<?xml version="1.0" encoding="UTF-8"?>
<!-- AUTOGENERATED FILE. DO NOT EDIT. -->
<feed xmlns="http://www.w3.org/2005/Atom">
  <id>tag:google.com,2016:cos-125-release-notes</id>
  <title>Container Optimized OS 125 - Release notes</title>
  <link rel="self" href="https://docs.cloud.google.com/feeds/cos-125-release-notes.xml"/>
  <author>
    <name>Google Cloud Platform</name>
  </author>
  <updated>2026-10-27T00:00:00-07:00</updated>

  <entry>
    <title>October 27, 2026</title>
    <id>tag:google.com,2016:cos-125-release-notes#October_27_2026</id>
    <updated>2026-10-27T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#October_27_2026"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-125-19216-760-20">cos-125-19216-760-20 <a id='"cos-arm64-125-19216-760-20"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/c0c0e54972faeecef0eb8728e9c1d6291f4f7dee
">COS-6.12.113</a></td>
<td>v27.5.1</td>
<td>v2.2.7</td>
<td><a href="https://storage.googleapis.com/cos-tools/19216.760.20/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Change</h3>
<p>Updated app-admin/google-guest-configs to v20261025.00.</p>
<h3>Fixed</h3>
<p>Fixed a 60 second outage after an idpf function reset on IPU E2100 caused by misreading PFGEN_RSTAT.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-33186 in google-osconfig-agent.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-82474 in app-admin/sudo.</p>
<h3>Change</h3>
<p>Runtime sysctl changes:
<ul>
<li>Changed: fs.epoll.max_user_watches: 1808562 -&gt; 1808517</li>
<li>Changed: fs.fanotify.max_user_marks: 68416 -&gt; 68412</li>
<li>Changed: fs.inotify.max_user_watches: 64192 -&gt; 64189</li>
<li>Changed: kernel.threads-max: 63183 -&gt; 63178</li>
<li>Changed: net.ipv4.tcp_mem: 94020    125361  188040 -&gt; 94017 125357  188034</li>
<li>Changed: net.ipv4.udp_mem: 188040   250722  376080 -&gt; 188034    250715  376068</li>
<li>Changed: user.max_cgroup_namespaces: 31591 -&gt; 31589</li>
<li>Changed: user.max_fanotify_marks: 68416 -&gt; 68412</li>
<li>Changed: user.max_inotify_watches: 64192 -&gt; 64189</li>
<li>Changed: user.max_ipc_namespaces: 31591 -&gt; 31589</li>
<li>Changed: user.max_mnt_namespaces: 31591 -&gt; 31589</li>
<li>Changed: user.max_net_namespaces: 31591 -&gt; 31589</li>
<li>Changed: user.max_pid_namespaces: 31591 -&gt; 31589</li>
<li>Changed: user.max_time_namespaces: 31591 -&gt; 31589</li>
<li>Changed: user.max_user_namespaces: 31591 -&gt; 31589</li>
<li>Changed: user.max_uts_namespaces: 31591 -&gt; 31589</li>
</ul></p>
]]>
    </content>
  </entry>

  <entry>
    <title>October 22, 2026</title>
    <id>tag:google.com,2016:cos-125-release-notes#October_22_2026</id>
    <updated>2026-10-22T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#October_22_2026"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-125-19216-760-8">cos-125-19216-760-8 <a id='"cos-arm64-125-19216-760-8"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/bac32aa947d1d7d52552c51d3bd2f355ecc21464
">COS-6.12.113</a></td>
<td>v27.5.1</td>
<td>v2.2.7</td>
<td><a href="https://storage.googleapis.com/cos-tools/19216.760.8/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Announcement</h3>
<p>This is an <a href="https://docs.cloud.google.com/container-optimized-os/docs/concepts/versioning#lts_refresh_releases">LTS Refresh release.</a></p>
<h3>Fixed</h3>
<p>Updated cos-gpu-installer to v2.7.11 and toolbox to v20261020.</p>
<h3>Fixed</h3>
<p>Upgraded app-misc/ca-certificates to v20260816.3.125. This removes the certificates affected by the eMudhra intermediate certificate compromise.</p>
<h3>Fixed</h3>
<p>Upgraded dev-libs/nss to v3.131.1. This removes the certificates affected by the eMudhra intermediate certificate compromise.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-111943 in dev-lang/go.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-39831 in guest-agent.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-39831 in node-problem-detector.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-39832, CVE-2026-39831 in cos-extensions.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-39833 in nvidia-container-toolkit.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-39833, CVE-2024-28180, CVE-2025-11065, CVE-2026-25680, CVE-2025-47914, GHSA-w67g-5rqw-f597, CVE-2026-84304, GHSA-fv92-fjc5-jj9h, CVE-2023-47108, CVE-2024-51744, CVE-2026-35469, CVE-2025-65637, CVE-2025-30204, CVE-2024-45337, CVE-2025-52565, CVE-2026-42508, CVE-2026-46598, CVE-2023-45142, CVE-2024-45310, CVE-2026-39830, CVE-2026-41579, CVE-2026-46595, CVE-2024-24786, CVE-2026-39832, CVE-2026-10722, CVE-2026-39831, CVE-2025-22869 in kubernetes.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-42508, CVE-2026-46595 in cri-tools.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46595 in google-guest-agent.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46595, CVE-2026-42508 in google-osconfig-agent.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-98432 in the Linux kernel.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>October 19, 2026</title>
    <id>tag:google.com,2016:cos-125-release-notes#October_19_2026</id>
    <updated>2026-10-19T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#October_19_2026"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-125-19216-739-16">cos-125-19216-739-16 <a id='"cos-arm64-125-19216-739-16"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/d70e5f8042c76c3a2b0c640806692e13ddae3ecf
">COS-6.12.112</a></td>
<td>v27.5.1</td>
<td>v2.2.7</td>
