Container Optimized OS 113 - Release notes

May 12, 2026

2026-05-12T00:00:00-07:00

Change

cos-113-18244-582-104

Kernel	Docker	Containerd	GPU Drivers
COS-6.1.161	v24.0.9	v1.7.27	See List

Fixed

Upgraded sys-apps/makedumpfile to v1.7.9.

May 07, 2026

2026-05-07T00:00:00-07:00

Change

cos-113-18244-582-103

Kernel	Docker	Containerd	GPU Drivers
COS-6.1.161	v24.0.9	v1.7.27	See List

Announcement

Security

Fixed CVE-2026-23411 in the Linux kernel.

Security

Fixed CVE-2026-31738 in the Linux kernel.

Security

Fixed CVE-2026-31752 in the Linux kernel.

Security

Fixed CVE-2026-43013 in the Linux kernel.

Security

Fixed CVE-2026-43024 in the Linux kernel.

Security

Fixed CVE-2026-43026 in the Linux kernel.

Security

Fixed CVE-2026-43027 in the Linux kernel.

Security

Fixed CVE-2026-43028 in the Linux kernel.

Security

Fixed CVE-2026-43030 in the Linux kernel.

Security

Fixed CVE-2026-43035 in the Linux kernel.

Security

Fixed CVE-2026-43037 in the Linux kernel.

Security

Fixed CVE-2026-43038 in the Linux kernel.

Security

Fixed CVE-2026-43040 in the Linux kernel.

Security

Fixed CVE-2026-43043 in the Linux kernel.

Security

Fixed CVE-2026-43054 in the Linux kernel.

Security

Fixed CVE-2026-43057 in the Linux kernel.

May 04, 2026

2026-05-04T00:00:00-07:00

Change

cos-113-18244-582-100

Kernel	Docker	Containerd	GPU Drivers
COS-6.1.161	v24.0.9	v1.7.27	See List

Fixed

Upgraded app-shells/dash to v0.5.13.3.

Fixed

Upgraded sys-process/lsof to v4.99.6.

Security

Fixed CVE-2025-37980 in the Linux kernel.

Security

Fixed CVE-2026-23268 in the Linux kernel.

Security

Fixed CVE-2026-23269 in the Linux kernel.

Security

Fixed CVE-2026-23403 in the Linux kernel.

Security

Fixed CVE-2026-23404 in the Linux kernel.

Security

Fixed CVE-2026-23405 in the Linux kernel.

Security

Fixed CVE-2026-23406 in the Linux kernel.

Security

Fixed CVE-2026-23407 in the Linux kernel.

Security

Fixed CVE-2026-23408 in the Linux kernel.

Security

Fixed CVE-2026-23409 in the Linux kernel.

Security

Fixed CVE-2026-23410 in the Linux kernel.

Security

Fixed CVE-2026-31446 in the Linux kernel.

Security

Fixed CVE-2026-31447 in the Linux kernel.

Security

Fixed CVE-2026-31452 in the Linux kernel.

Security

Fixed CVE-2026-31453 in the Linux kernel.

Security

Fixed CVE-2026-31454 in the Linux kernel.

Security

Fixed CVE-2026-31466 in the Linux kernel.

Security

Fixed CVE-2026-31469 in the Linux kernel.

Security

Fixed CVE-2026-31496 in the Linux kernel.

Security

Fixed CVE-2026-31515 in the Linux kernel.

Security

Fixed CVE-2026-31521 in the Linux kernel.

Security

Fixed CVE-2026-31523 in the Linux kernel.

Security

Fixed CVE-2026-31546 in the Linux kernel.

Security

Fixed CVE-2026-31555 in the Linux kernel.

Security

Fixed CVE-2026-31664 in the Linux kernel.

Security

Fixed CVE-2026-31665 in the Linux kernel.

Security

Fixed CVE-2026-31667 in the Linux kernel.

Security

Fixed CVE-2026-31671 in the Linux kernel.

Security

Fixed CVE-2026-31680 in the Linux kernel.

Security

Fixed CVE-2026-31682 in the Linux kernel.

Security

Fixed KCTF-42156f9 in the Linux kernel.

