Container Optimized OS 117 - Release notes

July 09, 2026

2026-07-09T00:00:00-07:00

Change

cos-117-18613-675-7

Kernel	Docker	Containerd	GPU Drivers
COS-6.6.143	v24.0.9	v1.7.31	See List

Fixed

Upgraded app-admin/oslogin to v20260626.00.

Fixed

Upgraded app-containers/docker-credential-helpers to v0.9.8.

Fixed

Upgraded dev-db/sqlite to v3.53.3.

Fixed

Upgraded dev-libs/expat to v2.8.2.

Fixed

Upgraded sys-apps/acl to v2.4.0.

Security

Fixed CVE-2026-53359 in the Linux kernel.

Security

Fixed KCTF-d82ba05 in the Linux kernel.

July 06, 2026

2026-07-06T00:00:00-07:00

Change

cos-117-18613-675-2

Kernel	Docker	Containerd	GPU Drivers
COS-6.6.143	v24.0.9	v1.7.31	See List

Change

Upgraded net-misc/rsync to v3.4.4.

Change

Upgraded the Linux kernel to v6.6.143. It resolves CVE-2026-52908,CVE-2026-52910, CVE-2026-52912,CVE-2026-52920, CVE-2026-52921,CVE-2026-52923, CVE-2026-52925,CVE-2026-52927, CVE-2026-52928,CVE-2026-52930, CVE-2026-52933,CVE-2026-52936, CVE-2026-52942,CVE-2026-52943, CVE-2026-52945,CVE-2026-52946, CVE-2026-52967,CVE-2026-52969, CVE-2026-52970,CVE-2026-52972, CVE-2026-52974,CVE-2026-52975, CVE-2026-52977,CVE-2026-52981, CVE-2026-52984,CVE-2026-52986, CVE-2026-52989,CVE-2026-52998, CVE-2026-52999,CVE-2026-53001, CVE-2026-53002,CVE-2026-53003, CVE-2026-53006,CVE-2026-53012, CVE-2026-53013,CVE-2026-53021, CVE-2026-53032,CVE-2026-53033, CVE-2026-53034,CVE-2026-53035, CVE-2026-53036,CVE-2026-53050, CVE-2026-53060,CVE-2026-53061, CVE-2026-53062,CVE-2026-53063, CVE-2026-53064,CVE-2026-53069, CVE-2026-53074,CVE-2026-53075, CVE-2026-53076,CVE-2026-53080, CVE-2026-53083,CVE-2026-53094, CVE-2026-53096,CVE-2026-53111, CVE-2026-53126.

Fixed

Upgraded app-shells/dash to v0.5.13.4-r2.

Fixed

Upgraded net-fs/cifs-utils to v7.6, Upgraded sys-libs/talloc to v2.4.4-r1.

Fixed

Upgraded net-misc/socat to v1.8.1.3.

Security

Fixed CVE-2026-35388 in net-misc/openssh.

Security

Fixed CVE-2026-40226 in sys-apps/systemd.

Security

Fixed CVE-2026-52930 in the Linux kernel.

Security

Fixed CVE-2026-53033 in the Linux kernel.

Security

Fixed CVE-2026-53131 in the Linux kernel.

Security

Fixed CVE-2026-53134 in the Linux kernel.

Security

Fixed CVE-2026-53154 in the Linux kernel.

Security

Fixed CVE-2026-53168 in the Linux kernel.

Security

Fixed CVE-2026-53181 in the Linux kernel.

Security

Fixed CVE-2026-53184 in the Linux kernel.

Security

Fixed CVE-2026-53185 in the Linux kernel.

Security

Fixed CVE-2026-53189 in the Linux kernel.

Security

Fixed CVE-2026-53199 in the Linux kernel.

Security

Fixed CVE-2026-53212 in the Linux kernel.

Security

Fixed CVE-2026-53218 in the Linux kernel.

Security

Fixed CVE-2026-53219 in the Linux kernel.

Security

Fixed CVE-2026-53223 in the Linux kernel.

Security

Fixed CVE-2026-53230 in the Linux kernel.

Security

Fixed CVE-2026-53232 in the Linux kernel.

Security

Fixed CVE-2026-53236 in the Linux kernel.

Security

Fixed CVE-2026-53249 in the Linux kernel.

Security

Fixed CVE-2026-53264 in the Linux kernel.

Security

Fixed CVE-2026-53265 in the Linux kernel.

Security

Fixed CVE-2026-53266 in the Linux kernel.

Security

Fixed CVE-2026-53267 in the Linux kernel.

Security

Fixed CVE-2026-53268 in the Linux kernel.

Security

Fixed CVE-2026-53269 in the Linux kernel.

Security

Fixed CVE-2026-53270 in the Linux kernel.

Security

Fixed CVE-2026-53275 in the Linux kernel.

June 29, 2026

2026-06-29T00:00:00-07:00

Change

cos-117-18613-613-77

Kernel	Docker	Containerd	GPU Drivers
COS-6.6.137	v24.0.9	v1.7.31	See List

Change

Updated app-admin/sosreport to v4.10.2, app-containers/docker-credential-gcr to v2.1.32, app-containers/docker-credential-helpers to v0.9.7, app-containers/nvidia-container-toolkit to v1.17.9, dev-libs/isa-l to v2.31.1, dev-python/oauthlib to v3.0.2, net-fs/nfs-utils to v2.6.4, sec-policy/apparmor-profiles to v3.1.7, sys-apps/apparmor to v3.1.7, sys-libs/libapparmor to v3.1.7.

Change

Updated app-editors/vim to v9.1.2148, app-editors/vim-core to v9.1.2148, dev-libs/libtraceevent to v1.7.3, dev-libs/libtracefs to v1.6.4, net-firewall/conntrack-tools to v1.4.9, sys-fs/fuse to v2.9.9, sys-fs/fuse-common to v3.10.5.