<td><a href="https://storage.googleapis.com/cos-tools/19216.739.16/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Fixed</h3>
<p>Added support for loading the pci-pf-stub module.</p>
<h3>Fixed</h3>
<p>Fix docker cp failure when copying to/from containers with nested bind mounts.</p>
<h3>Fixed</h3>
<p>Upgraded app-editors/vim to v9.2.1125, Upgraded app-editors/vim-core to v9.2.1125.</p>
<h3>Security</h3>
<p>Fix CVE-2026-19445 by upgrading to python 3.11.17.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-5435 in sys-libs/glibc.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-99999 in the Linux kernel.</p>
<h3>Change</h3>
<p>Runtime sysctl changes:
<ul>
<li>Changed: fs.epoll.max_user_watches: 1808517 -&gt; 1808562</li>
<li>Changed: fs.fanotify.max_user_marks: 68412 -&gt; 68416</li>
<li>Changed: fs.inotify.max_user_watches: 64189 -&gt; 64192</li>
<li>Changed: kernel.threads-max: 63178 -&gt; 63183</li>
<li>Changed: net.ipv4.tcp_mem: 94017    125357  188034 -&gt; 94020 125361  188040</li>
<li>Changed: net.ipv4.udp_mem: 188034   250715  376068 -&gt; 188040    250722  376080</li>
<li>Changed: user.max_cgroup_namespaces: 31589 -&gt; 31591</li>
<li>Changed: user.max_fanotify_marks: 68412 -&gt; 68416</li>
<li>Changed: user.max_inotify_watches: 64189 -&gt; 64192</li>
<li>Changed: user.max_ipc_namespaces: 31589 -&gt; 31591</li>
<li>Changed: user.max_mnt_namespaces: 31589 -&gt; 31591</li>
<li>Changed: user.max_net_namespaces: 31589 -&gt; 31591</li>
<li>Changed: user.max_pid_namespaces: 31589 -&gt; 31591</li>
<li>Changed: user.max_time_namespaces: 31589 -&gt; 31591</li>
<li>Changed: user.max_user_namespaces: 31589 -&gt; 31591</li>
<li>Changed: user.max_uts_namespaces: 31589 -&gt; 31591</li>
</ul></p>
]]>
    </content>
  </entry>

  <entry>
    <title>October 12, 2026</title>
    <id>tag:google.com,2016:cos-125-release-notes#October_12_2026</id>
    <updated>2026-10-12T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#October_12_2026"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-125-19216-739-5">cos-125-19216-739-5 <a id='"cos-arm64-125-19216-739-5"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/91e56902b9c6999dabbff541fd5baf20aee3108b
">COS-6.12.112</a></td>
<td>v27.5.1</td>
<td>v2.2.7</td>
<td><a href="https://storage.googleapis.com/cos-tools/19216.739.5/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Announcement</h3>
<p>This is an <a href="https://docs.cloud.google.com/container-optimized-os/docs/concepts/versioning#lts_refresh_releases">LTS Refresh release.</a></p>
<h3>Fixed</h3>
<p>Added support for lustre v2.14.0_p262-r1</p>
<h3>Security</h3>
<p>Fixed CVE-2026-18220 in sys-libs/binutils-libs.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-5450 in sys-libs/glibc.</p>
<h3>Security</h3>
<p>Patch CVE-2026-49264, CVE-2026-49265 on dev-python/oauthlib.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>October 06, 2026</title>
    <id>tag:google.com,2016:cos-125-release-notes#October_06_2026</id>
    <updated>2026-10-06T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#October_06_2026"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-125-19216-700-23">cos-125-19216-700-23 <a id='"cos-arm64-125-19216-700-23"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/016be3984fda059a05c980c7133651fec7536d1c
">COS-6.12.110</a></td>
<td>v27.5.1</td>
<td>v2.2.7</td>
<td><a href="https://storage.googleapis.com/cos-tools/19216.700.23/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Change</h3>
<p>Updated dev-libs/openssl to v3.5.9.</p>
<h3>Fixed</h3>
<p>Added support for net-fs/lustre-client-drivers v2.14.0_p262.</p>
<h3>Fixed</h3>
<p>Added the "watchdog_timeout" module parameter to the idpf driver.</p>
<h3>Fixed</h3>
<p>Upgraded app-admin/google-guest-configs to v20260928.00.</p>
<h3>Fixed</h3>
<p>Upgraded dev-libs/expat to v2.8.5.</p>
<h3>Fixed</h3>
<p>Upgraded sys-apps/xemu to v0.0.11.</p>
<h3>Fixed</h3>
<p>Upgraded sys-process/lsof to v4.99.7.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-5928 in sys-libs/glibc.</p>
<h3>Security</h3>
<p>Upgraded dev-libs/libxml2 to v2.15.4. This fixes CVE-2026-86140.</p>
<h3>Change</h3>
<p>Runtime sysctl changes:
<ul>
<li>Changed: net.ipv4.udp_mem: 188034   250714  376068 -&gt; 188034    250715  376068</li>
</ul></p>
]]>
    </content>
  </entry>

  <entry>
    <title>September 28, 2026</title>
    <id>tag:google.com,2016:cos-125-release-notes#September_28_2026</id>
    <updated>2026-09-28T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#September_28_2026"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-125-19216-700-7">cos-125-19216-700-7 <a id='"cos-arm64-125-19216-700-7"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/393cf3f7db2dfb458f3f1513e7eb6ef3a81930ba
">COS-6.12.110</a></td>
<td>v27.5.1</td>
<td>v2.2.7</td>
<td><a href="https://storage.googleapis.com/cos-tools/19216.700.7/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Announcement</h3>
<p>This is an <a href="https://docs.cloud.google.com/container-optimized-os/docs/concepts/versioning#lts_refresh_releases">LTS Refresh release.</a></p>
<h3>Change</h3>
<p>Ensure time sync prior to TLS handshake.</p>
<h3>Fixed</h3>
<p>Added support for bare metal TPUs.</p>
<h3>Change</h3>
<p>Runtime sysctl changes:
<ul>
<li>Changed: net.ipv4.udp_mem: 188034   250715  376068 -&gt; 188034    250714  376068</li>
</ul></p>
]]>
    </content>
  </entry>

  <entry>
    <title>September 21, 2026</title>
    <id>tag:google.com,2016:cos-125-release-notes#September_21_2026</id>