Security

Fixed KCTF-a9b8b18 in the Linux kernel.

April 27, 2026

2026-04-27T00:00:00-07:00

Change

cos-113-18244-582-86

Kernel	Docker	Containerd	GPU Drivers
COS-6.1.161	v24.0.9	v1.7.27	See List

Security

Fixed CVE-2026-0994 in dev-libs/protobuf.

Security

Fixed CVE-2026-23360 in the Linux kernel.

Security

Fixed CVE-2026-23401 in the Linux kernel.

Security

Fixed CVE-2026-23414 in the Linux kernel.

Security

Fixed CVE-2026-31414 in the Linux kernel.

Security

Fixed CVE-2026-31415 in the Linux kernel.

Security

Fixed CVE-2026-31416 in the Linux kernel.

Security

Fixed CVE-2026-31418 in the Linux kernel.

Security

Fixed CVE-2026-31421 in the Linux kernel.

Security

Fixed CVE-2026-31423 in the Linux kernel.

Security

Fixed CVE-2026-31424 in the Linux kernel.

Security

Fixed CVE-2026-31427 in the Linux kernel.

Security

Fixed CVE-2026-31428 in the Linux kernel.

Security

Updated spdystream to v0.5.1 for containerd. This fixed CVE-2026-35469.

April 13, 2026

2026-04-13T00:00:00-07:00

Change

cos-113-18244-582-80

Kernel	Docker	Containerd	GPU Drivers
COS-6.1.161	v24.0.9	v1.7.27	See List

Fixed

Upgraded app-shells/dash to v0.5.13.2.

Fixed

Upgraded sys-apps/hwdata to v0.401.

Fixed

Upgraded virtual/logger to v0-r3.

Security

Fixed CVE-2025-38162 in the Linux kernel.

Security

Fixed CVE-2025-39764 in the Linux kernel.

Security

Fixed CVE-2026-23154 in the Linux kernel.

Security

Fixed CVE-2026-23343 in the Linux kernel.

Security

Fixed CVE-2026-23439 in the Linux kernel.

Security

Fixed CVE-2026-23449 in the Linux kernel.

Security

Fixed CVE-2026-23452 in the Linux kernel.

Security

Fixed CVE-2026-23455 in the Linux kernel.

Security

Fixed CVE-2026-23456 in the Linux kernel.

Security

Fixed CVE-2026-23457 in the Linux kernel.

Security

Fixed CVE-2026-23458 in the Linux kernel.

Security

Fixed CVE-2026-31392 in the Linux kernel.

Security

Fixed CVE-2026-31400 in the Linux kernel.

Security

Fixed CVE-2026-31402 in the Linux kernel.

Security

Fixed CVE-2026-31403 in the Linux kernel.

Security

Fixed CVE-2026-33997 and CVE-2026-34040 in Docker.

April 06, 2026

2026-04-06T00:00:00-07:00

Change

cos-113-18244-582-62

Kernel	Docker	Containerd	GPU Drivers
COS-6.1.161	v24.0.9	v1.7.27	See List

Security

Fixed CVE-2025-38192 in the Linux kernel.

Security

Fixed CVE-2025-40135 in the Linux kernel.

Security

Fixed CVE-2025-68206 in the Linux kernel.

Security

Fixed CVE-2025-68239 in the Linux kernel.

Security

Fixed CVE-2025-68265 in the Linux kernel.

Security

Fixed CVE-2025-71161 in the Linux kernel.

Security

Fixed CVE-2026-23100 in the Linux kernel.

Security

Fixed CVE-2026-23113 in the Linux kernel.

Security

Fixed CVE-2026-23245 in the Linux kernel.

Security

Fixed CVE-2026-23270 in the Linux kernel.

Security

Fixed CVE-2026-23271 in the Linux kernel.

Security

Fixed CVE-2026-23277 in the Linux kernel.

Security

Fixed CVE-2026-23381 in the Linux kernel.

Security

Fixed CVE-2026-23397 in the Linux kernel.

Security

Fixed CVE-2026-23398 in the Linux kernel.

Security

Fixed KCTF-9df9578 in the Linux kernel.

