">cos-109-17800-570-33 <a id='"cos-arm64-109-17800-570-33"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/32eebab8d4fc97eb69fe095c4737e578f395ea56
">COS-6.1.143</a></td>
<td>v24.0.9</td>
<td>v1.7.27</td>
<td><a href="https://storage.googleapis.com/cos-tools/17800.570.33/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Security</h3>
<p>Fixed CVE-2025-38499 in the Linux kernel.</p>
<h3>Security</h3>
<p>Upgraded sys-libs/binutils-libs to version 2.45. This fixes CVE-2025-8224,CVE-2025-8225 and CVE-2025-1153.</p>
<h3>Change</h3>
<p>Runtime sysctl changes:
<ul>
<li>Changed: fs.file-max: 812266 -&gt; 812258</li>
</ul></p>
<h3>Security</h3>
<p>Fixed KCTF-01d3c84 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-38499 in the linux kernel.</p>
<h3>Feature</h3>
<p>Added NVIDIA GPU driver's R580 branch. Updated the LATEST GPU driver label to version 580.65.06.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>August 12, 2025</title>
    <id>tag:google.com,2016:cos-109-release-notes#August_12_2025</id>
    <updated>2025-08-12T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#August_12_2025"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-109-17800-570-26_">cos-109-17800-570-26 <a id='"cos-arm64-109-17800-570-26"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/81651b50f5aebbcc9a6cd461d69c2acaf246cbdc
">COS-6.1.143</a></td>
<td>v24.0.9</td>
<td>v1.7.27</td>
<td><a href="https://storage.googleapis.com/cos-tools/17800.570.26/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Security</h3>
<p>Upgraded urllib3 to version 1.26.18. This fixes CVE-2021-33503, CVE-2023-43804, and CVE-2023-45803.</p>
<h3>Security</h3>
<p>Fixed CVE-2024-52533 in dev-libs/glib.</p>
<h3>Security</h3>
<p>Fixed KCTF-bfebdb8 in the kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-8058 in glibc.</p>
<h3>Security</h3>
<p>Added support for Nvidia driver version 535.261.03. This fixes CVE-2025-23286 and CVE-2025-23279.</p>
<h3>Security</h3>
<p>Patched openssl to fix CVE-2023-50782 affecting
dev-python/crytography.</p>
<h3>Fixed</h3>
<p>Updated dev-python/requests to v2.32.4.</p>
<h3>Security</h3>
<p>Upgraded net-misc/netplan to 1.1.2. This fixes
CVE-2022-4968.</p>
<h3>Security</h3>
<p>Added support for Nvidia driver version 570.172.08. This fixes CVE-2025-23279.</p>
<h3>Change</h3>
<p>Runtime sysctl changes:
<ul>
<li>Changed: fs.file-max: 812262 -&gt; 812266</li>
</ul></p>
<h3>Security</h3>
<p>Fixed CVE-2024-11584 in cloud-init.</p>
<h3>Security</h3>
<p>Fixed CVE-2024-6174 in cloud-init.</p>
<h3>Security</h3>
<p>Upgraded dev-vcs/git to version 2.49.1. This fixes CVE-2025-48385, CVE-2025-27613, CVE-2025-27614, CVE-2025-48384, CVE-2025-46835.</p>
<h3>Fixed</h3>
<p>Upgraded virtual/logger to v0-r2.</p>
<h3>Fixed</h3>
<p>Upgraded sys-process/lsof to v4.99.5.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>August 06, 2025</title>
    <id>tag:google.com,2016:cos-109-release-notes#August_06_2025</id>
    <updated>2025-08-06T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#August_06_2025"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-109-17800-570-23_">cos-109-17800-570-23 <a id='"cos-arm64-109-17800-570-23"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/66208798dd21d4ee2d28f8ea8b9b3a2df63e3f42
">COS-6.1.143</a></td>
<td>v24.0.9</td>
<td>v1.7.27</td>
<td><a href="https://storage.googleapis.com/cos-tools/17800.570.23/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Change</h3>
<p>Runtime sysctl changes:
<ul>
<li>Changed: fs.file-max: 812262 -&gt; 812283</li>
</ul></p>
<h3>Security</h3>
<p>Added support for Nvidia driver version 535.261.03. This fixes CVE-2025-23286 and CVE-2025-23279.</p>
<h3>Security</h3>
<p>Patched openssl to fix CVE-2023-50782 affecting
dev-python/cryptography.</p>
<h3>Security</h3>
<p>Upgraded dev-vcs/git to version 2.49.1. This fixes CVE-2025-48385, CVE-2025-27613, CVE-2025-27614, CVE-2025-48384, CVE-2025-46835.</p>
<h3>Security</h3>
<p>Added support for Nvidia driver version 570.172.08. This fixes CVE-2025-23279.</p>
<h3>Security</h3>
<p>Upgraded net-misc/netplan to 1.1.2. This fixes
CVE-2022-4968.</p>
<h3>Fixed</h3>