    <updated>2026-09-21T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#September_21_2026"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-125-19216-655-40">cos-125-19216-655-40 <a id='"cos-arm64-125-19216-655-40"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/1133af89a76cd21b91110351a353e7300d39c96b
">COS-6.12.105</a></td>
<td>v27.5.1</td>
<td>v2.2.7</td>
<td><a href="https://storage.googleapis.com/cos-tools/19216.655.40/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Feature</h3>
<p>Added support for loading the CephFS kernel driver.</p>
<h3>Fixed</h3>
<p>Fixed an issue where temporary efivarfs mounts under /tmp could persist after boot.</p>
<h3>Fixed</h3>
<p>Upgraded app-arch/bzip2 to v1.0.8-r5.</p>
<h3>Fixed</h3>
<p>Upgraded app-shells/dash to v0.5.13.5.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-0864 in dev-lang/python.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-15308 in dev-lang/python.</p>
<h3>Security</h3>
<p>Upgraded net-misc/rsync to version 3.5.0. This fixes CVE-2026-53791, CVE-2026-53784, CVE-2026-53786, CVE-2026-53789, CVE-2026-53795, CVE-2026-53797, CVE-2026-53798, CVE-2026-53799, CVE-2026-53800, CVE-2026-53801, CVE-2026-53802, CVE-2026-53803, CVE-2026-70455, CVE-2026-70457, CVE-2026-70459, CVE-2026-70461, and CVE-2026-70463.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>September 17, 2026</title>
    <id>tag:google.com,2016:cos-125-release-notes#September_17_2026</id>
    <updated>2026-09-17T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#September_17_2026"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-125-19216-655-28">cos-125-19216-655-28 <a id='"cos-arm64-125-19216-655-28"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/8b85c09213b2044542f81eae6f4b12adafdf848e
">COS-6.12.105</a></td>
<td>v27.5.1</td>
<td>v2.2.7</td>
<td><a href="https://storage.googleapis.com/cos-tools/19216.655.28/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Feature</h3>
<p>Fixed a performance issue in the GVE driver on multi-NUMA systems.</p>
<h3>Fixed</h3>
<p>Upgraded net-libs/libnftnl to v1.2.9.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-80590 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-80737 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-80788 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-80789 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-80791 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-80792 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-80793 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-80805 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-80806 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-80808 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-80837 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-80838 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-80839 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-80842 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-80843 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-80845 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-80852 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-80854 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-80855 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-80856 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-80862 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-80916 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-80917 in the Linux kernel.</p>
<h3>Change</h3>
<p>Runtime sysctl changes:
<ul>
<li>Changed: net.ipv4.udp_mem: 188034   250714  376068 -&gt; 188034    250715  376068</li>
</ul></p>
]]>
    </content>
  </entry>

  <entry>
    <title>September 08, 2026</title>
    <id>tag:google.com,2016:cos-125-release-notes#September_08_2026</id>
    <updated>2026-09-08T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#September_08_2026"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-125-19216-655-12">cos-125-19216-655-12 <a id='"cos-arm64-125-19216-655-12"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/728af8e16745d2a2cef9323806e50619cc900208
">COS-6.12.105</a></td>
<td>v27.5.1</td>
<td>v2.2.7</td>
<td><a href="https://storage.googleapis.com/cos-tools/19216.655.12/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Fixed</h3>
<p>Added support for NVIDIA driver v595.91.07.</p>
<h3>Fixed</h3>
<p>Fixed docker cp failure when copying to/from containers with symlinked bind mounts.</p>
<h3>Fixed</h3>
<p>Upgraded dev-db/sqlite to v3.53.4.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-6238 in sys-libs/glibc.</p>
<h3>Security</h3>
<p>Updated dev-go/net to v0.55.0 to fix CVE-2026-25680.</p>
<h3>Change</h3>
<p>Runtime sysctl changes:
<ul>
<li>Changed: net.ipv4.udp_mem: 188034   250715  376068 -&gt; 188034    250714  376068</li>
</ul></p>
]]>
    </content>
  </entry>

  <entry>
    <title>August 31, 2026</title>
    <id>tag:google.com,2016:cos-125-release-notes#August_31_2026</id>
    <updated>2026-08-31T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#August_31_2026"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-125-19216-655-6">cos-125-19216-655-6 <a id='"cos-arm64-125-19216-655-6"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/728af8e16745d2a2cef9323806e50619cc900208
">COS-6.12.105</a></td>
<td>v27.5.1</td>
<td>v2.2.7</td>
<td><a href="https://storage.googleapis.com/cos-tools/19216.655.6/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Fixed</h3>
<p>LTS Refresh from main-R125-cos-6.12 to release-R125-cos-6.12</p>
<h3>Fixed</h3>
<p>Upgraded app-arch/zstd to v1.5.7-r1.</p>