Change

Updated gzip to v1.14_p20260502, xz-utils to v5.4.7, zstd to v1.5.7, python-exec-conf to v2.4.10, expat to v2.8.1, json-c to v0.16.20220414, libaio to v0.3.113, xxhash to v0.8.3, PySocks to v1.6.8, cryptography to v39.0.2, markupsafe to v2.1.5, ptyprocess to v0.5.2, pyrsistent to v0.14.11, python-magic to v0.4.27, pyyaml to v6.0.3, rfc3339-validator to v0.1.4, rfc3987 to v1.3.8, urllib3 to v1.26.20, iptables to v1.8.13, mawk to v1.3.4_p20260302, lvm2 to v2.03.39, binutils-libs to v2.46.1, libxcrypt to v4.4.38.

Fixed

Upgraded app-admin/logrotate to v3.22.0-r1.

Fixed

Upgraded app-shells/dash to v0.5.13.4-r1.

Fixed

Upgraded dev-db/sqlite to v3.53.1.

Fixed

Upgraded net-misc/curl to v8.20.0-r1.

Fixed

Upgraded sys-apps/gentoo-functions to v1.7.7.

Fixed

Upgraded sys-apps/less to v704.

Security

Fixed CVE-2026-11822, CVE-2026-11824 in dev-db/sqlite.

Security

Fixed CVE-2026-43088 in the Linux kernel.

Security

Fixed CVE-2026-43116 in the Linux kernel.

Security

Fixed CVE-2026-43129 in the Linux kernel.

Security

Fixed CVE-2026-45850 in the Linux kernel.

Security

Fixed CVE-2026-46321 in the Linux kernel.

Security

Fixed CVE-2026-46322 in the Linux kernel.

Security

Fixed CVE-2026-52908 in the Linux kernel.

Security

Fixed CVE-2026-52910 in the Linux kernel.

Security

Fixed CVE-2026-52912 in the Linux kernel.

Security

Fixed CVE-2026-52920 in the Linux kernel.

Security

Fixed CVE-2026-52921 in the Linux kernel.

Security

Fixed CVE-2026-52923 in the Linux kernel.

Security

Fixed CVE-2026-52925 in the Linux kernel.

Security

Fixed CVE-2026-52927 in the Linux kernel.

Security

Fixed CVE-2026-52928 in the Linux kernel.

Security

Fixed CVE-2026-52933 in the Linux kernel.

Security

Fixed CVE-2026-52936 in the Linux kernel.

Security

Fixed CVE-2026-52942 in the Linux kernel.

Security

Fixed CVE-2026-52943 in the Linux kernel.

Security

Fixed CVE-2026-52969 in the Linux kernel.

Security

Fixed CVE-2026-52970 in the Linux kernel.

Security

Fixed CVE-2026-52974 in the Linux kernel.

Security

Fixed CVE-2026-52977 in the Linux kernel.

Security

Fixed CVE-2026-52984 in the Linux kernel.

Security

Fixed CVE-2026-52986 in the Linux kernel.

Security

Fixed CVE-2026-52989 in the Linux kernel.

Security

Fixed CVE-2026-52998 in the Linux kernel.

Security

Fixed CVE-2026-52999 in the Linux kernel.

Security

Fixed CVE-2026-53001 in the Linux kernel.

Security

Fixed CVE-2026-53002 in the Linux kernel.

Security

Fixed CVE-2026-53003 in the Linux kernel.

Security

Fixed CVE-2026-53006 in the Linux kernel.

Security

Fixed CVE-2026-53012 in the Linux kernel.

Security

Fixed CVE-2026-53013 in the Linux kernel.

Security

Fixed CVE-2026-53021 in the Linux kernel.

Security

Fixed CVE-2026-53032 in the Linux kernel.

Security

Fixed CVE-2026-53034 in the Linux kernel.

Security

Fixed CVE-2026-53035 in the Linux kernel.

Security

Fixed CVE-2026-53036 in the Linux kernel.

Security

Fixed CVE-2026-53050 in the Linux kernel.

Security

Fixed CVE-2026-53060 in the Linux kernel.

Security

Fixed CVE-2026-53062 in the Linux kernel.

Security

Fixed CVE-2026-53063 in the Linux kernel.

Security

Fixed CVE-2026-53064 in the Linux kernel.

Security

Fixed CVE-2026-53069 in the Linux kernel.

Security

Fixed CVE-2026-53074 in the Linux kernel.

Security

Fixed CVE-2026-53075 in the Linux kernel.

Security

Fixed CVE-2026-53076 in the Linux kernel.

Security

Fixed CVE-2026-53080 in the Linux kernel.

Security

Fixed CVE-2026-53083 in the Linux kernel.

Security

Fixed CVE-2026-53094 in the Linux kernel.

Security

Fixed CVE-2026-53126 in the Linux kernel.

Security

Fixed CVE-2026-7210 in dev-lang/python.

Security

Upgraded dev-libs/openssl to v3.0.21 to fix CVE-2026-34180, CVE-2026-45447,CVE-2026-45445,CVE-2026-9076,CVE-2026-7383,CVE-2026-34182.

June 22, 2026

2026-06-22T00:00:00-07:00

Change

cos-117-18613-613-62

Kernel	Docker	Containerd	GPU Drivers
COS-6.6.137	v24.0.9	v1.7.31	See List

Announcement

Minor changes.

June 18, 2026

2026-06-18T00:00:00-07:00

Change

cos-117-18613-613-61

Kernel	Docker	Containerd	GPU Drivers
COS-6.6.137	v24.0.9	v1.7.31	See List

Change

Updated oslogin to v20260605.00.

Security

Fix CVE-2026-41567 in app-containers/docker.

Security

Fix CVE-2026-41568 in app-containers/docker.

