GKE 1.34 changelog

Autopilot Standard

This document lists the changes for the patch versions of the Google Kubernetes Engine (GKE) 1.34 minor version.

These changelogs are supplementary information about the updates to specific GKE system components. For information about features, changes, and security issues in GKE, see the following documents:

• Product updates: GKE release notes
• Security vulnerabilities: Security bulletins

1.34.12-gke.1011000

The following sections describe changes in this patch version when compared with the previous patch version, 1.34.11-gke.1209000. For information about upstream Kubernetes changes, see the Kubernetes v1.34.12 changelog.

Kubernetes Updates

k8s-api

Updated k8s-api cohort from version 1.34.11-gke.300 to 1.34.12-gke.200.

• Bug Fixes:
  • Restored only the .spec section from ControllerRevision for StatefulSet objects.
  • Resolved issues in Dynamic Resource Allocation (DRA), including an integer overflow in per-claim device-limit checks and ensuring devices are reset before processing gRPC responses.
  • Fixed backslash escaping for Windows paths.
  • Prevented node-specific kubelet configuration from leaking into the ConfigMap.
• Security Fixes:
  • Fixed a vulnerability in the StatefulSet controller (CVE-2026-2270) that could allow cross-namespace pod creation via a confused deputy attack by ensuring only the spec is restored from ControllerRevision.
  • Addressed a vulnerability in Windows subPath resolution where UNC symlink targets could be exploited to force NTLM authentication (MITRE ATT&CK T1187) by ensuring such targets are refused.
• Miscellaneous:
  • Updated the core Kubernetes version to v1.34.12.

Component Updates

The following sections provide information about updates to specific GKE system components in this patch version.

filestorecsi

Updated filestorecsi component from version 1.34.31 to 1.34.32.

• Security Fixes:
  • Updated Go dependencies to resolve CVE-2026-84304 and CVE-2026-78662.
• Miscellaneous:
  • Updated the Go runtime to version 1.27.1 and updated container base images.

gcp-controller-manager-combined

Updated gcp-controller-manager-combined component from version 34.0.24 to 34.0.25.

• Security Fixes:
  • Updated the Go standard library to version 1.26.6 and bumped several Go dependencies to resolve security vulnerabilities: CVE-2026-33186, CVE-2026-84304, CVE-2026-78662, CVE-2026-56855, CVE-2026-39833, CVE-2026-39834, CVE-2026-39821, CVE-2026-33814, CVE-2026-29181, and CVE-2026-73500.
• Miscellaneous:
  • Updated the build configuration to use CGO_ENABLED=0, eliminating the need for gcc and apt-get during construction and improving build reliability by removing dependencies on external package repositories.
  • Updated the Go runtime version used during the build process to 1.26.6.

gcsfusecsi

Updated gcsfusecsi component from version 1.34.62 to 1.34.63.

• Security Fixes:
  • Updated golang.org/x/crypto to v0.56.0 to resolve CVE-2026-78662.

gpu-device-plugin

Updated gpu-device-plugin component from version 1.34.11-gke.3 to 1.34.11-gke.6.

• Security Fixes:
  • Updated Go modules to resolve CVE-2026-42506, CVE-2026-46600, CVE-2026-56852, and GO-2026-6061.
  • Updated container base images to resolve CVE-2026-34743.
  • Updated google.golang.org/grpc to resolve CVE-2026-84304.
  • Updated google.golang.org/grpc to v1.83.2 to resolve CVE-2026-84445.
• Miscellaneous:
  • Updated the container base image to the latest version of gke-distroless/bash.

nodelocaldns

Updated nodelocaldns component from version 34.1.7 to 34.1.8.

• Miscellaneous:
  • Updated container images: k8s-dns-node-cache to 1.26.7-gke.29, gke-metrics-collector to 20260916_2300_RC0, and node_token_broker/init to gke_node_token_broker_init_20260917.00_p0.

pdcsi

Updated pdcsi component from version 1.34.74 to 1.34.76.

• Security Fixes:
  • Updated google.golang.org/grpc to v1.83.1 to resolve CVE-2026-84304.
  • Updated google.golang.org/grpc to resolve CVE-2026-84445.
• Miscellaneous:
  • Updated OpenTelemetry gRPC instrumentation to use NewServerHandler in place of the deprecated UnaryServerInterceptor.

tpu-device-plugin

Updated tpu-device-plugin component from version 1.34.17-gke.7 to 1.34.17-gke.8.