<p>Upgraded sys-process/lsof to v4.99.5.</p>
<h3>Security</h3>
<p>Fixed CVE-2024-11584 in cloud-init.</p>
<h3>Fixed</h3>
<p>Updated dev-python/requests to v2.32.4.</p>
<h3>Security</h3>
<p>Fixed CVE-2024-6174 in cloud-init.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>July 28, 2025</title>
    <id>tag:google.com,2016:cos-109-release-notes#July_28_2025</id>
    <updated>2025-07-28T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#July_28_2025"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-109-17800-570-8_">cos-109-17800-570-8 <a id='"cos-arm64-109-17800-570-8"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/66208798dd21d4ee2d28f8ea8b9b3a2df63e3f42
">COS-6.1.143</a></td>
<td>v24.0.9</td>
<td>v1.7.27</td>
<td><a href="https://storage.googleapis.com/cos-tools/17800.570.8/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Security</h3>
<p>Upgraded sqlite to v3.50.2. This resolves CVE-2025-6965.</p>
<h3>Security</h3>
<p>Fixed KCTF-5e28d5a in the Linux kernel.</p>
<h3>Change</h3>
<p>Runtime sysctl changes:
<ul>
<li>Changed: fs.file-max: 812234 -&gt; 812262</li>
</ul></p>
]]>
    </content>
  </entry>

  <entry>
    <title>July 21, 2025</title>
    <id>tag:google.com,2016:cos-109-release-notes#July_21_2025</id>
    <updated>2025-07-21T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#July_21_2025"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-109-17800-570-5_">cos-109-17800-570-5 <a id='"cos-arm64-109-17800-570-5"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/934359bdc0f1081eed66a6db8dba3ea7c2948d3c
">COS-6.1.143</a></td>
<td>v24.0.9</td>
<td>v1.7.27</td>
<td><a href="https://storage.googleapis.com/cos-tools/17800.570.5/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Announcement</h3>
<p>This is an <a href="https://cloud.google.com/container-optimized-os/docs/concepts/versioning#lts_refresh_releases">LTS Refresh release</a>.</p>
<h3>Fixed</h3>
<p>Upgraded app-containers/docker-credential-helpers to v0.9.3.</p>
<h3>Fixed</h3>
<p>Upgraded dev-db/sqlite to v3.50.1.</p>
<h3>Fixed</h3>
<p>Upgraded app-arch/gzip to v1.14.</p>
<h3>Fixed</h3>
<p>Upgraded app-arch/unzip to v6.0_p29.</p>
<h3>Fixed</h3>
<p>Upgraded app-admin/google-guest-configs to v20250516.00.</p>
<h3>Fixed</h3>
<p>Fixed an issue where some workloads could cause a full
system hang when running close to their memory limit.</p>
<h3>Fixed</h3>
<p>Upgraded sys-libs/talloc to v2.4.3.</p>
<h3>Fixed</h3>
<p>Updated app-misc/jq to v1.8.1.</p>
<h3>Security</h3>
<p>Fixed KCTF-103406b in the Linux kernel</p>
<h3>Fixed</h3>
<p>Upgraded net-fs/cifs-utils to v7.4.</p>
<h3>Change</h3>
<p>Updated the NVIDIA GPU driver policy for New Feature Branch (NFB) drivers. The LATEST tag has been updated to point to the stable 570.133.20 Production Branch. The 575.57.08 NFB driver remains available for development and testing but must now be selected by its specific version number.</p>
<h3>Change</h3>
<p>Runtime sysctl changes:
<ul>
<li>Changed: fs.file-max: 812258 -&gt; 812234</li>
</ul></p>
<h3>Fixed</h3>
<p>Upgraded sys-libs/libcap to v2.76.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>July 14, 2025</title>
    <id>tag:google.com,2016:cos-109-release-notes#July_14_2025</id>
    <updated>2025-07-14T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#July_14_2025"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-109-17800-519-47_">cos-109-17800-519-47 <a id='"cos-arm64-109-17800-519-47"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/80aa802c8b1dacdfd244bb9931499a2fa4fcd118
">COS-6.1.141</a></td>
<td>v24.0.9</td>
<td>v1.7.27</td>
<td><a href="https://storage.googleapis.com/cos-tools/17800.519.47/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Change</h3>
<p>Upgraded nvidia-container-toolkit to v1.17.8. This fixes CVE-2025-23266.</p>
<h3>Fixed</h3>
<p>Upgraded sys-apps/less to v679.</p>
<h3>Change</h3>
<p>Runtime sysctl changes:
<ul>
<li>Changed: fs.file-max: 812201 -&gt; 812258</li>
</ul></p>
<h3>Security</h3>
<p>Updated app-editors/nano to v8.5. This resolves
CVE-2024-5742.</p>
<h3>Security</h3>
<p>Upgraded vim, vim-core to