March 30, 2026

2026-03-30T00:00:00-07:00

Change

cos-113-18244-582-55

Kernel	Docker	Containerd	GPU Drivers
COS-6.1.161	v24.0.9	v1.7.27	See List

Fixed

Updated cos-gpu-installer to v2.6.1.

Security

Fixed CVE-2026-23292 in the Linux kernel.

Security

Fixed CVE-2026-23293 in the Linux kernel.

Security

Fixed CVE-2026-23296 in the Linux kernel.

Security

Fixed CVE-2026-23300 in the Linux kernel.

Security

Fixed CVE-2026-23303 in the Linux kernel.

Security

Fixed CVE-2026-23304 in the Linux kernel.

Security

Fixed CVE-2026-23340 in the Linux kernel.

Security

Fixed CVE-2026-23352 in the Linux kernel.

Security

Fixed CVE-2026-23359 in the Linux kernel.

Security

Fixed CVE-2026-23368 in the Linux kernel.

Security

Fixed CVE-2026-23388 in the Linux kernel.

Security

Fixed CVE-2026-23391 in the Linux kernel.

Security

Fixed CVE-2026-23392 in the Linux kernel.

Security

Fixed CVE-2026-27135 in net-libs/nghttp2.

Security

Fixed CVE-2026-27448 in dev-python/pyopenssl.

Security

Fixed CVE-2026-27459 in dev-python/pyopenssl.

Security

Fixed CVE-2026-32597 with pyjwt package upgrade to 2.12.1.

Security

Fixed KCTF-329f0b9 in the Linux kernel.

Change

Runtime sysctl changes:

Changed: kernel.threads-max: 63503 -> 63215
Changed: user.max_cgroup_namespaces: 31751 -> 31607
Changed: user.max_ipc_namespaces: 31751 -> 31607
Changed: user.max_mnt_namespaces: 31751 -> 31607
Changed: user.max_net_namespaces: 31751 -> 31607
Changed: user.max_pid_namespaces: 31751 -> 31607
Changed: user.max_time_namespaces: 31751 -> 31607
Changed: user.max_user_namespaces: 31751 -> 31607
Changed: user.max_uts_namespaces: 31751 -> 31607

March 23, 2026

2026-03-23T00:00:00-07:00

Change

cos-113-18244-582-47

Kernel	Docker	Containerd	GPU Drivers
COS-6.1.161	v24.0.9	v1.7.27	See List

Fixed

Upgraded sys-apps/file to v5.47-r1.

Security

Fixed CVE-2024-26822 in the Linux kernel.

Security

Fixed CVE-2025-69647 in binutils-libs.

Security

Fixed CVE-2026-23243 in the Linux kernel.

Security

Updated net-misc/curl to v8.19.0. This resolves CVE-2026-1965 and CVE-2026-3783.

Security

Updated sys-libs/binutils-libs to 2.46.0. This resolves CVE-2025-69644.

March 17, 2026

2026-03-17T00:00:00-07:00

Change

cos-113-18244-582-42

Kernel	Docker	Containerd	GPU Drivers
COS-6.1.161	v24.0.9	v1.7.27	See List

Security

Fixed CVE-2026-23054 in the Linux kernel.

Security

Fixed KCTF-71e99ee in the Linux kernel.

March 10, 2026

2026-03-10T00:00:00-07:00

Change

cos-113-18244-582-40

Kernel	Docker	Containerd	GPU Drivers
COS-6.1.161	v24.0.9	v1.7.27	See List

Fixed

Upgraded sys-apps/file to v5.47.

Security

Fixed CVE-2023-53421 in the Linux kernel.

Security

Fixed CVE-2025-13601, CVE-2025-14512, CVE-2025-14087 in dev-libs/glib.

Security

Fixed CVE-2025-22026 in the Linux kernel.

Security

Fixed CVE-2025-37920 in the Linux kernel.

Security

Fixed CVE-2025-38201 in the Linux kernel.

Security

Fixed CVE-2025-38591 in the Linux kernel.

Security

Fixed CVE-2025-40251 in the Linux kernel.

Security

Fixed CVE-2025-71089 in the Linux kernel.

Security

Fixed CVE-2026-23176 in the Linux kernel.