<h3>Fixed</h3>
<p>Upgraded app-containers/cni-plugins to v1.9.1.</p>
<h3>Fixed</h3>
<p>Upgraded dev-libs/libverto to v0.3.2-r1.</p>
<h3>Fixed</h3>
<p>Upgraded dev-libs/popt to v1.19-r1.</p>
<h3>Fixed</h3>
<p>Upgraded dev-libs/xxhash to v0.8.3-r2.</p>
<h3>Fixed</h3>
<p>Upgraded sys-auth/passwdqc to v2.0.3-r1.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-68293 in the Linux kernel.</p>
<h3>Security</h3>
<p>Upgraded dev-libs/libxml2 to v2.15.3. This fixes CVE-2026-0989, CVE-2026-0990, and CVE-2026-0992.</p>
<h3>Change</h3>
<p>Runtime sysctl changes:
<ul>
<li>Changed: net.ipv4.udp_mem: 188034   250714  376068 -&gt; 188034    250715  376068</li>
</ul></p>
]]>
    </content>
  </entry>

  <entry>
    <title>August 24, 2026</title>
    <id>tag:google.com,2016:cos-125-release-notes#August_24_2026</id>
    <updated>2026-08-24T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#August_24_2026"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-125-19216-532-135">cos-125-19216-532-135 <a id='"cos-arm64-125-19216-532-135"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/ee59a4a73fdc4a0b29499e5a8625446f6c566f1e
">COS-6.12.94</a></td>
<td>v27.5.1</td>
<td>v2.2.7</td>
<td><a href="https://storage.googleapis.com/cos-tools/19216.532.135/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Change</h3>
<p>Updated cos-gpu-installer to v2.7.7.</p>
<h3>Fixed</h3>
<p>Added support for net-fs/lustre-client-drivers v2.14.0_p259.</p>
<h3>Fixed</h3>
<p>Upgraded sys-apps/xemu to v0.0.10.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-68093 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-68096 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-68096 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-68096 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-68129 in the linux kernel</p>
<h3>Security</h3>
<p>Fixed CVE-2026-68296 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-68386 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed KCTF-0650f1c in the Linux Kernel.</p>
<h3>Change</h3>
<p>Runtime sysctl changes:
<ul>
<li>Changed: net.ipv4.udp_mem: 188034   250715  376068 -&gt; 188034    250714  376068</li>
</ul></p>
]]>
    </content>
  </entry>

  <entry>
    <title>August 20, 2026</title>
    <id>tag:google.com,2016:cos-125-release-notes#August_20_2026</id>
    <updated>2026-08-20T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#August_20_2026"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-125-19216-532-123">cos-125-19216-532-123 <a id='"cos-arm64-125-19216-532-123"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/1a752fac9475f0905bc7fd710d7f3d21e08f67ff
">COS-6.12.94</a></td>
<td>v27.5.1</td>
<td>v2.2.7</td>
<td><a href="https://storage.googleapis.com/cos-tools/19216.532.123/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Change</h3>
<p>Updated containerd to v2.2.7.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-68329 in the Linux kernel.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>August 19, 2026</title>
    <id>tag:google.com,2016:cos-125-release-notes#August_19_2026</id>
    <updated>2026-08-19T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#August_19_2026"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-125-19216-532-121">cos-125-19216-532-121 <a id='"cos-arm64-125-19216-532-121"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/641f6bd58e060e095b56c0307945430ee63ca12c
">COS-6.12.94</a></td>
<td>v27.5.1</td>
<td>v2.1.9</td>
<td><a href="https://storage.googleapis.com/cos-tools/19216.532.121/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Fixed</h3>
<p>Updated cos-gpu-installer to v2.7.6.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-68116 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-68139 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-68171 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-68325 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-68336 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-68343 in the Linux kernel.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>August 17, 2026</title>
    <id>tag:google.com,2016:cos-125-release-notes#August_17_2026</id>
    <updated>2026-08-17T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#August_17_2026"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-125-19216-532-108">cos-125-19216-532-108 <a id='"cos-arm64-125-19216-532-108"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/0be1f7be3821f7cb9ad728d32f04610a53b8a3d6
">COS-6.12.94</a></td>
<td>v27.5.1</td>
<td>v2.1.9</td>
<td><a href="https://storage.googleapis.com/cos-tools/19216.532.108/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Feature</h3>
<p>Enabled CONFIG_UDMABUF on x86_64.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64380 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64561 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64562 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64567 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64572 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64576 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64579 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64580 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64590 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64593 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64597 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64598 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64604 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-68092 