version 9.1.1500. This fixes CVE-2025-26603, CVE-2025-27423,
CVE-2025-29768, CVE-2025-1215, CVE-2025-24014, CVE-2025-22134.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>July 07, 2025</title>
    <id>tag:google.com,2016:cos-109-release-notes#July_07_2025</id>
    <updated>2025-07-07T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#July_07_2025"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-109-17800-519-41_">cos-109-17800-519-41 <a id='"cos-arm64-109-17800-519-41"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/80aa802c8b1dacdfd244bb9931499a2fa4fcd118
">COS-6.1.141</a></td>
<td>v24.0.9</td>
<td>v1.7.27</td>
<td><a href="https://storage.googleapis.com/cos-tools/17800.519.41/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Security</h3>
<p>Upgraded app-admin/sudo to v1.9.17_p1. This resolves
CVE-2025-32462 and CVE-2025-32463.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>June 30, 2025</title>
    <id>tag:google.com,2016:cos-109-release-notes#June_30_2025</id>
    <updated>2025-06-30T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#June_30_2025"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-109-17800-519-40_">cos-109-17800-519-40 <a id='"cos-arm64-109-17800-519-40"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/80aa802c8b1dacdfd244bb9931499a2fa4fcd118
">COS-6.1.141</a></td>
<td>v24.0.9</td>
<td>v1.7.27</td>
<td><a href="https://storage.googleapis.com/cos-tools/17800.519.40/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Change</h3>
<p>Runtime sysctl changes:
<ul>
<li>Changed: fs.file-max: 812288 -&gt; 812258</li>
</ul></p>
<h3>Security</h3>
<p>Upgrade libarchive to version 3.8.1. This fixes CVE-2025-5914.</p>
<h3>Security</h3>
<p>Upgraded elfutils to version 0.193. This fixes CVE-2025-1365, CVE-2025-1371, CVE-2025-1372, and CVE-2025-1377.</p>
<h3>Fixed</h3>
<p>Upgraded dev-libs/libusb to v1.0.29.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>June 23, 2025</title>
    <id>tag:google.com,2016:cos-109-release-notes#June_23_2025</id>
    <updated>2025-06-23T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#June_23_2025"/>
    <content type="html"><![CDATA[<h3>Security</h3>
<p>Updated the Linux kernel to v6.1.141. This includes
mitigations for CVE-2024-28956, which may negatively impact the
performance of Intel machine types.</p>
<h3>Change</h3>
<h3 id="cos-109-17800-519-36_">cos-109-17800-519-36 <a id='"cos-arm64-109-17800-519-36"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/80aa802c8b1dacdfd244bb9931499a2fa4fcd118
">COS-6.1.141</a></td>
<td>v24.0.9</td>
<td>v1.7.27</td>
<td><a href="https://storage.googleapis.com/cos-tools/17800.519.36/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Security</h3>
<p>Fixed KCTF-d35acc1 in the Linux kernel.</p>
<h3>Change</h3>
<p>Runtime sysctl changes:
<ul>
<li>Changed: fs.file-max: 812276 -&gt; 812288</li>
</ul></p>
]]>
    </content>
  </entry>

  <entry>
    <title>June 18, 2025</title>
    <id>tag:google.com,2016:cos-109-release-notes#June_18_2025</id>
    <updated>2025-06-18T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#June_18_2025"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-109-17800-519-32_">cos-109-17800-519-32 <a id='"cos-arm64-109-17800-519-32"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/269aea26c0f2e9675236f141e0a182b8c58e8e52
">COS-6.1.135</a></td>
<td>v24.0.9</td>
<td>v1.7.27</td>
<td><a href="https://storage.googleapis.com/cos-tools/17800.519.32/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Change</h3>
<p>Runtime sysctl changes:
<ul>
<li>Changed: fs.file-max: 812266 -&gt; 812276</li>
</ul></p>
<h3>Security</h3>
<p>Upgraded app-misc/jq to v1.8.0. This fixes CVE-2025-48060.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>June 17, 2025</title>
    <id>tag:google.com,2016:cos-109-release-notes#June_17_2025</id>
    <updated>2025-06-17T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#June_17_2025"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-109-17800-519-30_">cos-109-17800-519-30 <a id='"cos-arm64-109-17800-519-30"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/269aea26c0f2e9675236f141e0a182b8c58e8e52