Security

Fix CVE-2026-42306 in app-containers/docker.

Security

Fixed CVE-2025-13462 in dev-lang/python.

Security

Fixed CVE-2026-46323 in the Linux kernel.

Security

Fixed CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, and CVE-2026-47262 in app-containers/containerd.

June 15, 2026

2026-06-15T00:00:00-07:00

Change

cos-117-18613-613-56

Kernel	Docker	Containerd	GPU Drivers
COS-6.6.137	v24.0.9	v1.7.31	See List

Fixed

Fixed a race condition triggered by ext4 online resize that rarely causes machines to fail to boot.

Fixed

Upgraded cos-gpu-installer to v2.7.4.

Fixed

Upgraded dev-libs/libusb to v1.0.30.

Fixed

Upgraded sys-apps/less to v702.

Security

Fixed CVE-2024-56647 in the Linux kernel.

Security

Fixed CVE-2025-38584 in the Linux kernel.

Security

Fixed CVE-2026-23272 in the Linux kernel.

Security

Fixed CVE-2026-23394 in the Linux kernel.

Security

Fixed CVE-2026-31527 in the Linux kernel.

Security

Fixed CVE-2026-43492 in the Linux kernel.

Security

Fixed CVE-2026-43496 in the Linux kernel.

Security

Fixed CVE-2026-43503 in the Linux kernel.

Security

Fixed CVE-2026-46243 in the Linux kernel.

Security

Fixed CVE-2026-46244 in the Linux kernel.

Security

Fixed CVE-2026-46274 in the Linux kernel.

Security

Fixed CVE-2026-46289 in the Linux kernel.

Security

Fixed CVE-2026-46294 in the Linux kernel.

Security

Fixed CVE-2026-46303 in the Linux kernel.

Security

Fixed CVE-2026-46304 in the Linux kernel.

Security

Fixed CVE-2026-46306 in the Linux kernel.

Security

Updated dev-python/pyjwt to v2.13.0. This fixes CVE-2026-48522, CVE-2026-48524, CVE-2026-48525, CVE-2026-485256.

June 04, 2026

2026-06-04T00:00:00-07:00

Change

cos-117-18613-613-40

Kernel	Docker	Containerd	GPU Drivers
COS-6.6.137	v24.0.9	v1.7.31	See List

Change

Updated minijail to r188.

Security

Fixed CVE-2026-43303 in the Linux kernel.

Security

Fixed CVE-2026-43499 in the Linux kernel.

Security

Fixed CVE-2026-45838 in the Linux kernel.

Security

Fixed CVE-2026-45839 in the Linux kernel.

Security

Fixed CVE-2026-45841 in the Linux kernel.

Security

Fixed CVE-2026-45842 in the Linux kernel.

Security

Fixed CVE-2026-45843 in the Linux kernel.

Security

Fixed CVE-2026-45844 in the Linux kernel.

Security

Fixed CVE-2026-45987 in the Linux kernel.

Security

Fixed CVE-2026-45991 in the Linux kernel.

Security

Fixed CVE-2026-45997 in the Linux kernel.

Security

Fixed CVE-2026-46005 in the Linux kernel.

Security

Fixed CVE-2026-46015 in the Linux kernel.

Security

Fixed CVE-2026-46021 in the Linux kernel.

Security

Fixed CVE-2026-46033 in the Linux kernel.

Security

Fixed CVE-2026-46037 in the Linux kernel.

Security

Fixed CVE-2026-46040 in the Linux kernel.

Security

Fixed CVE-2026-46046 in the Linux kernel.

Security

Fixed CVE-2026-46050 in the Linux kernel.

Security

Fixed CVE-2026-46051 in the Linux kernel.

Security

Fixed CVE-2026-46065 in the Linux kernel.

Security

Fixed CVE-2026-46070 in the Linux kernel.

Security

Fixed CVE-2026-46082 in the Linux kernel.

Security

Fixed CVE-2026-46086 in the Linux kernel.

Security

Fixed CVE-2026-46089 in the Linux kernel.

Security

Fixed CVE-2026-46094 in the Linux kernel.

Security

Fixed CVE-2026-46101 in the Linux kernel.

Security

Fixed CVE-2026-46102 in the Linux kernel.

Security

Fixed CVE-2026-46106 in the Linux kernel.

Security

Fixed CVE-2026-46107 in the Linux kernel.

Security

Fixed CVE-2026-46115 in the Linux kernel.

Security

Fixed CVE-2026-46116 in the Linux kernel.

Security

Fixed CVE-2026-46120 in the Linux kernel.

Security

Fixed CVE-2026-46124 in the Linux kernel.

Security

Fixed CVE-2026-46131 in the Linux kernel.

Security

Fixed CVE-2026-46132 in the Linux kernel.

Security

Fixed CVE-2026-46149 in the Linux kernel.

Security

Fixed CVE-2026-46150 in the Linux kernel.

Security

Fixed CVE-2026-46155 in the Linux kernel.

Security

Fixed CVE-2026-46161 in the Linux kernel.

Security

Fixed CVE-2026-46172 in the Linux kernel.

Security

Fixed CVE-2026-46173 in the Linux kernel.

Security

Fixed CVE-2026-46174 in the Linux kernel.

Security

Fixed CVE-2026-46176 in the Linux kernel.

Security

Fixed CVE-2026-46185 in the Linux kernel.

Security

Fixed CVE-2026-46195 in the Linux kernel.

Security

Fixed CVE-2026-46196 in the Linux kernel.

Security

Fixed CVE-2026-46209 in the Linux kernel.

Security

Fixed CVE-2026-46214 in the Linux kernel.

Security

Fixed CVE-2026-46234 in the Linux kernel.

Security

Fixed CVE-2026-46300 in the Linux kernel.