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-68119 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-68136 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-68142 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-68145 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-68146 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-68147 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-68149 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-68184 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-68186 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-68187 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-68284 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-68338 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-68388 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-68396 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-68398 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-68422 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-68425 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-68428 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-68432 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-68442 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-68450 in the Linux kernel.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>August 04, 2026</title>
    <id>tag:google.com,2016:cos-125-release-notes#August_04_2026</id>
    <updated>2026-08-04T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#August_04_2026"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-125-19216-532-62">cos-125-19216-532-62 <a id='"cos-arm64-125-19216-532-62"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/b55274a679ceb2601d9a03609106e985b577cb38
">COS-6.12.94</a></td>
<td>v27.5.1</td>
<td>v2.1.9</td>
<td><a href="https://storage.googleapis.com/cos-tools/19216.532.62/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Change</h3>
<p>cchost: Add bpf-lsm-policy for VM restrictions.</p>
<h3>Fixed</h3>
<p>Added kernel patch to reduce bcache garbage collection sleep
interval to prevent I/O stalls.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-35177 in app-editors/vim and app-editors/vim-core.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, and CVE-2026-46598 in dev-go/crypto.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-58470 in net-misc/wget.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-59890 in dev-python/setuptools.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64227 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64244 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64247 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64265 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64266 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64284 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64289 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64294 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64298 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64299 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64306 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64313 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64317 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64319 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64322 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64323 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64324 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64326 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64354 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64357 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64368 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64370 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64373 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64378 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64379 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64381 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64382 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64383 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64384 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64385 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64386 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64387 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64411 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64412 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64414 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64415 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64418 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64422 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64423 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64425 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64432 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64435 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64436 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64448 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64456 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64473 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64474 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64475 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64512 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64514 in the Linux kernel.</p>
<h3>Security</h3>
<p>Upgraded net-libs/nghttp2 to 1.69.0 and fixed CVE-2026-58055.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>July 28, 2026</title>