• Security Fixes:
  • Updated golang.org/x/crypto to resolve CVE-2026-56854.

1.34.11-gke.1209000

The following sections describe changes in this patch version when compared with the previous patch version, 1.34.11-gke.1102000. For information about upstream Kubernetes changes, see the Kubernetes v1.34.11 changelog.

Component Updates

The following sections provide information about updates to specific GKE system components in this patch version.

filestorecsi

Updated filestorecsi component from version 1.34.30 to 1.34.31.

• Bug Fixes:
  • Implemented a fallback to the API server when the Node topology key is missing.
• Security Fixes:
  • Updated Go dependencies to resolve security vulnerabilities: CVE-2026-46600, CVE-2026-56852, CVE-2026-41178, CVE-2026-29181, CVE-2026-39883, CVE-2026-84304, CVE-2026-56854, CVE-2026-78662, CVE-2026-73500, GO-2026-6061, and GO-2026-6094.
• Miscellaneous:
  • Updated the Go runtime to version 1.27.1 and refreshed the Debian and Distroless container base images.

gcsfusecsi

Updated gcsfusecsi component from version 1.34.60 to 1.34.62.

• Security Fixes:
  • Updated golang.org/x/crypto to v0.56.0 to resolve CVE-2026-78662.

gvisor

Updated gvisor component from version 1.34.11 to 1.34.14.

• Miscellaneous:
  • Updated the gke-distroless/static container base image.
  • Updated the node token broker initialization container image.

managed-opentelemetry

Updated managed-opentelemetry component from version 1.34.2-gke.0 to 1.34.2-gke.1.

• Security Fixes:
  • Upgraded otelcol-custom to 0.153.0-gke.5 to remediate golang.org/x/crypto CVEs.

osimage

Updated osimage component from version 1.34.197 to 1.34.209.