Security

Fixed CVE-2026-23216 in the Linux kernel.

March 04, 2026

2026-03-04T00:00:00-08:00

Change

cos-113-18244-582-29

Kernel	Docker	Containerd	GPU Drivers
COS-6.1.161	v24.0.9	v1.7.27	See List

Change

Fixed an issue where most platforms would use only half of the available GVNIC TX queues.

Fixed

Upgraded net-dns/c-ares to v1.31.0.

Fixed

Upgraded net-misc/socat to v1.8.1.1.

Fixed

Upgraded sys-apps/less to v692.

Security

Fixed CVE-2025-58187 in dev-lang/go.

Security

Fixed CVE-2025-6075 in python.

Security

Fixed CVE-2025-60753 in libarchive.

Security

Fixed CVE-2025-61732 in dev-lang/go.

Security

Fixed CVE-2026-23086 in the Linux kernel.

Security

Fixed CVE-2026-23112 in the Linux kernel.

Security

Fixed CVE-2026-23119 in the Linux kernel.

Security

Fixed CVE-2026-23124 in the Linux kernel.

Security

Fixed CVE-2026-23145 in the Linux kernel.

Security

Fixed CVE-2026-23156 in the Linux kernel.

Security

Fixed CVE-2026-23168 in the Linux kernel.

Security

Fixed CVE-2026-23198 in the Linux kernel.

Security

Fixed CVE-2026-23205 in the Linux kernel.

Security

Fixed CVE-2026-23212 in the Linux kernel.

Security

Fixed CVE-2026-23193 in the Linux kernel.

Security

Fixed KCTF-e3f000f in the Linux kernel.

Security

Upgraded net-misc/curl to version 8.18.0. This fixes CVE-2025-10966, CVE-2025-13034, CVE-2025-14017, CVE-2025-14524, CVE-2025-14819, CVE-2025-15079, and CVE-2025-15224.

February 24, 2026

2026-02-24T00:00:00-08:00

Change

cos-113-18244-582-11

Kernel	Docker	Containerd	GPU Drivers
COS-6.1.161	v24.0.9	v1.7.27	See List

Security

Fixed CVE-2023-54285 in the Linux kernel.

Security

Fixed CVE-2025-15281 and CVE-2026-0861 in sys-libs/glibc.

Security

Fixed CVE-2025-38232 in the Linux kernel.

Security

Fixed CVE-2025-68725 in the Linux kernel.

Security

Fixed CVE-2026-22998 in the Linux kernel.

Security

Fixed CVE-2026-22999 in the Linux kernel.

Security

Fixed CVE-2026-23001 in the Linux kernel.

Security

Fixed CVE-2026-23003 in the Linux kernel.

Security

Fixed CVE-2026-23005 in the Linux kernel.

Security

Fixed CVE-2026-23010 in the Linux kernel.

Security

Fixed CVE-2026-23011 in the Linux kernel.

Security

Fixed CVE-2026-23025 in the Linux kernel.

Security

Fixed CVE-2026-23038 in the Linux kernel.

Security

Fixed CVE-2026-23069 in the Linux kernel.

Security

Fixed CVE-2026-23085 in the Linux kernel.

Security

Fixed CVE-2026-23095 in the Linux kernel.

Security

Fixed CVE-2026-23097 in the Linux kernel.

Security

Fixed CVE-2026-23099 in the Linux kernel.

Security

Fixed CVE-2026-23102 in the Linux kernel.

Security

Fixed CVE-2026-23103 in the Linux kernel.

Security

Fixed CVE-2026-23105 in the Linux kernel.

Security

Fixed CVE-2026-23107 in the Linux kernel.

Security

Fixed CVE-2026-23110 in the Linux kernel.

Security

Fixed KCTF-f41c5d1 in the Linux kernel.

Security

Fixed KCTF-f8db647 in the Linux kernel.

February 10, 2026

2026-02-10T00:00:00-08:00

Announcement

This is an LTS Refresh release.

Change

cos-113-18244-582-2

Kernel	Docker	Containerd	GPU Drivers
COS-6.1.161	v24.0.9	v1.7.27	See List

Fixed

Upgraded app-admin/google-guest-configs to v20251014.00.