    <id>tag:google.com,2016:cos-125-release-notes#July_28_2026</id>
    <updated>2026-07-28T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#July_28_2026"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-125-19216-532-42">cos-125-19216-532-42 <a id='"cos-arm64-125-19216-532-42"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/9afaeb55aac96322f3e70cd0cf09eb12fcd168f1
">COS-6.12.94</a></td>
<td>v27.5.1</td>
<td>v2.1.9</td>
<td><a href="https://storage.googleapis.com/cos-tools/19216.532.42/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Fixed</h3>
<p>Fixed an important bug for xfs file system users.</p>
<h3>Fixed</h3>
<p>Updated udev rule for protected_stateful_partition</p>
<h3>Security</h3>
<p>Fixed CVE-2026-29111 in sys-apps/systemd</p>
<h3>Security</h3>
<p>Fixed CVE-2026-3644 in dev-lang/python</p>
<h3>Security</h3>
<p>Fixed CVE-2026-40355 and CVE-2026-40356 in
app-crypt/mit-krb5.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53381 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53385 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53388 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53391 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53392 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53393 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53394 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53397 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53398 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53400 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, and
CVE-2026-60002 in openssh.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-6019 in dev-lang/python</p>
<h3>Security</h3>
<p>Fixed CVE-2026-63795 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-63800 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-63802 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-63806 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-63807 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-63809 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-63810 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-63823 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-63824 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-63827 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-63828 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-63829 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-63830 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-63833 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64187 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-64189 in the Linux kernel.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>July 20, 2026</title>
    <id>tag:google.com,2016:cos-125-release-notes#July_20_2026</id>
    <updated>2026-07-20T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#July_20_2026"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-125-19216-532-25">cos-125-19216-532-25 <a id='"cos-arm64-125-19216-532-25"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/2049bd2bd5fb77d15efcbc7409707051cd3205c8
">COS-6.12.94</a></td>
<td>v27.5.1</td>
<td>v2.1.9</td>
<td><a href="https://storage.googleapis.com/cos-tools/19216.532.25/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Fixed</h3>
<p>Upgraded net-misc/curl to 8.21.0.</p>
<h3>Security</h3>
<p>Fixed
CVE-2026-58013,CVE-2026-58014,CVE-2026-58015,CVE-2026-58016 in glib.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-43010 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-43216 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-58469, CVE-2026-58471, CVE-2026-58472 in net-misc/wget.</p>
<h3>Security</h3>
<p>Updated containerd to v2.1.9. This resolves CVE-2026-46680,CVE-2026-50195,
CVE-2026-53492,CVE-2026-53488.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>July 13, 2026</title>
    <id>tag:google.com,2016:cos-125-release-notes#July_13_2026</id>
    <updated>2026-07-13T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#July_13_2026"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-125-19216-532-14">cos-125-19216-532-14 <a id='"cos-arm64-125-19216-532-14"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/847eb2fe7a011d36889f243da604899209354057
">COS-6.12.94</a></td>
<td>v27.5.1</td>
<td>v2.1.7</td>
<td><a href="https://storage.googleapis.com/cos-tools/19216.532.14/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Feature</h3>
<p>Enabled CONFIG_MEMORY_FAILURE in the Linux kernel for ARM64. This should improve memory errors handling when running CUDA workloads.</p>
<h3>Fixed</h3>
<p>Changed google-guest-agent's plugin installation path to /var/lib/google/guest-agent.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53341 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed KCTF-736b380 in the Linux kernel.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>July 09, 2026</title>
    <id>tag:google.com,2016:cos-125-release-notes#July_09_2026</id>
    <updated>2026-07-09T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#July_09_2026"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-125-19216-532-9">cos-125-19216-532-9 <a id='"cos-arm64-125-19216-532-9"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/5576e06b230afb3a4f89d660421d5400b443d9bc
">COS-6.12.94</a></td>
<td>v27.5.1</td>
<td>v2.1.7</td>
<td><a href="https://storage.googleapis.com/cos-tools/19216.532.9/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Fixed</h3>