• Features:
  • Enabled CONFIG_UDMABUF on x86_64 architectures.
  • Added bpf-lsm-policy for VM restrictions.
  • Enabled CONFIG_MEMORY_FAILURE in the Linux kernel for ARM64 to improve memory error handling when running CUDA workloads.
  • Added support for NVIDIA driver v595.91.07.
  • Updated Linux kernel to COS-6.12.105.
  • Updated Docker to v27.5.1.
  • Updated Containerd to v2.2.7.
• Bug Fixes:
  • Applied a kernel patch to reduce the bcache garbage collection sleep interval, preventing potential I/O stalls.
  • Resolved a significant issue affecting users of the XFS file system.
  • Updated the udev rule configuration for the protected_stateful_partition.
  • Upgraded curl to 8.21.0.
  • Changed the installation path for google-guest-agent plugins to /var/lib/google/guest-agent.
  • Resolved an issue where docker cp would fail when copying to or from containers that utilized symlinked bind mounts.
• Security Fixes:
  • Fixed CVE-2026-68329 in the Linux kernel.
  • Fixed CVE-2026-64380 in the Linux kernel.
  • Fixed CVE-2026-64561 in the Linux kernel.
  • Fixed CVE-2026-64562 in the Linux kernel.
  • Fixed CVE-2026-64567 in the Linux kernel.
  • Fixed CVE-2026-64572 in the Linux kernel.
  • Fixed CVE-2026-64576 in the Linux kernel.
  • Fixed CVE-2026-64579 in the Linux kernel.
  • Fixed CVE-2026-64580 in the Linux kernel.
  • Fixed CVE-2026-64590 in the Linux kernel.
  • Fixed CVE-2026-64593 in the Linux kernel.
  • Fixed CVE-2026-64597 in the Linux kernel.
  • Fixed CVE-2026-64598 in the Linux kernel.
  • Fixed CVE-2026-64604 in the Linux kernel.
  • Fixed CVE-2026-68092 in the Linux kernel.
  • Fixed CVE-2026-68119 in the Linux kernel.
  • Fixed CVE-2026-68136 in the Linux kernel.
  • Fixed CVE-2026-68142 in the Linux kernel.
  • Fixed CVE-2026-68145 in the Linux kernel.
  • Fixed CVE-2026-68146 in the Linux kernel.
  • Fixed CVE-2026-68147 in the Linux kernel.
  • Fixed CVE-2026-68149 in the Linux kernel.
  • Fixed CVE-2026-68184 in the Linux kernel.
  • Fixed CVE-2026-68186 in the Linux kernel.
  • Fixed CVE-2026-68187 in the Linux kernel.
  • Fixed CVE-2026-68284 in the Linux kernel.
  • Fixed CVE-2026-68338 in the Linux kernel.
  • Fixed CVE-2026-68388 in the Linux kernel.
  • Fixed CVE-2026-68396 in the Linux kernel.
  • Fixed CVE-2026-68398 in the Linux kernel.
  • Fixed CVE-2026-68422 in the Linux kernel.
  • Fixed CVE-2026-68425 in the Linux kernel.
  • Fixed CVE-2026-68428 in the Linux kernel.
  • Fixed CVE-2026-68432 in the Linux kernel.
  • Fixed CVE-2026-68442 in the Linux kernel.
  • Fixed CVE-2026-68450 in the Linux kernel.
  • Fixed CVE-2026-35177 in app-editors/vim and app-editors/vim-core.
  • Fixed CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, and CVE-2026-46598 in dev-go/crypto.
  • Fixed CVE-2026-58470 in net-misc/wget.
  • Fixed CVE-2026-59890 in dev-python/setuptools.
  • Fixed multiple vulnerabilities in the Linux kernel: CVE-2026-64227, CVE-2026-64244, CVE-2026-64247, CVE-2026-64265, CVE-2026-64266, CVE-2026-64284, CVE-2026-64289, CVE-2026-64294, CVE-2026-64298, CVE-2026-64299, CVE-2026-64306, CVE-2026-64313, CVE-2026-64317, CVE-2026-64319, CVE-2026-64322, CVE-2026-64323, CVE-2026-64324, CVE-2026-64326, CVE-2026-64354, CVE-2026-64357, CVE-2026-64368, CVE-2026-64370, CVE-2026-64373, CVE-2026-64378, CVE-2026-64379, CVE-2026-64381, CVE-2026-64382, CVE-2026-64383, CVE-2026-64384, CVE-2026-64385, CVE-2026-64386, CVE-2026-64387, CVE-2026-64411, CVE-2026-64412, CVE-2026-64414, CVE-2026-64415, CVE-2026-64418, CVE-2026-64422, CVE-2026-64423, CVE-2026-64425, CVE-2026-64432, CVE-2026-64435, CVE-2026-64436, CVE-2026-64448, CVE-2026-64456, CVE-2026-64473, CVE-2026-64474, CVE-2026-64475, CVE-2026-64512, and CVE-2026-64514.
  • Upgraded net-libs/nghttp2 to 1.69.0 to fix CVE-2026-58055.
  • Fixed CVE-2026-29111 in sys-apps/systemd.
  • Fixed CVE-2026-3644 and CVE-2026-6019 in dev-lang/python.
  • Fixed CVE-2026-40355 and CVE-2026-40356 in app-crypt/mit-krb5.
  • Fixed multiple vulnerabilities in the Linux kernel: CVE-2026-53381, CVE-2026-53385, CVE-2026-53388, CVE-2026-53391, CVE-2026-53392, CVE-2026-53393, CVE-2026-53394, CVE-2026-53397, CVE-2026-53398, CVE-2026-53400, CVE-2026-63795, CVE-2026-63800, CVE-2026-63802, CVE-2026-63806, CVE-2026-63807, CVE-2026-63809, CVE-2026-63810, CVE-2026-63823, CVE-2026-63824, CVE-2026-63827, CVE-2026-63828, CVE-2026-63829, CVE-2026-63830, CVE-2026-63833, CVE-2026-64187, and CVE-2026-64189.
  • Fixed multiple vulnerabilities in openssh: CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, and CVE-2026-60002.
  • Fixed CVE-2026-58013, CVE-2026-58014, CVE-2026-58015, and CVE-2026-58016 in glib.
  • Fixed CVE-2026-43010 and CVE-2026-43216 in the Linux kernel.
  • Fixed CVE-2026-58469, CVE-2026-58471, and CVE-2026-58472 in wget.
  • Resolved CVE-2026-46680, CVE-2026-50195, CVE-2026-53492, and CVE-2026-53488 via containerd update to v2.1.9.
  • Fixed CVE-2026-53341 in the Linux kernel.
  • Fixed KCTF-736b380 in the Linux kernel.
  • Fixed vulnerabilities in sys-libs/glibc and dev-go/net: CVE-2026-6238 and CVE-2026-25680.
• Miscellaneous:
  • Synchronized OS image components with COS version 125-19216-532-25.
  • Updated base image to cos-gb300-bm-125-19216-532-14.
  • Adjusted the net.ipv4.udp_mem runtime sysctl configuration.

pdcsi

Updated pdcsi component from version 1.34.71 to 1.34.74.