Fixed

Upgraded app-containers/docker-credential-helpers to v0.9.4.

Fixed

Upgraded net-libs/libtirpc to v1.3.7.

Fixed

Upgraded sys-libs/libcap to v2.77.

Security

Updated dev-libs/libxml2 to version 2.14.6. This resolves CVE-2025-6021.

February 03, 2026

2026-02-03T00:00:00-08:00

Change

cos-113-18244-521-98

Kernel	Docker	Containerd	GPU Drivers
COS-6.1.155	v24.0.9	v1.7.27	See List

Fixed

Upgraded sys-apps/less to v691.

Security

Fixed CVE-2024-49968 in the Linux kernel.

Security

Fixed CVE-2025-71149 in the Linux kernel.

Security

Fixed CVE-2026-0915 in sys-apps/glibc.

Security

Fixed CVE-2026-22976 in the Linux kernel.

Security

Fixed CVE-2026-22977 in the Linux kernel.

Security

Fixed CVE-2026-22979 in the Linux kernel.

Security

Fixed CVE-2026-22980 in the Linux kernel.

Security

Fixed CVE-2026-22988 in the Linux kernel.

Security

Fixed CVE-2026-22994 in the Linux kernel.

Security

Fixed KCTF-2397e92 in the Linux kernel.

Security

Fixed KCTF-50da4b9 in the Linux kernel.

January 28, 2026

2026-01-28T00:00:00-08:00

Change

cos-113-18244-521-88

Kernel	Docker	Containerd	GPU Drivers
COS-6.1.155	v24.0.9	v1.7.27	See List

Fixed

Installed app-misc/c_rehash, which was unintentionally removed after the dev-libs/openssl update.

Security

Fixed CVE-2025-13836 in dev-lang/python.

Security

Fixed CVE-2025-13837 in dev-lang/python.

Security

Fixed CVE-2025-68795 in the Linux kernel.

Security

Fixed CVE-2025-68816 in the Linux kernel.

Security

Fixed CVE-2025-71102 in the Linux kernel.

Security

Fixed CVE-2025-71104 in the Linux kernel.

Security

Fixed CVE-2025-71113 in the Linux kernel.

Security

Fixed CVE-2025-71118 in the Linux kernel.

Security

Fixed CVE-2025-71120 in the Linux kernel.

Security

Fixed CVE-2025-71123 in the Linux kernel.

Security

Fixed CVE-2025-71125 in the Linux kernel.

Security

Fixed CVE-2025-71131 in the Linux kernel.

Security

Fixed CVE-2026-21441 in dev-python/urllib3.

Security

Updated dev-libs/openssl to v3.0.19. This resolves CVE-2025-15467.

January 20, 2026

2026-01-20T00:00:00-08:00

Change

cos-113-18244-521-74

Kernel	Docker	Containerd	GPU Drivers
COS-6.1.155	v24.0.9	v1.7.27	See List

Fixed

Updated dev-libs/openssl to v3.0.18

Security

Applied urllib3 patch for CVE-2024-37891.

Security

Fixed CVE-2025-12084 in dev-lang/python.

Security

Fixed CVE-2025-22111 in the Linux kernel.

Security

Fixed CVE-2025-38022 in the Linux kernel.

Security

Fixed CVE-2025-38129 in the Linux kernel.

Security

Fixed CVE-2025-61727 in dev-lang/go.

Security

Fixed CVE-2025-61729 in dev-lang/go.

Security

Fixed CVE-2025-68261 in the Linux kernel.

Security

Fixed CVE-2025-68264 in the Linux kernel.

Security

Fixed CVE-2025-68337 in the Linux kernel.

Security

Fixed CVE-2025-68349 in the Linux kernel.

Security

Fixed CVE-2025-68363 in the Linux kernel.

Security

Fixed CVE-2025-68724 in the Linux kernel.

Security

Fixed CVE-2025-68740 in the Linux kernel.

Security

Fixed CVE-2025-68780 in the Linux kernel.

Security

Fixed CVE-2025-68782 in the Linux kernel.

Security

Fixed CVE-2025-68788 in the Linux kernel.