<p>Added support for NVIDIA GRID driver version 580.159.03.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-40225 in sys-apps/systemd.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53167 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53359 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed KCTF-d82ba05 in the Linux kernel.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>July 06, 2026</title>
    <id>tag:google.com,2016:cos-125-release-notes#July_06_2026</id>
    <updated>2026-07-06T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#July_06_2026"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-125-19216-532-3">cos-125-19216-532-3 <a id='"cos-arm64-125-19216-532-3"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/68df3c124b6c1b28325aae6b20030bd6d4e87f2c
">COS-6.12.94</a></td>
<td>v27.5.1</td>
<td>v2.1.7</td>
<td><a href="https://storage.googleapis.com/cos-tools/19216.532.3/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Fixed</h3>
<p>Upgraded app-admin/oslogin to v20260626.00.</p>
<h3>Fixed</h3>
<p>Upgraded app-containers/docker-credential-helpers to v0.9.8.</p>
<h3>Fixed</h3>
<p>Upgraded dev-db/sqlite to v3.53.3.</p>
<h3>Fixed</h3>
<p>Upgraded dev-libs/expat to v2.8.2.</p>
<h3>Fixed</h3>
<p>Upgraded net-misc/socat to v1.8.1.3.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-35388 in net-misc/openssh.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-40226 in sys-apps/systemd.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-52921 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-52927 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-52930 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-52942 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53033 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53122 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53131 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53134 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53154 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53156 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53168 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53180 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53181 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53184 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53185 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53189 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53191 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53199 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53207 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53212 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53214 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53218 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53219 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53220 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53223 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53229 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53230 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53232 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53233 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53236 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53239 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53249 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53264 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53265 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53266 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53267 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53268 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53269 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53270 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53275 in the Linux kernel.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>June 29, 2026</title>
    <id>tag:google.com,2016:cos-125-release-notes#June_29_2026</id>
    <updated>2026-06-29T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#June_29_2026"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-125-19216-395-138">cos-125-19216-395-138 <a id='"cos-arm64-125-19216-395-138"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/97bb848ad07a5d645a2ca2193f223dbb01908690
">COS-6.12.85</a></td>
<td>v27.5.1</td>
<td>v2.1.7</td>
<td><a href="https://storage.googleapis.com/cos-tools/19216.395.138/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Change</h3>
<p>Updated app-containers/docker-credential-gcr to v2.1.32, app-containers/docker-credential-helpers to v0.9.7, app-containers/nvidia-container-toolkit to v1.17.9, dev-libs/isa-l to v2.31.1, dev-python/oauthlib to v3.0.2, net-fs/nfs-utils to v2.6.4, sec-policy/apparmor-profiles to v3.1.7, sys-apps/apparmor to v3.1.7, sys-libs/libapparmor to v3.1.7.</p>
<h3>Change</h3>
<p>Updated app-editors/vim to v9.1.2148, app-editors/vim-core to v9.1.2148, dev-libs/libtraceevent to v1.7.3, dev-libs/libtracefs to v1.6.4, net-firewall/conntrack-tools to v1.4.9, sys-fs/fuse to v2.9.9, sys-fs/fuse-common to v3.10.5.</p>
<h3>Change</h3>
<p>Updated gzip to v1.14_p20260502, xz-utils to v5.4.7, zstd to v1.5.7, python-exec-conf to v2.4.10, expat to v2.8.1, json-c to v0.16.20220414, libaio to v0.3.113, xxhash to v0.8.3, PySocks to v1.6.8, cryptography to v39.0.2, markupsafe to v2.1.5, pyrsistent to v0.14.11, python-magic to v0.4.27, pyyaml to v6.0.3, rfc3339-validator to v0.1.4, urllib3 to v1.26.20, c-ares to v1.34.6, iptables to v1.8.13, gentoo-functions to v1.7.7, mawk to v1.3.4_p20260302, lvm2 to v2.03.39, binutils-libs to v2.46.1, libxcrypt to v4.4.38, talloc to v2.4.4.</p>