June 01, 2026

2026-06-01T00:00:00-07:00

Change

cos-117-18613-613-29

Kernel	Docker	Containerd	GPU Drivers
COS-6.6.137	v24.0.9	v1.7.31	See List

Change

Updated Python to v3.8.20.

Change

Updated app-containers/runc from v1.2.8 to v1.2.9

Fixed

Added support for NVIDIA driver v580.159.04.

Security

Fixed EFI variable OOB read in grub config parsing.

May 26, 2026

2026-05-26T00:00:00-07:00

Change

cos-117-18613-613-25

Kernel	Docker	Containerd	GPU Drivers
COS-6.6.137	v24.0.9	v1.7.31	See List

Announcement

This update contains several package upgrades to the latest patch version to ensure security, along with package patches for known CVEs.

Change

Update sys-process/audit to v3.0.9.

Change

Updated glib to v2.86.5.

Change

Updated sys-libs/pam to v1.5.3.

Change

Upgraded app-containers/containerd from v1.7.29 to v1.7.31.

Security

Fixed CVE-2026-23171 in the Linux kernel.

Security

Fixed CVE-2026-23473 in the Linux kernel.

Security

Fixed CVE-2026-31449 in the Linux kernel.

Security

Fixed CVE-2026-31709 in the Linux kernel.

Security

Fixed CVE-2026-43109 in the Linux kernel.

Security

Fixed CVE-2026-44431 in dev-python/urllib3.

Security

Fixed CVE-2026-6732 in dev-libs/libxml2.

Security

Fixed KCTF-9e6bf14 in the Linux kernel.

Security

Updated dev-lang/go to 1.25.10. This fixes CVE-2026-39817,CVE-2026-39825,CVE-2026-33814,CVE-2026-39819,CVE-2026-39826,CVE-2026-39823,CVE-2026-39820,CVE-2026-42499,CVE-2026-39836.

Security

Updated net-misc/curl to v8.20. This fixes CVE-2026-5545,CVE-2026-4873,CVE-2026-6429,CVE-2026-7168,CVE-2026-6253,CVE-2026-6276,CVE-2026-7009,CVE-2026-5773.

May 21, 2026

2026-05-21T00:00:00-07:00

Change

cos-117-18613-613-15

Kernel	Docker	Containerd	GPU Drivers
COS-6.6.137	v24.0.9	v1.7.29	See List

Fixed

Added support for NVIDIA driver v535.309.01.

Fixed

Added support for NVIDIA driver v580.159.03.

Fixed

Upgraded app-shells/dash to v0.5.13.4.

Fixed

Upgraded cos-gpu-installer to v2.7.1.

Security

Fixed CVE-2026-46333 in the Linux kernel.

Security

Fixed argument injection in toolbox.

May 11, 2026

2026-05-11T00:00:00-07:00

Change

cos-117-18613-613-7

Kernel	Docker	Containerd	GPU Drivers
COS-6.6.137	v24.0.9	v1.7.29	See List

Announcement

Addressed internal infrastructure issues. No substantial change.

May 08, 2026

2026-05-08T00:00:00-07:00

Change

cos-117-18613-613-5

Kernel	Docker	Containerd	GPU Drivers
COS-6.6.137	v24.0.9	v1.7.29	See List

Announcement

This is an LTS Refresh release.

Security

Fixed CVE-2026-43284 (dirtyfrag) in the Linux kernel.

Fixed

Upgraded net-fs/cifs-utils to v7.5.

Fixed

Upgraded sys-libs/talloc to v2.4.4.

Fixed

Upgraded net-libs/libnetfilter_conntrack to v1.1.1.

Fixed

Upgraded net-libs/libtirpc to v1.3.7-r2.

Fixed

Upgraded sys-apps/acl to v2.3.2-r3.

Fixed

Upgraded sys-libs/libseccomp to v2.6.0-r3.

Fixed

Upgraded sys-process/procps to v4.0.6.

Security

Fixed CVE-2026-35385 in net-misc/openssh.

Security

Upgraded dev-libs/libgcrypt to v1.10.4 to fix CVE-2026-41989.

Change

Runtime sysctl changes:

Added: net.ipv4.tcp_pingpong_thresh: 1

May 04, 2026

2026-05-04T00:00:00-07:00

Change

cos-117-18613-534-110

Kernel	Docker	Containerd	GPU Drivers
COS-6.6.123	v24.0.9	v1.7.29	See List

Fixed

Upgraded app-shells/dash to v0.5.13.3.

Fixed

Upgraded sys-apps/makedumpfile to v1.7.9.

Security

Fixed CVE-2025-22125 in the Linux kernel.

Security

Fixed CVE-2026-23255 in the Linux kernel.

Security

Fixed CVE-2026-23302 in the Linux kernel.

Security

Fixed CVE-2026-23374 in the Linux kernel.

Security

Fixed CVE-2026-23399 in the Linux kernel.

Security

Fixed CVE-2026-31407 in the Linux kernel.

Security

Fixed CVE-2026-31429 in the Linux kernel.

Security

Fixed CVE-2026-31546 in the Linux kernel.

Security

Fixed CVE-2026-31555 in the Linux kernel.

Security

Fixed CVE-2026-31628 in the Linux kernel.

Security

Fixed CVE-2026-31648 in the Linux kernel.

Security

Fixed CVE-2026-31664 in the Linux kernel.

Security

Fixed CVE-2026-31665 in the Linux kernel.

Security

Fixed CVE-2026-31667 in the Linux kernel.

Security

Fixed CVE-2026-31671 in the Linux kernel.

Security

Fixed CVE-2026-31673 in the Linux kernel.

Security

Fixed CVE-2026-31680 in the Linux kernel.

Security

Fixed CVE-2026-31681 in the Linux kernel.

Security

Fixed CVE-2026-31682 in the Linux kernel.

Security

Fixed CVE-2026-31688 in the Linux kernel.