Security

Fixed CVE-2025-68798 in the Linux kernel.

Security

Fixed CVE-2025-68803 in the Linux kernel.

Security

Fixed CVE-2025-68813 in the Linux kernel.

Security

Fixed CVE-2025-68814 in the Linux kernel.

Security

Fixed CVE-2025-68820 in the Linux kernel.

Security

Fixed CVE-2025-68821 in the Linux kernel.

Security

Fixed CVE-2025-71077 in the Linux kernel.

Security

Fixed CVE-2025-71084 in the Linux kernel.

Security

Fixed CVE-2025-71096 in the Linux kernel.

Security

Fixed CVE-2025-71097 in the Linux kernel.

Security

Fixed CVE-2025-71098 in the Linux kernel.

January 05, 2026

2026-01-05T00:00:00-08:00

Change

cos-113-18244-521-65

Kernel	Docker	Containerd	GPU Drivers
COS-6.1.155	v24.0.9	v1.7.27	See List

Change

Updated app-admin/sosreport to v4.10.1. Enabled containerd stack dump by default.

Fixed

Upgraded net-misc/socat to v1.8.1.0.

Fixed

Upgraded sys-apps/dmidecode to v3.7.

Security

Fixed CVE-2025-40346 in the Linux kernel.

Security

Fixed CVE-2025-40361 in the Linux kernel.

Security

Fixed CVE-2025-66471 and CVE-2025-66418 in dev-python/urllib3.

Security

Fixed CVE-2025-68171 in the Linux kernel.

Security

Fixed CVE-2025-68173 in the Linux kernel.

Security

Fixed CVE-2025-68185 in the Linux kernel.

Security

Fixed CVE-2025-68191 in the Linux kernel.

Security

Fixed CVE-2025-68200 in the Linux kernel.

Security

Fixed CVE-2025-68224 in the Linux kernel.

Security

Fixed CVE-2025-68229 in the Linux kernel.

Security

Fixed CVE-2025-68231 in the Linux kernel.

Security

Fixed CVE-2025-68241 in the Linux kernel.

Security

Fixed CVE-2025-68295 in the Linux kernel.

Security

Fixed CVE-2025-68321 in the Linux kernel.

Change

Runtime sysctl changes:

Changed: fs.file-max: 812054 -> 812031

December 16, 2025

2025-12-16T00:00:00-08:00

Change

cos-113-18244-521-56

Kernel	Docker	Containerd	GPU Drivers
COS-6.1.155	v24.0.9	v1.7.27	See List

Security

Fixed KCTF-f05a4f9 in the Linux kernel.

Change

Runtime sysctl changes:

Changed: fs.file-max: 812044 -> 812054

December 15, 2025

2025-12-15T00:00:00-08:00

Change

cos-113-18244-521-55

Kernel	Docker	Containerd	GPU Drivers
COS-6.1.155	v24.0.9	v1.7.27	See List

Feature

Added support for NVIDIA drivers v580.95.05 and v580.105.08.

Fixed

Fixed CVE-2025-40271 in the Linux kernel.

Fixed

Fixed CVE-2025-40273 in the Linux kernel.

Security

Fixed CVE-2024-25621 and CVE-2025-64329 in app-containers/containerd.

Security

Fixed CVE-2025-38057 in the Linux kernel.

Security

Fixed CVE-2025-38678 in the Linux kernel.

Security

Fixed CVE-2025-40083 in the Linux kernel.

Security

Fixed CVE-2025-40220 in the Linux kernel.

Security

Fixed CVE-2025-40248 in the Linux kernel.

Security

Fixed CVE-2025-40256 in the Linux kernel.

Security

Fixed CVE-2025-40292 in the Linux kernel.

Security

Fixed CVE-2025-40293 in the Linux kernel.

Security

Fixed CVE-2025-40297 in the Linux kernel.

Security

Fixed CVE-2025-40319 in the Linux kernel.

Security

Fixed CVE-2025-40324 in the Linux kernel.

Security

Fixed CVE-2025-40341 in the Linux kernel.

Security

Fixed CVE-2025-47914 and CVE-2025-58181 in dev-go/crypto.

