Container Optimized OS 93 - Release notes

October 24, 2023

2023-10-24T00:00:00-07:00

Change

cos-93-16623-461-42

Kernel	Docker	Containerd	GPU Drivers
COS-5.10.177	v20.10.24	v1.6.20	v450.248.02(default),v535.104.12(latest),v470.199.02(R470 for compatibility with K80 GPUs)

Fixed

Update latest NVIDIA GPU drivers to 535.104.12.

Security

Fixed CVE-2023-42752 in the Linux kernel.

October 16, 2023

2023-10-16T00:00:00-07:00

Change

cos-93-16623-461-40

Kernel	Docker	Containerd	GPU Drivers
COS-5.10.177	v20.10.24	v1.6.20	v450.248.02(default),v535.104.05(latest),v470.199.02(R470 for compatibility with K80 GPUs)

Security

Upgraded net-misc/curl to v8.4.0. This resolves CVE-2023-38545.

October 11, 2023

2023-10-11T00:00:00-07:00

Change

cos-93-16623-461-39

Kernel	Docker	Containerd	GPU Drivers
COS-5.10.177	v20.10.24	v1.6.20	v450.248.02(default),v535.104.05(latest),v470.199.02(R470 for compatibility with K80 GPUs)

Security

Fixed CVE-2023-38039 in net-misc/curl.

Security

Fixed CVE-2023-42753 in the Linux Kernel.

Fixed

Upgraded cos-gpu-installer to v2.1.9.

October 03, 2023

2023-10-03T00:00:00-07:00

Change

cos-93-16623-461-36

Kernel	Docker	Containerd	GPU Drivers
COS-5.10.177	v20.10.24	v1.6.20	v450.248.02(default),v470.199.02(R470),v535.104.05

Security

Fixes CVE-2023-2163 in the Linux Kernel.

September 26, 2023

2023-09-26T00:00:00-07:00

Change

cos-93-16623-461-35

Kernel	Docker	Containerd	GPU Drivers
COS-5.10.177	v20.10.24	v1.6.20	v450.248.02(default),v470.199.02(R470),v535.104.05

Security

Fixed CVE-2023-4622 in the Linux kernel.

Security

Fixed CVE-2023-4623 in the Linux kernel.

Security

Fixed CVE-2023-4921 in the Linux kernel.

September 11, 2023

2023-09-11T00:00:00-07:00

Change

cos-93-16623-461-30

Kernel	Docker	Containerd	GPU Drivers
COS-5.10.177	v20.10.24	v1.6.20	v450.248.02(default),v470.199.02(R470),v535.104.05

Change

Updated cos-gpu-installer to v2.1.7. Switched precompiled driver and signature location to COS build artifacts.

Security

Fixed the following CVEs in sys-libs/binutils-libs: CVE-2022-47007 CVE-2022-47008, CVE-2022-47010, CVE-2022-47011, CVE-2022-48063, CVE-2022-48064, CVE-2022-48065.

Fixed

Changed error handling in get_metadata_value script to retry if connection error happens during instance metadata check.

Change

Updated latest GPU driver to v535.104.05.

September 07, 2023

2023-09-07T00:00:00-07:00

Change

cos-93-16623-461-21

Kernel	Docker	Containerd	GPU Drivers
COS-5.10.177	v20.10.24	v1.6.20	v450.248.02(default),v470.199.02(R470),v525.125.06

Security

Upgraded sys-process/procps to 3.3.17. This fixed CVE-2018-1121 and CVE-2023-4016.

Security

Upgraded sys-fs/mdadm to v4.2. This resolves CVE-2023-28938 and CVE-2023-28736.

Security

Fixed CVE-2023-33953 in the Linux kernel.

Security

Fixed CVE-2018-17846, CVE-2018-17142, CVE-2018-17847, CVE-2018-17143, CVE-2018-17075, CVE-2018-17848 in dev-go/net.

Security

Updated xz-utils to 5.2.9. This resolves CVE-2020-22916.