Security

Upgraded openssl to v3.0.20 to fix CVE-2026-28387, CVE-2026-28388,CVE-2026-28389,CVE-2026-28390,CVE-2026-31790.

May 01, 2026

2026-05-01T00:00:00-07:00

Change

cos-117-18613-534-106

Kernel	Docker	Containerd	GPU Drivers
COS-6.6.123	v24.0.9	v1.7.29	See List

Fixed

Optimized IOMMU reference counting using atomic64_inc_return().

Fixed

Serialized sequence allocation to prevent timeouts during concurrent TLB invalidations.

Security

Fixed CVE-2026-31431 (copy.fail) in the Linux kernel.

April 28, 2026

2026-04-28T00:00:00-07:00

Change

cos-117-18613-534-104

Kernel	Docker	Containerd	GPU Drivers
COS-6.6.123	v24.0.9	v1.7.29	See List

Fixed

Added support for NVIDIA drivers v580.126.16 and v580.126.20.

Security

Fixed CVE-2025-70873 in dev-db/sqlite.

Security

Fixed CVE-2026-31430 in the Linux kernel.

Security

Fixed CVE-2026-31446 in the Linux kernel.

Security

Fixed CVE-2026-31447 in the Linux kernel.

Security

Fixed CVE-2026-31450 in the Linux kernel.

Security

Fixed CVE-2026-31451 in the Linux kernel.

Security

Fixed CVE-2026-31452 in the Linux kernel.

Security

Fixed CVE-2026-31453 in the Linux kernel.

Security

Fixed CVE-2026-31454 in the Linux kernel.

Security

Fixed CVE-2026-31455 in the Linux kernel.

Security

Fixed CVE-2026-31466 in the Linux kernel.

Security

Fixed CVE-2026-31469 in the Linux kernel.

Security

Fixed CVE-2026-31495 in the Linux kernel.

Security

Fixed CVE-2026-31496 in the Linux kernel.

Security

Fixed CVE-2026-31515 in the Linux kernel.

Security

Fixed CVE-2026-31521 in the Linux kernel.

Security

Fixed CVE-2026-31523 in the Linux kernel.

Security

Fixed CVE-2026-31525 in the Linux kernel.

Security

Fixed CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-27140, CVE-2026-27144 in dev-lang/go.

Security

Fixed CVE-2026-34743 in app-arch/xz-utils.

April 27, 2026

2026-04-27T00:00:00-07:00

Change

cos-117-18613-534-95

Kernel	Docker	Containerd	GPU Drivers
COS-6.6.123	v24.0.9	v1.7.29	See List

Fixed

Resolved an issue that could cause soft lockups in stressed environments when iommu.strict=1

Fixed

Upgraded app-admin/node-problem-detector to v0.8.25.

Fixed

Upgraded sys-process/lsof to v4.99.6.

Security

Fixed CVE-2026-0994 in dev-libs/protobuf.

Security

Fixed CVE-2026-31414 in the Linux kernel.

Security

Fixed CVE-2026-31415 in the Linux kernel.

Security

Fixed CVE-2026-31416 in the Linux kernel.

Security

Fixed CVE-2026-31418 in the Linux kernel.

Security

Fixed CVE-2026-31421 in the Linux kernel.

Security

Fixed CVE-2026-31423 in the Linux kernel.

Security

Fixed CVE-2026-31424 in the Linux kernel.

Security

Fixed CVE-2026-31426 in the Linux kernel.

Security

Fixed CVE-2026-31427 in the Linux kernel.

Security

Fixed CVE-2026-31428 in the Linux kernel.

Security

Fixed CVE-2026-35414 in net-misc/openssh.

Security

Fixed CVE-2026-4046 in sys-libs/glibc.

Security

Fixed CVE-2026-4437,CVE-2026-4438 in sys-libs/glibc.

Security

Fixed KCTF-42156f9 in the Linux kernel.

Security

Fixed KCTF-a9b8b18 in the Linux kernel.

Security

Updated spdystream to v0.5.1 for containerd. This fixed CVE-2026-35469.

April 13, 2026

2026-04-13T00:00:00-07:00

Change

cos-117-18613-534-80

Kernel	Docker	Containerd	GPU Drivers
COS-6.6.123	v24.0.9	v1.7.29	See List

Fixed

Upgraded app-shells/dash to v0.5.13.2.

Fixed

Upgraded sys-apps/hwdata to v0.401.

Fixed

Upgraded virtual/logger to v0-r3.

Security

Fixed CVE-2024-14027 in the Linux kernel.

Security

Fixed CVE-2026-23154 in the Linux kernel.

Security

Fixed CVE-2026-23244 in the Linux kernel.

Security

Fixed CVE-2026-23319 in the Linux kernel.

Security

Fixed CVE-2026-23343 in the Linux kernel.

Security

Fixed CVE-2026-23360 in the Linux kernel.

Security

Fixed CVE-2026-23401 in the Linux kernel.

Security

Fixed CVE-2026-23439 in the Linux kernel.

Security

Fixed CVE-2026-23441 in the Linux kernel.

Security

Fixed CVE-2026-23449 in the Linux kernel.

Security

Fixed CVE-2026-23452 in the Linux kernel.

Security

Fixed CVE-2026-23455 in the Linux kernel.

Security

Fixed CVE-2026-23456 in the Linux kernel.

Security

Fixed CVE-2026-23457 in the Linux kernel.

Security

Fixed CVE-2026-23458 in the Linux kernel.

Security

Fixed CVE-2026-23471 in the Linux kernel.

Security

Fixed CVE-2026-31392 in the Linux kernel.

Security

Fixed CVE-2026-31400 in the Linux kernel.

Security

Fixed CVE-2026-31402 in the Linux kernel.

Security

Fixed CVE-2026-31403 in the Linux kernel.