">COS-6.1.135</a></td>
<td>v24.0.9</td>
<td>v1.7.27</td>
<td><a href="https://storage.googleapis.com/cos-tools/17800.519.30/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Change</h3>
<p>Updated cos-gpu-installer to v2.5.3.</p>
<h3>Security</h3>
<p>Fixed CVE-2024-36927 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed KCTF-ac9fe7d in the kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2024-43840 in the Linux kernel.</p>
<h3>Change</h3>
<p>Runtime sysctl changes:
<ul>
<li>Changed: fs.file-max: 812283 -&gt; 812266</li>
</ul></p>
<h3>Feature</h3>
<p>Added support for Nvidia driver version 575.57.08.</p>
<h3>Security</h3>
<p>Updated systemd to v253.33. This resolves CVE-2025-4598.</p>
<h3>Security</h3>
<p>Fixed CVE-2024-36903 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-47273 in dev-python/setuptools.</p>
<h3>Feature</h3>
<p>Fixed CVE-2024-41110 in Docker.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>June 02, 2025</title>
    <id>tag:google.com,2016:cos-109-release-notes#June_02_2025</id>
    <updated>2025-06-02T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#June_02_2025"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-109-17800-519-18_">cos-109-17800-519-18 <a id='"cos-arm64-109-17800-519-18"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/2e89dc9fc1cfcb0184104491d7f412eee640086b
">COS-6.1.135</a></td>
<td>v24.0.9</td>
<td>v1.7.27</td>
<td><a href="https://storage.googleapis.com/cos-tools/17800.519.18/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Security</h3>
<p>Fixed KCTF-3f98113 in the Linux kernel.</p>
<h3>Fixed</h3>
<p>Upgraded sys-apps/less to v678.</p>
<h3>Security</h3>
<p>Fixed CVE-2024-26783 in the Linux kernel.</p>
<h3>Fixed</h3>
<p>Updated cos-gpu-installer to v2.5.2: Added support for OTHER/NO_GPU cases to enable GPU driver preloading on the ARM64 architecture and added support for IMEX Driver configuration installation for NVIDIA_GB200 machine.</p>
<h3>Security</h3>
<p>Fixed KCTF-8478a72 in the Linux kernel.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>May 27, 2025</title>
    <id>tag:google.com,2016:cos-109-release-notes#May_27_2025</id>
    <updated>2025-05-27T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#May_27_2025"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-109-17800-519-12_">cos-109-17800-519-12 <a id='"cos-arm64-109-17800-519-12"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/8f41e7ee6fe9b8eb00f95b8b56858a7594b466b7
">COS-6.1.135</a></td>
<td>v24.0.9</td>
<td>v1.7.27</td>
<td><a href="https://storage.googleapis.com/cos-tools/17800.519.12/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Security</h3>
<p>Fixed CVE-20250-3198 in sys-libs/bintuils-libs.</p>
<h3>Change</h3>
<p>Runtime sysctl changes:
<ul>
<li>Changed: fs.file-max: 812270 -&gt; 812274</li>
</ul></p>
<h3>Security</h3>
<p>Fixed CVE-2025-46836 in sys-apps/net-tools.</p>
<h3>Feature</h3>
<p>Support NVIDIA MFT Tools on COS.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>May 12, 2025</title>
    <id>tag:google.com,2016:cos-109-release-notes#May_12_2025</id>
    <updated>2025-05-12T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#May_12_2025"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-109-17800-519-7_">cos-109-17800-519-7 <a id='"cos-arm64-109-17800-519-7"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/8f41e7ee6fe9b8eb00f95b8b56858a7594b466b7
">COS-6.1.135</a></td>
<td>v24.0.9</td>
<td>v1.7.27</td>
<td><a href="https://storage.googleapis.com/cos-tools/17800.519.7/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Fixed</h3>
<p>Fixed issue where modinfo could not display module signatures.</p>
<h3>Security</h3>
<p>Updated NVIDIA GPU drivers to v535.247.01 for default/ R535,
v550.163.01 for R550 and v570.133.20 for latest/R570. This resolves
CVE-2025-23244.</p>
<h3>Security</h3>
<p>Upgraded containerd to 1.7.27. Fixes CVE-2024-40635.</p>
<h3>Security</h3>
<p>Updated apparmor to 3.1.6. This fixes CVE-2016-1585.</p>
<h3>Security</h3>
<p>Fixed KCTF-3df275e in the Linux kernel.</p>
<h3>Change</h3>
<p>Runtime sysctl changes:
<ul>
<li>Changed: fs.file-max: 812287 -&gt; 812270</li>