Change

Runtime sysctl changes:

Changed: fs.file-max: 812052 -> 812044

December 10, 2025

2025-12-10T00:00:00-08:00

Change

cos-113-18244-521-45

Kernel	Docker	Containerd	GPU Drivers
COS-6.1.155	v24.0.9	v1.7.27	See List

Fixed

Upgraded app-admin/google-guest-configs to v20251014.00.

Security

Fixed CVE-2025-40231 in the Linux kernel.

Change

Runtime sysctl changes:

Changed: fs.file-max: 811999 -> 812052

December 04, 2025

2025-12-04T00:00:00-08:00

Change

cos-113-18244-521-41

Kernel	Docker	Containerd	GPU Drivers
COS-6.1.155	v24.0.9	v1.7.27	See List

Fixed

Made the google-guest-agent more resilient to network link flakes.

Security

Updated vim & vim-core to version 9.1.1652. This fixes CVE-2025-53905, CVE-2025-53906, CVE-2025-9390.

Change

Runtime sysctl changes:

Changed: fs.file-max: 812031 -> 811999

December 02, 2025

2025-12-02T00:00:00-08:00

Change

cos-113-18244-521-39

Kernel	Docker	Containerd	GPU Drivers
COS-6.1.155	v24.0.9	v1.7.27	See List

Fixed

Fixed an issue in app-containers/runc that caused runc to use more file descriptors than intended.

Security

Fixed CVE-2025-40123 in the Linux kernel.

Security

Fixed CVE-2025-40125 in the Linux kernel.

Security

Fixed CVE-2025-40153 in the Linux kernel.

Security

Fixed CVE-2025-40167 in the Linux kernel.

Security

Fixed CVE-2025-40173 in the Linux kernel.

Security

Fixed CVE-2025-40176 in the Linux kernel.

Security

Fixed CVE-2025-40178 in the Linux kernel.

Security

Fixed CVE-2025-40179 in the Linux kernel.

Security

Fixed CVE-2025-40183 in the Linux kernel.

Security

Fixed CVE-2025-40186 in the Linux kernel.

Security

Fixed CVE-2025-40190 in the Linux kernel.

Security

Fixed CVE-2025-40194 in the Linux kernel.

Security

Fixed CVE-2025-40198 in the Linux kernel.

Security

Fixed CVE-2025-40200 in the Linux kernel.

Security

Fixed CVE-2025-40201 in the Linux kernel.

Security

Fixed KCTF-60e6489 in the Linux Kernel.

Security

Fixed KCTF-b441cf3 in the Linux kernel.

November 17, 2025

2025-11-17T00:00:00-08:00

Change

cos-113-18244-521-23

Kernel	Docker	Containerd	GPU Drivers
COS-6.1.155	v24.0.9	v1.7.27	See List

Change

Updated app-containers/runc to v1.2.8.

Security

Fixed CVE-2025-40040 in the Linux kernel.

Security

Fixed CVE-2025-40109 in the Linux kernel.

Change

Runtime sysctl changes:

Changed: fs.file-max: 812054 -> 812007

November 11, 2025

2025-11-11T00:00:00-08:00

Change

cos-113-18244-521-16

Kernel	Docker	Containerd	GPU Drivers
COS-6.1.155	v24.0.9	v1.7.27	See List

Security

Fixed CVE-2025-40078 in the Linux kernel.

Security

Fixed CVE-2025-40099 in the Linux kernel.

Security

Fixed CVE-2025-40105 in the Linux kernel.

Security

Fixed CVE-2025-40103 in the Linux kernel.

Change

Runtime sysctl changes:

Changed: fs.file-max: 812016 -> 812054

Fixed

Upgraded sys-apps/makedumpfile to v1.7.8.

Security

Fixed CVE-2025-40070 in the Linux kernel.

November 07, 2025

2025-11-07T00:00:00-08:00

Change

cos-113-18244-521-11

Kernel	Docker	Containerd	GPU Drivers
COS-6.1.155	v24.0.9	v1.7.27	See List

Security

Fixed CVE-2025-40044 in the Linux kernel.

Change

Runtime sysctl changes:

Changed: fs.file-max: 812007 -> 812016

Security

Fixed CVE-2025-40042 in the Linux kernel.