Security

Fixed CVE-2026-33997 and CVE-2026-34040 in Docker.

April 06, 2026

2026-04-06T00:00:00-07:00

Change

cos-117-18613-534-62

Kernel	Docker	Containerd	GPU Drivers
COS-6.6.123	v24.0.9	v1.7.29	See List

Security

Fixed CVE-2024-43826 in the Linux kernel.

Security

Fixed CVE-2025-38704 in the Linux kernel.

Security

Fixed CVE-2025-39748 in the Linux kernel.

Security

Fixed CVE-2025-39764 in the Linux kernel.

Security

Fixed CVE-2025-40135 in the Linux kernel.

Security

Fixed CVE-2025-68206 in the Linux kernel.

Security

Fixed CVE-2025-68239 in the Linux kernel.

Security

Fixed CVE-2025-71161 in the Linux kernel.

Security

Fixed CVE-2026-23004 in the Linux kernel.

Security

Fixed CVE-2026-23050 in the Linux kernel.

Security

Fixed CVE-2026-23138 in the Linux kernel.

Security

Fixed CVE-2026-23245 in the Linux kernel.

Security

Fixed CVE-2026-23270 in the Linux kernel.

Security

Fixed CVE-2026-23271 in the Linux kernel.

Security

Fixed CVE-2026-23277 in the Linux kernel.

Security

Fixed CVE-2026-23340 in the Linux kernel.

Security

Fixed CVE-2026-23397 in the Linux kernel.

Security

Fixed CVE-2026-23398 in the Linux kernel.

Security

Fixed CVE-2026-23412 in the Linux kernel.

Security

Fixed CVE-2026-23413 in the Linux kernel.

Security

Fixed CVE-2026-23414 in the Linux kernel.

March 30, 2026

2026-03-30T00:00:00-07:00

Change

cos-117-18613-534-53

Kernel	Docker	Containerd	GPU Drivers
COS-6.6.123	v24.0.9	v1.7.29	See List

Security

Fixed CVE-2026-23292 in the Linux kernel.

Security

Fixed CVE-2026-23293 in the Linux kernel.

Security

Fixed CVE-2026-23296 in the Linux kernel.

Security

Fixed CVE-2026-23300 in the Linux kernel.

Security

Fixed CVE-2026-23303 in the Linux kernel.

Security

Fixed CVE-2026-23304 in the Linux kernel.

Security

Fixed CVE-2026-23310 in the Linux kernel.

Security

Fixed CVE-2026-23351 in the Linux kernel.

Security

Fixed CVE-2026-23352 in the Linux kernel.

Security

Fixed CVE-2026-23359 in the Linux kernel.

Security

Fixed CVE-2026-23368 in the Linux kernel.

Security

Fixed CVE-2026-23381 in the Linux kernel.

Security

Fixed CVE-2026-23386 in the Linux kernel.

Security

Fixed CVE-2026-23388 in the Linux kernel.

Security

Fixed CVE-2026-23391 in the Linux kernel.

Security

Fixed CVE-2026-23392 in the Linux kernel.

Security

Fixed CVE-2026-27135 in net-libs/nghttp2.

Security

Fixed CVE-2026-27448 in dev-python/pyopenssl.

Security

Fixed the "CrackArmor" vulnerability in the Linux kernel.

Security

Fixed the "CrackArmor" vulnerability in the Linux kernel.

Change

Runtime sysctl changes:

Changed: kernel.threads-max: 63487 -> 63199
Changed: user.max_cgroup_namespaces: 31743 -> 31599
Changed: user.max_ipc_namespaces: 31743 -> 31599
Changed: user.max_mnt_namespaces: 31743 -> 31599
Changed: user.max_net_namespaces: 31743 -> 31599
Changed: user.max_pid_namespaces: 31743 -> 31599
Changed: user.max_time_namespaces: 31743 -> 31599
Changed: user.max_user_namespaces: 31743 -> 31599
Changed: user.max_uts_namespaces: 31743 -> 31599

March 26, 2026

2026-03-26T00:00:00-07:00

Change

cos-117-18613-534-48

Kernel	Docker	Containerd	GPU Drivers
COS-6.6.123	v24.0.9	v1.7.29	See List

Change

Added support for the Lustre 2.14.0_p249 drivers.

Feature

Added support for loading the ublk kernel module.

Fixed

Updated cos-gpu-installer to v2.6.1.

Fixed

Upgraded app-admin/google-osconfig-agent to v20260119.00.

Fixed

Upgraded sys-apps/file to v5.47-r1.

Security

Fixed CVE-2026-23231 in the Linux kernel.

Security

Fixed CVE-2026-23243 in the Linux kernel.

Security

Fixed CVE-2026-23254 in the Linux kernel.

Security

Fixed CVE-2026-27459 in dev-python/pyopenssl.

Security

Fixed CVE-2026-32597 with pyjwt package upgrade to 2.12.1.

Security

Fixed KCTF-329f0b9 in the Linux kernel.

March 23, 2026

2026-03-23T00:00:00-07:00

Change

cos-117-18613-534-44

Kernel	Docker	Containerd	GPU Drivers
COS-6.6.123	v24.0.9	v1.7.29	See List

Change

Added support for the Lustre 2.14.0_p249 drivers.

Fixed

Updated cos-gpu-installer to v2.6.1.

Fixed

Upgraded sys-apps/file to v5.47-r1.

Security

Fixed CVE-2026-23231 in the Linux kernel.

Security

Fixed CVE-2026-23243 in the Linux kernel.

Security

Fixed CVE-2026-23254 in the Linux kernel.

Security

Updated net-misc/curl to v8.19.0. This resolves CVE-2026-1965 and CVE-2026-3783.

Security

Updated sys-libs/binutils-libs to 2.46.0. This resolves CVE-2025-69644.