</ul></p>
<h3>Security</h3>
<p>Fixed CVE-2024-26739 in the Linux kernel.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>May 05, 2025</title>
    <id>tag:google.com,2016:cos-109-release-notes#May_05_2025</id>
    <updated>2025-05-05T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#May_05_2025"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-109-17800-519-1_">cos-109-17800-519-1 <a id='"cos-arm64-109-17800-519-1"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/440b25e0098485dd1971331e86e5483fc2367f8c
">COS-6.1.135</a></td>
<td>v24.0.9</td>
<td>v1.7.24</td>
<td><a href="https://storage.googleapis.com/cos-tools/17800.519.1/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Announcement</h3>
<p>This is an <a href="https://cloud.google.com/container-optimized-os/docs/concepts/versioning#lts_refresh_releases">LTS Refresh release</a>.</p>
<h3>Fixed</h3>
<p>Upgraded sys-apps/makedumpfile to v1.7.7.</p>
<h3>Fixed</h3>
<p>Upgraded net-dns/libidn2 to v2.3.8.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-1178,CVE-2025-1182 and CVE-2025-1181 in sys-libs/binutils-libs.</p>
<h3>Fixed</h3>
<p>Upgraded sys-apps/acl to v2.3.2-r2.</p>
<h3>Fixed</h3>
<p>Upgraded net-firewall/iptables to v1.8.11-r1.</p>
<h3>Fixed</h3>
<p>Upgraded app-admin/google-guest-configs to v20250221.00.</p>
<h3>Fixed</h3>
<p>Upgraded app-admin/google-guest-configs to v20250124.00.</p>
<h3>Security</h3>
<p>Updated dev-go/net to v0.39.0. This fixes CVE-2025-22870.</p>
<h3>Security</h3>
<p>Updated dev-go/protobuf to v1.33.0. This fixes CVE-2024-24786.</p>
<h3>Fixed</h3>
<p>Upgraded dev-libs/nss to v3.107.</p>
<h3>Change</h3>
<p>Runtime sysctl changes:
<ul>
<li>Changed: fs.file-max: 812262 -&gt; 812287</li>
</ul></p>
<h3>Fixed</h3>
<p>Upgraded sys-auth/pambase to v20250228.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-22035 in the Linux kernel.</p>
<h3>Fixed</h3>
<p>Upgraded dev-lang/go to v1.21.13.</p>
<h3>Fixed</h3>
<p>Upgraded app-containers/docker-credential-helpers to v0.9.2.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-32414, CVE-2025-32415 in dev-libs/libxml2.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-32728 in net-misc/openssh.</p>
<h3>Security</h3>
<p>Updated dev-vcs/git to version 2.49.0. This fixed CVE-2024-52006, CVE-2024-50349</p>
<h3>Fixed</h3>
<p>Upgraded dev-libs/expat to v2.6.4.</p>
<h3>Fixed</h3>
<p>Upgraded sys-apps/grep to v3.12.</p>
<h3>Fixed</h3>
<p>Upgraded sys-libs/libcap to v2.71.</p>
<h3>Fixed</h3>
<p>Upgraded net-libs/libnetfilter_conntrack to v1.1.0.</p>
<h3>Fixed</h3>
<p>Upgraded net-fs/cifs-utils to v7.3, Upgraded sys-libs/talloc to v2.4.2.</p>
<h3>Fixed</h3>
<p>Upgraded dev-db/sqlite to v3.49.1.</p>
<h3>Fixed</h3>
<p>Upgraded app-arch/gzip to v1.13-r1.</p>
<h3>Fixed</h3>
<p>Upgraded app-admin/sudo to v1.9.16_p2-r1.</p>
<h3>Fixed</h3>
<p>Upgraded dev-python/configobj to v5.0.9.</p>
<h3>Fixed</h3>
<p>Upgraded net-nds/rpcbind to v1.2.7.</p>
<h3>Fixed</h3>
<p>Upgraded net-libs/libtirpc to v1.3.6.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>April 25, 2025</title>
    <id>tag:google.com,2016:cos-109-release-notes#April_25_2025</id>
    <updated>2025-04-25T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#April_25_2025"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-109-17800-436-106_">cos-109-17800-436-106 <a id='"cos-arm64-109-17800-436-106"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/3d6073165b97be0111e2b25fbe5ace49f3f1f83c
">COS-6.1.124</a></td>
<td>v24.0.9</td>
<td>v1.7.24</td>
<td><a href="https://storage.googleapis.com/cos-tools/17800.436.106/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Security</h3>
<p>Fixed CVE-2025-21898 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-21959 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-21997 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-21920 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-21999 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-21964 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2024-48615 in app-arch/libarchive.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-21963 in the Linux kernel.</p>