• Security Fixes:
  • Fixed vulnerabilities in Go dependencies: CVE-2026-41178, CVE-2026-73500, CVE-2026-56854, GO-2026-6061, and GO-2026-6094.
  • Updated Go dependencies to resolve security vulnerabilities: CVE-2026-46600, CVE-2026-56852, CVE-2026-29181, CVE-2026-39883, CVE-2026-41178, CVE-2026-56865, CVE-2026-78662, and GO-2026-6061.
  • Fixed vulnerabilities in google.golang.org/grpc: CVE-2026-84304 and CVE-2026-84445.
  • Fixed a vulnerability in golang.org/x/crypto: CVE-2026-78662.
• Miscellaneous:
  • Updated the Go runtime to version 1.27.1 and updated container base images to resolve internal dependency requirements.

workloadautoscaler

Updated workloadautoscaler component from version 17.7.0 to 17.10.0.

• Bug Fixes:
  • Updated Vertical Pod Autoscaler components (including the admission-controller, recommender, and updater) to version 0.25.0-gke.14.

1.34.11-gke.1102000

The following sections describe changes in this patch version when compared with the previous patch version, 1.34.11-gke.1056000. For information about upstream Kubernetes changes, see the Kubernetes v1.34.11 changelog.

Kubernetes Updates

k8s-api

Updated k8s-api cohort from version 1.34.11-gke.100 to 1.34.11-gke.300.

• Miscellaneous:
  • Updated the Go runtime to v1.27.1 and updated container base images (setcap and go-runner) for kube-apiserver and kube-proxy.

Component Updates

The following sections provide information about updates to specific GKE system components in this patch version.

gcsfusecsi

Updated gcsfusecsi component from version 1.34.59 to 1.34.60.

• Security Fixes:
  • Updated golang.org/x/crypto to v0.56.0 to resolve CVE-2026-78662.

networkpolicy-antrea

Updated networkpolicy-antrea component from version 0.5.10 to 0.5.11.

• Miscellaneous:
  • Updated the Antrea container image to v1.4.0-gke.73 and updated the Go runtime and base distroless image.

1.34.11-gke.1056000

The following sections describe changes in this patch version when compared with the previous patch version, 1.34.11-gke.1044000. For information about upstream Kubernetes changes, see the Kubernetes v1.34.11 changelog.

Component Updates

The following sections provide information about updates to specific GKE system components in this patch version.

envoy

Updated envoy component from version 1.0.21 to 1.0.22.

• Security Fixes:
  • Updated kcp_envoy image to include TCP connection pool pointer validation security fix.

managed-prometheus

Updated managed-prometheus component from version 0.17.5-gke.5 to 0.17.6-gke.0.

• Security Fixes:
  • Resolved vulnerabilities in component dependencies and updated container images.

1.34.11-gke.1044000

The following sections describe changes in this patch version when compared with the previous patch version, 1.34.10-gke.1328000. For information about upstream Kubernetes changes, see the Kubernetes v1.34.11 changelog.

Component Updates

The following sections provide information about updates to specific GKE system components in this patch version.

advanceddatapath

Updated advanceddatapath component from version 34.8.43 to 34.8.44.

• Security Fixes:
  • Updated golang.org/x/net to resolve GO-2026-5942.
  • Updated golang.org/x/text to resolve GO-2026-5970.
  • Updated Debian Bookworm and Bullseye base images to include the latest security patches.

kube-addon-manager

Updated kube-addon-manager component from version 31.0.21 to 31.0.22.

• Miscellaneous:
  • Updated the gke-distroless/bash container image to version gke_distroless_20260815.00_p0.

networkpolicy-antrea

Updated networkpolicy-antrea component from version 0.5.9 to 0.5.10.