March 17, 2026

2026-03-17T00:00:00-07:00

Change

cos-117-18613-534-36

Kernel	Docker	Containerd	GPU Drivers
COS-6.6.123	v24.0.9	v1.7.29	See List

Security

Fixed CVE-2025-38162 in the Linux kernel.

Security

Fixed CVE-2025-38162 in the Linux kernel.

March 10, 2026

2026-03-10T00:00:00-07:00

Change

cos-117-18613-534-35

Kernel	Docker	Containerd	GPU Drivers
COS-6.6.123	v24.0.9	v1.7.29	See List

Fixed

Upgraded net-misc/socat to v1.8.1.1.

Fixed

Upgraded sys-apps/file to v5.47.

Security

Fixed CVE-2025-22026 in the Linux kernel.

Security

Fixed CVE-2025-38201 in the Linux kernel.

Security

Fixed CVE-2025-38234 in the Linux kernel.

Security

Fixed CVE-2026-23100 in the Linux kernel.

Security

Fixed CVE-2026-23216 in the Linux kernel.

Security

Fixed CVE-2026-23229 in the Linux kernel.

Security

Fixed CVE-2026-23230 in the Linux kernel.

Security

Upgraded dev-libs/glib to v2.86.3 and gdbus-codegen to v2.86.3. This fixes CVE-2025-14087, CVE-2025-14512 and CVE-2025-13601.

March 04, 2026

2026-03-04T00:00:00-08:00

Change

cos-117-18613-534-24

Kernel	Docker	Containerd	GPU Drivers
COS-6.6.123	v24.0.9	v1.7.29	See List

Change

Added support for the Lustre 2.14.0_p246 drivers.

Change

Fixed an issue where most platforms would use only half of the available GVNIC TX queues.

Security

Fixed CVE-2025-58187 in dev-lang/go.

Security

Fixed CVE-2025-61732 in dev-lang/go.

Security

Fixed KCTF-e3f000f in the Linux kernel.

February 24, 2026

2026-02-24T00:00:00-08:00

Change

cos-117-18613-534-15

Kernel	Docker	Containerd	GPU Drivers
COS-6.6.123	v24.0.9	v1.7.29	See List

Fixed

Upgraded net-misc/socat to v1.8.1.0-r1.

Fixed

Upgraded sys-apps/less to v692.

Security

Fixed CVE-2025-15281 and CVE-2026-0861 in sys-libs/glibc.

Security

Fixed CVE-2025-6075 in python.

Security

Fixed CVE-2025-60753 in libarchive.

Security

Fixed CVE-2026-23112 in the Linux kernel.

Security

Fixed CVE-2026-23176 in the Linux kernel.

Security

Fixed CVE-2026-23179 in the Linux kernel.

Security

Fixed CVE-2026-23193 in the Linux kernel.

Security

Fixed CVE-2026-23198 in the Linux kernel.

Security

Fixed CVE-2026-23200 in the Linux kernel.

Security

Fixed CVE-2026-23204 in the Linux kernel.

Security

Fixed CVE-2026-23205 in the Linux kernel.

Security

Fixed CVE-2026-23209 in the Linux kernel.

Security

Fixed KCTF-f41c5d1 in the Linux kernel.

Security

Upgraded net-misc/curl to version 8.18.0. This fixes CVE-2025-10148, CVE-2025-10966, CVE-2025-13034, CVE-2025-14017, CVE-2025-14524, CVE-2025-14819, CVE-2025-15079, and CVE-2025-15224.

February 19, 2026

2026-02-19T00:00:00-08:00

Change

cos-117-18613-534-2

Kernel	Docker	Containerd	GPU Drivers
COS-6.6.123	v24.0.9	v1.7.29	See List

Announcement

This is an LTS Refresh release.

Feature

Added support for NVIDIA driver v535.288.01, v570.211.01 and v580.126.09.

Fixed

Upgraded app-containers/docker-credential-helpers to v0.9.4.

Fixed

Upgraded net-libs/libtirpc to v1.3.7.

Fixed

Upgraded sys-libs/libcap to v2.77.

Security

Fixed CVE-2025-22121 in the Linux kernel.

Security

Fixed CVE-2025-38232 in the Linux kernel.

Security

Fixed CVE-2025-68725 in the Linux kernel.

Security

Fixed CVE-2026-22998 in the Linux kernel.

Security

Fixed CVE-2026-22999 in the Linux kernel.

Security

Fixed CVE-2026-23001 in the Linux kernel.

Security

Fixed CVE-2026-23003 in the Linux kernel.

Security

Fixed CVE-2026-23005 in the Linux kernel.

Security

Fixed CVE-2026-23010 in the Linux kernel.

Security

Fixed CVE-2026-23011 in the Linux kernel.

Security

Fixed CVE-2026-23025 in the Linux kernel.

Security

Fixed CVE-2026-23038 in the Linux kernel.

Security

Fixed CVE-2026-23054 in the Linux kernel.

Security

Fixed CVE-2026-23069 in the Linux kernel.

Security

Fixed CVE-2026-23083 in the Linux kernel.

Security

Fixed CVE-2026-23085 in the Linux kernel.

Security

Fixed CVE-2026-23095 in the Linux kernel.

Security

Fixed CVE-2026-23097 in the Linux kernel.

Security

Fixed CVE-2026-23099 in the Linux kernel.

Security

Fixed CVE-2026-23103 in the Linux kernel.

Security

Fixed CVE-2026-23105 in the Linux kernel.

Security

Fixed CVE-2026-23107 in the Linux kernel.

Security

Fixed CVE-2026-23110 in the Linux kernel.

Security

Updated dev-libs/libxml2 to version 2.14.6. This resolves CVE-2025-6021.