<h3>Change</h3>
<p>Runtime sysctl changes:
<ul>
<li>Changed: fs.file-max: 812288 -&gt; 812262</li>
</ul></p>
<h3>Security</h3>
<p>Fixed CVE-2025-21919 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-21922 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-22005 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-21980 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-21962 in the Linux kernel.</p>
<h3>Fixed</h3>
<p>Reverted a change in the linux kernel which caused nfs directories to unexpectedly be mounted as ro instead of rw.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>April 14, 2025</title>
    <id>tag:google.com,2016:cos-109-release-notes#April_14_2025</id>
    <updated>2025-04-14T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#April_14_2025"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-109-17800-436-99_">cos-109-17800-436-99 <a id='"cos-arm64-109-17800-436-99"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/36e3acfd29d5de4253e86a5eb084885fe7f4e486
">COS-6.1.124</a></td>
<td>v24.0.9</td>
<td>v1.7.24</td>
<td><a href="https://storage.googleapis.com/cos-tools/17800.436.99/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Security</h3>
<p>Fixed CVE-2024-58083 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-21867 in the Linux kernel.</p>
<h3>Fixed</h3>
<p>Upgraded dev-libs/libusb to v1.0.28.</p>
<h3>Fixed</h3>
<p>Upgraded net-firewall/iptables to v1.8.11-r1.</p>
<h3>Security</h3>
<p>Fixed KCTF-0c3057a in the Linux kernel.</p>
<h3>Security</h3>
<p>Updated dev-libs/expat to v2.7.0. This fixes CVE-2024-8176.</p>
<h3>Fixed</h3>
<p>Modified toolbox to use unified cgroup hierarchy mode, when possible, instead of hybrid mode.</p>
<h3>Fixed</h3>
<p>Upgraded sys-apps/diffutils to v3.11-r2.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-21887 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-22868 in dev-go/oauth2.</p>
<h3>Change</h3>
<p>Runtime sysctl changes:
<ul>
<li>Changed: fs.file-max: 812258 -&gt; 812288</li>
</ul></p>
<h3>Security</h3>
<p>Fixed CVE-2024-35866 in the Linux kernel.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>March 31, 2025</title>
    <id>tag:google.com,2016:cos-109-release-notes#March_31_2025</id>
    <updated>2025-03-31T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#March_31_2025"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-109-17800-436-91_">cos-109-17800-436-91 <a id='"cos-arm64-109-17800-436-91"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/5e17cd9189aae1306f456b5edf6207cbf46acd91
">COS-6.1.124</a></td>
<td>v24.0.9</td>
<td>v1.7.24</td>
<td><a href="https://storage.googleapis.com/cos-tools/17800.436.91/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Security</h3>
<p>Fixed CVE-2024-57977 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-21812 in the Linux kernel.</p>
<h3>Security</h3>
<p>Updated dev-go/net to v0.33.0. This fixed CVE-2023-45288.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-21763 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-21726 in the Linux kernel.</p>
<h3>Change</h3>
<p>Runtime sysctl changes:
<ul>
<li>Changed: fs.file-max: 812224 -&gt; 812258</li>
</ul></p>
<h3>Security</h3>
<p>Fixed CVE-2024-57979 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-21760 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-21796 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2023-52927 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2024-58005 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-21727 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed KCTF-fcdd224 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2024-56549 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-21764 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-21762 in the Linux kernel.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>March 24, 2025</title>
    <id>tag:google.com,2016:cos-109-release-notes#March_24_2025</id>