• Miscellaneous:
  • Updated cluster-proportional-autoscaler to v1.10.2-gke.54.

networkpolicy-calico

Updated networkpolicy-calico component from version 4.34.9 to 4.34.10.

• Security Fixes:
  • Fixed CVE-2026-39822 in calico/node by updating the Go build version to 1.25.12.
  • Updated golang.org/x/crypto to v0.52.0 in calico/node to remediate security vulnerabilities.

tpu-device-plugin

Updated tpu-device-plugin component from version 1.34.17-gke.6 to 1.34.17-gke.7.

• Security Fixes:
  • Updated google.golang.org/grpc to v1.82.1 to resolve GO-2026-6061.

1.34.10-gke.1328000

The following sections describe changes in this patch version when compared with the previous patch version, 1.34.10-gke.1236000. For information about upstream Kubernetes changes, see the Kubernetes v1.34.10 changelog.

Component Updates

The following sections provide information about updates to specific GKE system components in this patch version.

accelerator-operator

Updated accelerator-operator component from version 1.34.10 to 1.34.11.

• Miscellaneous:
  • Updated the accelerator-operator container image to version v1.34.5-gke.13.

customer-logs-exporter

Updated customer-logs-exporter component from version 1.34.0-gke.8 to 1.34.0-gke.9.

• Miscellaneous:
  • Updated the bash base image used by the component.

gcsfusecsi

Updated gcsfusecsi component from version 1.34.58 to 1.34.59.

• Miscellaneous:
  • Updated the Go runtime to version 1.25.14 and updated base images for the Google Cloud Storage Fuse CSI driver, node- driver-registrar, sidecar mounter, webhook, and metadata prefetcher.

osimage

Updated osimage component from version 1.34.181 to 1.34.197.