Security

Fixed CVE-2025-31133, CVE-2025-52565, and CVE-2025-52881 in app-containers/runc.

Security

Fixed CVE-2025-40035 in the Linux kernel.

Security

Fixed CVE-2025-40026 in the Linux kernel.

Security

Fixed CVE-2025-40027 in the Linux kernel.

Security

Fixed CVE-2025-40049 in the Linux kernel.

November 03, 2025

2025-11-03T00:00:00-08:00

Change

cos-113-18244-521-8

Kernel	Docker	Containerd	GPU Drivers
COS-6.1.155	v24.0.9	v1.7.27	See List

Change

Runtime sysctl changes:

Changed: fs.file-max: 812040 -> 812007

October 27, 2025

2025-10-27T00:00:00-07:00

Change

cos-113-18244-521-7

Kernel	Docker	Containerd	GPU Drivers
COS-6.1.155	v24.0.9	v1.7.27	See List

Announcement

This is an LTS Refresh release.

Change

Updated app-containers/runc to v1.2.7.

Fixed

Upgraded sys-apps/hwdata to v0.400.

Security

Fixed CVE-2025-11412 in binutils-libs.

Security

Fixed CVE-2025-39998 in the Linux kernel.

Security

Fixed CVE-2025-11494 in binutils-libs.

Fixed

Upgraded app-admin/google-guest-configs to v20250805.00.

Security

Fixed CVE-2025-39996 in the Linux kernel.

Fixed

Upgraded net-nds/rpcbind to v1.2.8.

Fixed

Upgraded app-admin/sudo to v1.9.17_p2.

Security

Fixed CVE-2025-11495 in binutils-libs.

Fixed

Added support for NVIDIA driver v535.274.02 and v570.195.03. Updated default driver version to v535.274.02 for devices using 535 as the default driver. Updated the default driver version to v570.195.03 for NVIDIA_H200.

Fixed

Upgraded sys-apps/less to v685.

Fixed

Upgraded dev-db/sqlite to v3.50.3.

Security

Fixed CVE-2025-11413 and CVE-2025-11414 in binutils-libs.

October 20, 2025

2025-10-20T00:00:00-07:00

Change

cos-113-18244-448-79

Kernel	Docker	Containerd	GPU Drivers
COS-6.1.151	v24.0.9	v1.7.27	See List

Security

Fixed KCTF-6bb73db in the Linux Kernel.

Fixed

Reduced gcr_wait_online retry gap.

Security

Fixed CVE-2025-41244 in app-emulation/open-vm-tools.

Security

Fixed CVE-2025-39980 in the Linux kernel.

Security

Fixed CVE-2025-39977 in the Linux kernel.

Fixed

Added task information collection to sosreports.

October 13, 2025

2025-10-13T00:00:00-07:00

Change

cos-113-18244-448-73

Kernel	Docker	Containerd	GPU Drivers
COS-6.1.151	v24.0.9	v1.7.27	See List

Security

Fixed CVE-2025-23143 in the Linux kernel.

Fixed

Upgraded sys-apps/hwdata to v0.399.

Security

Fixed CVE-2025-39953 in the Linux kernel.

Change

Runtime sysctl changes:

Changed: fs.file-max: 811950 -> 812035

Security

Fixed CVE-2025-11081, CVE-2025-11082 and CVE-2025-11083 in sys-libs/binutils-libs.

Fixed

Updated toolbox container image tag to v20251002.

Security

Fixed CVE-2025-39931 in the Linux kernel.

Security

Fixed KCTF-134121b in the Linux kernel.

October 06, 2025

2025-10-06T00:00:00-07:00

Change

cos-113-18244-448-63

Kernel	Docker	Containerd	GPU Drivers
COS-6.1.151	v24.0.9	v1.7.27	See List

Security

Fixed KCTF-1b34cbb in the Linux kernel.

Security

Fixed CVE-2025-39913 in the Linux kernel.

Security

Fixed CVE-2025-39914 in the Linux kernel.

Security

Fixed CVE-2025-50181 in dev-python/urllib3.

Change

Runtime sysctl changes:

Changed: fs.file-max: 812039 -> 811950