August 21, 2023

2023-08-21T00:00:00-07:00

Change

cos-93-16623-461-15

Kernel	Docker	Containerd	GPU Drivers
COS-5.10.177	v20.10.24	v1.6.20	v450.248.02(default),v470.199.02(R470),v525.125.06

Security

Fixed CVE-2023-4194 in the Linux kernel.

Security

Fixed CVE-2023-4147 in the Linux kernel.

Security

Upgrade app-misc/jq to v1.7_pre20201109-r1. This fixes CVE-2016-4074.

Change

Simplified GPU driver installation by remounting the driver installation path as executable from cos-extensions.

Security

Updated dev-libs/openssl to v1.1.1v. This resolves CVE-2023-3817.

August 14, 2023

2023-08-14T00:00:00-07:00

Change

cos-93-16623-461-8

Kernel	Docker	Containerd	GPU Drivers
COS-5.10.177	v20.10.24	v1.6.20	v450.248.02(default),v470.199.02(R470),v525.125.06

Security

Fixed CVE-2023-32001 in net-misc/curl.

Security

Fixed CVE-2023-38408 in net-misc/openssh.

Security

Fixed CVE-2022-28737 in sys-boot/shim.

Security

Fixed CVE-2023-4004, CVE-2023-3777, CVE-2023-3776, CVE-2023-1206, CVE-2023-0160 and CVE-2023-3611 in the Linux kernel.

Security

Fixed CVE-2022-40896 in dev-python/pygments.

August 07, 2023

2023-08-07T00:00:00-07:00

Change

cos-93-16623-461-1

Kernel	Docker	Containerd	GPU Drivers
COS-5.10.186	v20.10.24	v1.6.20	v450.248.02(default),v470.199.02(R470),v525.125.06

Announcement

This is an LTS Refresh Release.

Change

Updated app-emulation/docker and app-emulation/docker-cli to v20.10.24.

Change

Updated app-admin/google-osconfig-agent to v20230222.00.

Change

Updated containerd to v1.6.20.

Security

Updated open-vm-tools to 12.2.5 to fix CVE-2023-20867

July 25, 2023

2023-07-25T00:00:00-07:00

Change

cos-93-16623-402-50

Kernel	Docker	Containerd	GPU Drivers
COS-5.10.177	v20.10.14	v1.5.18	v450.248.02(default),v470.199.02(R470),v525.125.06

Security

Fixed CVE-2023-35001 in the Linux kernel.

Security

Fix CVE-2023-2269 in the kernel.

Security

Fix CVE-2023-3389 in kernel.

Security

Fixed CVE-2023-31248 in the Linux kernel.

July 18, 2023

2023-07-18T00:00:00-07:00

Change

cos-93-16623-402-45

Kernel	Docker	Containerd	GPU Drivers
COS-5.10.177	v20.10.14	v1.5.18	v450.248.02(default),v470.199.02(R470),v525.125.06

Security

Fixed CVE-2023-3609 in the Linux kernel.

Security

Updated default GPU driver to v450.248.02, R470 GPU driver to v470.199.02 and latest GPU driver to v525.125.06. This resolves CVE-2023-25515 and CVE-2023-25516. CVE-2023-25515, CVE-2023-25516.

July 13, 2023

2023-07-13T00:00:00-07:00

Change

cos-93-16623-402-43

Kernel	Docker	Containerd	GPU Drivers
COS-5.10.177	v20.10.14	v1.5.18	v450.236.01(default),v470.182.03(R470),v525.105.17

Security

Fixed CVE-2023-31486 in perl.

Security

Fixed CVE-2023-3090 in the Linux kernel.

July 05, 2023

2023-07-05T00:00:00-07:00

Change

cos-93-16623-402-40

Kernel	Docker	Containerd	GPU Drivers
COS-5.10.177	v20.10.14	v1.5.18	v450.236.01(default),v470.182.03(R470),v525.105.17

Security

Fixed CVE-2023-3268 in the Linux kernel.

June 29, 2023

2023-06-29T00:00:00-07:00

Change

cos-93-16623-402-39

Kernel	Docker	Containerd	GPU Drivers
COS-5.10.177	v20.10.14	v1.5.18	v450.236.01(default),v470.182.03(R470),v525.105.17

Security

Upgraded sys-apps/file to v5.43-r1 to fix CVE-2019-18218.