    <updated>2025-03-24T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#March_24_2025"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-109-17800-436-79_">cos-109-17800-436-79 <a id='"cos-arm64-109-17800-436-79"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/137f4607b36c0dc2df5910d60cd322fd2cc8c5dc
">COS-6.1.124</a></td>
<td>v24.0.9</td>
<td>v1.7.24</td>
<td><a href="https://storage.googleapis.com/cos-tools/17800.436.79/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Security</h3>
<p>Fixed CVE-2025-21791 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-21864 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2024-26982 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-21846 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-21844 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-21858 in the Linux kernel.</p>
<h3>Fixed</h3>
<p>Fixed a race condition that could cause a kernel panic.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-21716 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-21785 in the Linux kernel.</p>
<h3>Change</h3>
<p>Runtime sysctl changes:
<ul>
<li>Changed: fs.file-max: 812258 -&gt; 812224</li>
</ul></p>
<h3>Security</h3>
<p>Fixed CVE-2024-53166 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2024-57996 in the Linux kernel.</p>
<h3>Fixed</h3>
<p>Upgraded sys-apps/which to v2.23.</p>
<h3>Security</h3>
<p>Fixed KCTF-647cef2 in the Linux kernel.</p>
<h3>Feature</h3>
<p>Added support for NVIDIA 570.124.06 GPU driver.
Updated the R570, LATEST GPU driver label to version 570.124.06 for all GPU devices.
Updated the DEFAULT GPU driver label to version 570.124.06 for NVIDIA_B200 and NVIDIA_H200 GPU devices.</p>
<h3>Security</h3>
<p>Fixed CVE-2023-45288 in app-containers/docker.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-21779 in the Linux kernel.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>March 17, 2025</title>
    <id>tag:google.com,2016:cos-109-release-notes#March_17_2025</id>
    <updated>2025-03-17T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#March_17_2025"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-109-17800-436-64_">cos-109-17800-436-64 <a id='"cos-arm64-109-17800-436-64"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/88b5ca7624b0a76434985610ecbfeeee48a647df
">COS-6.1.124</a></td>
<td>v24.0.9</td>
<td>v1.7.24</td>
<td><a href="https://storage.googleapis.com/cos-tools/17800.436.64/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Change</h3>
<p>Runtime sysctl changes:
<ul>
<li>Changed: fs.file-max: 812157 -&gt; 812258</li>
</ul></p>
<h3>Security</h3>
<p>Fixed CVE-2025-21745 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-21814 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2024-58017 in the Linux kernel.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>March 12, 2025</title>
    <id>tag:google.com,2016:cos-109-release-notes#March_12_2025</id>
    <updated>2025-03-12T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#March_12_2025"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-109-17800-436-60_">cos-109-17800-436-60 <a id='"cos-arm64-109-17800-436-60"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/ba3cc3689b7aec3a265ae8eab6ea6da27517824d
">COS-6.1.124</a></td>
<td>v24.0.9</td>
<td>v1.7.24</td>
<td><a href="https://storage.googleapis.com/cos-tools/17800.436.60/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Security</h3>
<p>Upgraded net-misc/wget to v1.25.0. This fixes
CVE-2024-10524.</p>
<h3>Security</h3>
<p>Upgraded dev-libs/libxml2 to v1.12.10. This fixes CVE-2024-56171, CVE-2025-27113 and CVE-2025-24928.</p>
<h3>Security</h3>
<p>Fixed KCTF-638ba50 in the Linux kernel.</p>
<h3>Change</h3>
<p>Runtime sysctl changes:
<ul>
<li>Changed: fs.file-max: 812266 -&gt; 812157</li>
</ul></p>
<h3>Fixed</h3>
<p>Fixed console TTY leak in runc shim in containerd.</p>
<h3>Change</h3>
<p>Updated gzip to v1.13.</p>
<h3>Security</h3>
<p>Upgraded dev-go/crypto to v0.35.0. This fixes CVE-2025-22869.</p>
<h3>Fixed</h3>
<p>Updated google.golang.org/grpc to v1.56.3 and upgrade
golang.org/x/net to v0.23.0 in docker and cri-tools. This fixes
CVE-2023-44487 and CVE-2023-45288.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-26465 and CVE-2025-26466 in net-misc/openssh.</p>