• Features:
  • Enabled CONFIG_UDMABUF on x86_64 architectures.
  • Added bpf-lsm-policy for VM restrictions.
  • Updated Linux kernel to COS-6.12.94.
  • Updated Docker to v27.5.1.
  • Updated containerd to v2.1.9.
  • Enabled CONFIG_MEMORY_FAILURE in the Linux kernel for ARM64 to improve memory error handling when running CUDA workloads.
• Bug Fixes:
  • Applied a kernel patch to reduce the bcache garbage collection sleep interval, preventing potential I/O stalls.
  • Resolved a significant issue affecting users of the XFS file system.
  • Updated the udev rule configuration for the protected_stateful_partition.
  • Upgraded curl to 8.21.0.
  • Changed the installation path for google-guest-agent plugins to /var/lib/google/guest-agent.
• Security Fixes:
  • Fixed CVE-2026-68329 in the Linux kernel.
  • Fixed CVE-2026-64380 in the Linux kernel.
  • Fixed CVE-2026-64561 in the Linux kernel.
  • Fixed CVE-2026-64562 in the Linux kernel.
  • Fixed CVE-2026-64567 in the Linux kernel.
  • Fixed CVE-2026-64572 in the Linux kernel.
  • Fixed CVE-2026-64576 in the Linux kernel.
  • Fixed CVE-2026-64579 in the Linux kernel.
  • Fixed CVE-2026-64580 in the Linux kernel.
  • Fixed CVE-2026-64590 in the Linux kernel.
  • Fixed CVE-2026-64593 in the Linux kernel.
  • Fixed CVE-2026-64597 in the Linux kernel.
  • Fixed CVE-2026-64598 in the Linux kernel.
  • Fixed CVE-2026-64604 in the Linux kernel.
  • Fixed CVE-2026-68092 in the Linux kernel.
  • Fixed CVE-2026-68119 in the Linux kernel.
  • Fixed CVE-2026-68136 in the Linux kernel.
  • Fixed CVE-2026-68142 in the Linux kernel.
  • Fixed CVE-2026-68145 in the Linux kernel.
  • Fixed CVE-2026-68146 in the Linux kernel.
  • Fixed CVE-2026-68147 in the Linux kernel.
  • Fixed CVE-2026-68149 in the Linux kernel.
  • Fixed CVE-2026-68184 in the Linux kernel.
  • Fixed CVE-2026-68186 in the Linux kernel.
  • Fixed CVE-2026-68187 in the Linux kernel.
  • Fixed CVE-2026-68284 in the Linux kernel.
  • Fixed CVE-2026-68338 in the Linux kernel.
  • Fixed CVE-2026-68388 in the Linux kernel.
  • Fixed CVE-2026-68396 in the Linux kernel.
  • Fixed CVE-2026-68398 in the Linux kernel.
  • Fixed CVE-2026-68422 in the Linux kernel.
  • Fixed CVE-2026-68425 in the Linux kernel.
  • Fixed CVE-2026-68428 in the Linux kernel.
  • Fixed CVE-2026-68432 in the Linux kernel.
  • Fixed CVE-2026-68442 in the Linux kernel.
  • Fixed CVE-2026-68450 in the Linux kernel.
  • Fixed CVE-2026-35177 in app-editors/vim and app-editors/vim-core.
  • Fixed CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, and CVE-2026-46598 in dev-go/crypto.
  • Fixed CVE-2026-58470 in net-misc/wget.
  • Fixed CVE-2026-59890 in dev-python/setuptools.
  • Fixed multiple vulnerabilities in the Linux kernel: CVE-2026-64227, CVE-2026-64244, CVE-2026-64247, CVE-2026-64265, CVE-2026-64266, CVE-2026-64284, CVE-2026-64289, CVE-2026-64294, CVE-2026-64298, CVE-2026-64299, CVE-2026-64306, CVE-2026-64313, CVE-2026-64317, CVE-2026-64319, CVE-2026-64322, CVE-2026-64323, CVE-2026-64324, CVE-2026-64326, CVE-2026-64354, CVE-2026-64357, CVE-2026-64368, CVE-2026-64370, CVE-2026-64373, CVE-2026-64378, CVE-2026-64379, CVE-2026-64381, CVE-2026-64382, CVE-2026-64383, CVE-2026-64384, CVE-2026-64385, CVE-2026-64386, CVE-2026-64387, CVE-2026-64411, CVE-2026-64412, CVE-2026-64414, CVE-2026-64415, CVE-2026-64418, CVE-2026-64422, CVE-2026-64423, CVE-2026-64425, CVE-2026-64432, CVE-2026-64435, CVE-2026-64436, CVE-2026-64448, CVE-2026-64456, CVE-2026-64473, CVE-2026-64474, CVE-2026-64475, CVE-2026-64512, and CVE-2026-64514.
  • Upgraded net-libs/nghttp2 to 1.69.0 to fix CVE-2026-58055.
  • Fixed CVE-2026-29111 in sys-apps/systemd.
  • Fixed CVE-2026-3644 and CVE-2026-6019 in dev-lang/python.
  • Fixed CVE-2026-40355 and CVE-2026-40356 in app-crypt/mit-krb5.
  • Fixed multiple vulnerabilities in the Linux kernel: CVE-2026-53381, CVE-2026-53385, CVE-2026-53388, CVE-2026-53391, CVE-2026-53392, CVE-2026-53393, CVE-2026-53394, CVE-2026-53397, CVE-2026-53398, CVE-2026-53400, CVE-2026-63795, CVE-2026-63800, CVE-2026-63802, CVE-2026-63806, CVE-2026-63807, CVE-2026-63809, CVE-2026-63810, CVE-2026-63823, CVE-2026-63824, CVE-2026-63827, CVE-2026-63828, CVE-2026-63829, CVE-2026-63830, CVE-2026-63833, CVE-2026-64187, and CVE-2026-64189.
  • Fixed multiple vulnerabilities in openssh: CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, and CVE-2026-60002.
  • Fixed CVE-2026-58013, CVE-2026-58014, CVE-2026-58015, and CVE-2026-58016 in glib.
  • Fixed CVE-2026-43010 and CVE-2026-43216 in the Linux kernel.
  • Fixed CVE-2026-58469, CVE-2026-58471, and CVE-2026-58472 in wget.
  • Resolved CVE-2026-46680, CVE-2026-50195, CVE-2026-53492, and CVE-2026-53488 via containerd update to v2.1.9.
  • Fixed CVE-2026-53341 in the Linux kernel.
  • Fixed KCTF-736b380 in the Linux kernel.
• Miscellaneous:
  • Synchronized OS image components with COS version 125-19216-532-25.
  • Updated base image to cos-gb300-bm-125-19216-532-14.