June 26, 2023

2023-06-26T00:00:00-07:00

Change

cos-93-16623-402-36

Kernel	Docker	Containerd	GPU Drivers
COS-5.10.177	v20.10.14	v1.5.18	v450.236.01(default),v470.182.03(R470),v525.105.17

Change

Updated cloud-udev-nvme-config to v20230526.00.

Fixed

Updated toolbox to v20230615.

June 20, 2023

2023-06-20T00:00:00-07:00

Change

cos-93-16623-402-30

Kernel	Docker	Containerd	GPU Drivers
COS-5.10.177	v20.10.14	v1.5.18	v450.236.01(default),v470.182.03(R470),v525.105.17

Security

Fixed CVE-2023-1972 in binutils-libs.

Security

Fixed CVE-2023-1972 in binutils.

Security

Fixed CVE-2023-34256 in the Linux kernel.

June 12, 2023

2023-06-12T00:00:00-07:00

Change

cos-93-16623-402-27

Kernel	Docker	Containerd	GPU Drivers
COS-5.10.177	v20.10.14	v1.5.18	v450.236.01(default),v470.182.03(R470),v525.105.17

Security

Updated net-misc/curl to v8.1.0-r1. This resolves CVE-2023-28319, CVE-2023-28320, CVE-2023-28321, and CVE-2023-28322.

Security

Fixed CVE-2022-4269 in the Linux kernel.

Security

Fixed CVE-2023-2124 in the Linux kernel.

Security

Updated dev-libs/openssl to v1.1.1u. This resolves CVE-2023-2650.

June 05, 2023

2023-06-05T00:00:00-07:00

Change

cos-93-16623-402-22

Kernel	Docker	Containerd	GPU Drivers
COS-5.10.177	v20.10.14	v1.5.18	v450.236.01(default),v470.182.03(R470),v525.105.17

Security

Updated ncurses to v6.4p20220423. This resolves CVE-2023-29491.

May 30, 2023

2023-05-30T00:00:00-07:00

Change

cos-93-16623-402-21

Kernel	Docker	Containerd	GPU Drivers
COS-5.10.177	v20.10.14	v1.5.18	v450.236.01(default),v470.182.03(R470),v525.105.17

Security

Fixed CVE-2023-28842 in docker.

May 22, 2023

2023-05-22T00:00:00-07:00

Change

cos-93-16623-402-17

Kernel	Docker	Containerd	GPU Drivers
COS-5.10.177	v20.10.14	v1.5.18	v450.236.01(default),v470.182.03(R470),v525.105.17

Security

Fixed CVE-2022-36109 in app-emulation/docker.

Security

Updated app-editors/vim, app-editors/vim-core to v9.0.1562. This resolves CVE-2023-2609, CVE-2023-2610, CVE-2023-2426.

Security

Updated app-emulation/cloud-init to 23.1.2 which fixes CVE-2023-1786.

May 09, 2023

2023-05-09T00:00:00-07:00

Change

cos-93-16623-402-10

Kernel	Docker	Containerd	GPU Drivers
COS-5.10.177	v20.10.14	v1.5.18	v450.236.01(default),v470.182.03(R470),v525.105.17

Security

Updated dev-libs/libxml2 to v2.10.4. This resolves CVE-2023-28484.

Change

Updated app-emulation/docker to v20.10.14. This resolves CVE-2023-28840, CVE-2023-28841, CVE-2023-28842, CVE-2022-36109, CVE-2022-27652.

May 01, 2023

2023-05-01T00:00:00-07:00

Change

cos-93-16623-402-7

Kernel	Docker	Containerd	GPU Drivers
COS-5.10.177	v20.10.6	v1.5.18	v450.236.01(default),v470.182.03(R470),v525.105.17

Security

Upgraded net-misc/curl to v8.0.1. This resolves CVE-2023-27534.

Fixed

Fixed an issue where chronyd does not restart after failure, resulting in the system time being out of sync.

Security

Updated ncurses to v6.4p20220423. This resolves CVE-2023-29491.