<h3>Security</h3>
<p>Fixed CVE-2024-53589 in sys-libs/libutils-libs.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>March 03, 2025</title>
    <id>tag:google.com,2016:cos-109-release-notes#March_03_2025</id>
    <updated>2025-03-03T00:00:00-08:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#March_03_2025"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-109-17800-436-48_">cos-109-17800-436-48 <a id='"cos-arm64-109-17800-436-48"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/8fd68e02310ed038999ccf777b4a4ea1c4cfc22d
">COS-6.1.124</a></td>
<td>v24.0.9</td>
<td>v1.7.24</td>
<td><a href="https://storage.googleapis.com/cos-tools/17800.436.48/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Security</h3>
<p>Fixed CVE-2025-21690 in the Linux kernel.</p>
<h3>Fixed</h3>
<p>Upgraded sys-apps/diffutils to v3.11-r1.</p>
<h3>Feature</h3>
<p>Updated cos-gpu-installer to v2.4.8: Add the -skip-nvidia-smi flag to disable the execution of nvidia-smi verification during gpu driver installation.</p>
<h3>Security</h3>
<p>Upgraded moby/buildkit to v0.12.5. This fixes CVE-2024-23653 in app-containers/docker v24.0.9.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>February 24, 2025</title>
    <id>tag:google.com,2016:cos-109-release-notes#February_24_2025</id>
    <updated>2025-02-24T00:00:00-08:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#February_24_2025"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-109-17800-436-42_">cos-109-17800-436-42 <a id='"cos-arm64-109-17800-436-42"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/31a852343550ac6012872e47e53a4d2e8e2f4f13
">COS-6.1.124</a></td>
<td>v24.0.9</td>
<td>v1.7.24</td>
<td><a href="https://storage.googleapis.com/cos-tools/17800.436.42/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Security</h3>
<p>Fixed CVE-2024-57949 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2024-9287 in dev-lang/python.</p>
<h3>Change</h3>
<p>Updated app-admin/google-guest-configs to v20250207.00.</p>
<h3>Change</h3>
<p>Runtime sysctl changes:
<ul>
<li>Changed: fs.file-max: 812276 -&gt; 812258</li>
</ul></p>
<h3>Security</h3>
<p>Fixed CVE-2024-56664 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2024-57951 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2024-13176 in dev-libs/openssl.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-0395 in sys-libs/glibc.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>February 18, 2025</title>
    <id>tag:google.com,2016:cos-109-release-notes#February_18_2025</id>
    <updated>2025-02-18T00:00:00-08:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#February_18_2025"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-109-17800-436-37_">cos-109-17800-436-37 <a id='"cos-arm64-109-17800-436-37"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/35d0c2a788899c479eeeb355f9e2e7da0d33d5c3
">COS-6.1.124</a></td>
<td>v24.0.9</td>
<td>v1.7.24</td>
<td><a href="https://storage.googleapis.com/cos-tools/17800.436.37/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Security</h3>
<p>Fixed CVE-2025-0395 in sys-libs/glibc.</p>
<h3>Change</h3>
<p>Runtime sysctl changes:
<ul>
<li>Changed: fs.file-max: 812276 -&gt; 812258</li>
</ul></p>
<h3>Security</h3>
<p>Fixed CVE-2024-9287 in dev-lang/python.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>February 12, 2025</title>
    <id>tag:google.com,2016:cos-109-release-notes#February_12_2025</id>
    <updated>2025-02-12T00:00:00-08:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#February_12_2025"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-109-17800-436-33_">cos-109-17800-436-33 <a id='"cos-arm64-109-17800-436-33"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/6d837756c3d0b3b617c83468d345146a191adfeb
">COS-6.1.124</a></td>
<td>v24.0.9</td>
<td>v1.7.24</td>
<td><a href="https://storage.googleapis.com/cos-tools/17800.436.33/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Change</h3>
<p>Runtime sysctl changes:
<ul>
<li>Changed: fs.file-max: 812272 -&gt; 812276</li>
</ul></p>
<h3>Change</h3>
<p>Added support for TPU v6 devices.</p>
]]>
    </content>
  </entry>

</feed>