Change

Runtime sysctl changes:

Changed: kernel.tainted: 4608 -> 4096

February 03, 2026

2026-02-03T00:00:00-08:00

Change

cos-117-18613-439-120

Kernel	Docker	Containerd	GPU Drivers
COS-6.6.111	v24.0.9	v1.7.29	See List

Security

Fixed CVE-2025-71148 in the Linux kernel.

Security

Fixed CVE-2025-71149 in the Linux kernel.

Security

Fixed CVE-2025-71151 in the Linux kernel.

Security

Fixed CVE-2025-71160 in the Linux kernel.

Security

Fixed CVE-2026-0915 in sys-apps/glibc.

Security

Fixed CVE-2026-22976 in the Linux kernel.

Security

Fixed CVE-2026-22977 in the Linux kernel.

Security

Fixed CVE-2026-22979 in the Linux kernel.

Security

Fixed CVE-2026-22980 in the Linux kernel.

Security

Fixed CVE-2026-22988 in the Linux kernel.

Security

Fixed CVE-2026-22994 in the Linux kernel.

Security

Fixed KCTF-2397e92 in the Linux kernel.

Security

Fixed KCTF-50da4b9 in the Linux kernel.

Change

Runtime sysctl changes:

Changed: kernel.tainted: 4096 -> 4608

January 28, 2026

2026-01-28T00:00:00-08:00

Change

cos-117-18613-439-108

Kernel	Docker	Containerd	GPU Drivers
COS-6.6.111	v24.0.9	v1.7.29	See List

Fixed

Installed app-misc/c_rehash, which was unintentionally removed after the dev-libs/openssl update.

Fixed

Upgraded sys-apps/less to v691.

Security

Fixed CVE-2024-49968 in the Linux kernel.

Security

Fixed CVE-2024-57982 in the Linux kernel.

Security

Fixed CVE-2025-13836 in dev-lang/python.

Security

Fixed CVE-2025-13837 in dev-lang/python.

Security

Fixed CVE-2025-22111 in the Linux kernel.

Security

Fixed CVE-2025-38022 in the Linux kernel.

Security

Fixed CVE-2025-38129 in the Linux kernel.

Security

Fixed CVE-2025-68259 in the Linux kernel.

Security

Fixed CVE-2025-68261 in the Linux kernel.

Security

Fixed CVE-2025-68264 in the Linux kernel.

Security

Fixed CVE-2025-68265 in the Linux kernel.

Security

Fixed CVE-2025-68337 in the Linux kernel.

Security

Fixed CVE-2025-68349 in the Linux kernel.

Security

Fixed CVE-2025-68363 in the Linux kernel.

Security

Fixed CVE-2025-68724 in the Linux kernel.

Security

Fixed CVE-2025-68740 in the Linux kernel.

Security

Fixed CVE-2025-68744 in the Linux kernel.

Security

Fixed CVE-2025-68756 in the Linux kernel.

Security

Fixed CVE-2025-68764 in the Linux kernel.

Security

Fixed CVE-2025-68775 in the Linux kernel.

Security

Fixed CVE-2025-68780 in the Linux kernel.

Security

Fixed CVE-2025-68782 in the Linux kernel.

Security

Fixed CVE-2025-68788 in the Linux kernel.

Security

Fixed CVE-2025-68794 in the Linux kernel.

Security

Fixed CVE-2025-68795 in the Linux kernel.

Security

Fixed CVE-2025-68798 in the Linux kernel.

Security

Fixed CVE-2025-68803 in the Linux kernel.

Security

Fixed CVE-2025-68813 in the Linux kernel.

Security

Fixed CVE-2025-68814 in the Linux kernel.

Security

Fixed CVE-2025-68816 in the Linux kernel.

Security

Fixed CVE-2025-68820 in the Linux kernel.

Security

Fixed CVE-2025-68821 in the Linux kernel.

Security

Fixed CVE-2025-71068 in the Linux kernel.

Security

Fixed CVE-2025-71077 in the Linux kernel.

Security

Fixed CVE-2025-71084 in the Linux kernel.

Security

Fixed CVE-2025-71089 in the Linux kernel.

Security

Fixed CVE-2025-71096 in the Linux kernel.

Security

Fixed CVE-2025-71097 in the Linux kernel.

Security

Fixed CVE-2025-71098 in the Linux kernel.

Security

Fixed CVE-2025-71102 in the Linux kernel.

Security

Fixed CVE-2025-71104 in the Linux kernel.

Security

Fixed CVE-2025-71113 in the Linux kernel.

Security

Fixed CVE-2025-71118 in the Linux kernel.

Security

Fixed CVE-2025-71120 in the Linux kernel.

Security

Fixed CVE-2025-71123 in the Linux kernel.

Security

Fixed CVE-2025-71125 in the Linux kernel.

Security

Fixed CVE-2025-71131 in the Linux kernel.

Security

Fixed CVE-2026-21441 in dev-python/urllib3.

Security

Updated dev-libs/openssl to v3.0.19. This resolves CVE-2025-15467.

January 20, 2026

2026-01-20T00:00:00-08:00

Change

cos-117-18613-439-92

Kernel	Docker	Containerd	GPU Drivers
COS-6.6.111	v24.0.9	v1.7.29	See List

Security

Applied urllib3 patch for CVE-2024-37891.

Security

Fixed CVE-2025-12084 in dev-lang/python.

Security

Fixed CVE-2025-40350 in the Linux kernel.

Security

Fixed CVE-2025-40350 in the Linux kernel.

Security

Fixed CVE-2025-40350 in the Linux kernel.

Security

Fixed CVE-2025-61727 in dev-lang/go.

Security

Fixed CVE-2025-61729 in dev-lang/go.

January 14, 2026

2026-01-14T00:00:00-08:00

Change

cos-117-18613-439-82

Kernel	Docker	Containerd	GPU Drivers
COS-6.6.111	v24.0.9	v1.7.29	See List

Fixed

Added bcache clock cache replacement policy.