<h3>Feature</h3>
<p>Added cos-dkms support for vast client
drivers v4.5.7.</p>
<h3>Feature</h3>
<p>Support nvidia-fs for COS GPU installer</p>
<h3>Fixed</h3>
<p>Upgraded app-admin/logrotate to v3.22.0-r1.</p>
<h3>Fixed</h3>
<p>Upgraded app-admin/sosreport to v4.11.2.</p>
<h3>Fixed</h3>
<p>Upgraded app-shells/dash to v0.5.13.4-r2.</p>
<h3>Fixed</h3>
<p>Upgraded dev-db/sqlite to v3.53.1.</p>
<h3>Fixed</h3>
<p>Upgraded net-misc/curl to v8.20.0-r1.</p>
<h3>Fixed</h3>
<p>Upgraded net-misc/rsync to v3.4.4.</p>
<h3>Fixed</h3>
<p>Upgraded sys-apps/gentoo-functions to v1.7.6.</p>
<h3>Fixed</h3>
<p>Upgraded sys-apps/less to v704.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-11822, CVE-2026-11824 in dev-db/sqlite.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-43116 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-45850 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-52908 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-52910 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-52912 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-52920 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-52923 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-52925 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-52928 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-52933 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-52936 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-52943 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-52969 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-52970 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-52974 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-52977 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-52980 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-52981 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-52984 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-52986 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-52989 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-52990 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-52998 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-52999 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53001 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53002 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53003 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53006 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53012 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53013 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53014 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53021 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53023 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53031 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53032 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53034 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53035 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53036 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53050 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53060 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53062 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53063 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53064 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53069 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53074 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53075 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53076 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53080 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53083 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53085 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53094 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53096 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53111 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53115 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53120 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53123 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53126 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-53129 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-7210 in dev-lang/python.</p>
<h3>Security</h3>
<p>Upgraded dev-libs/openssl to v3.5.7 to fix CVE-2026-45445,
CVE-2026-34180,CVE-2026-9076,CVE-2026-34181,CVE-2026-42764,CVE-2026-34183,
CVE-2026-34182,CVE-2026-45447,CVE-2026-7383.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>June 22, 2026</title>
    <id>tag:google.com,2016:cos-125-release-notes#June_22_2026</id>
    <updated>2026-06-22T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#June_22_2026"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-125-19216-395-112">cos-125-19216-395-112 <a id='"cos-arm64-125-19216-395-112"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/1dd147644c2ffa2b98ed57056012bfed5c2d2190
">COS-6.12.85</a></td>
<td>v27.5.1</td>
<td>v2.1.7</td>
<td><a href="https://storage.googleapis.com/cos-tools/19216.395.112/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Announcement</h3>
<p>Minor changes.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>June 18, 2026</title>
    <id>tag:google.com,2016:cos-125-release-notes#June_18_2026</id>
    <updated>2026-06-18T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#June_18_2026"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-125-19216-395-109">cos-125-19216-395-109 <a id='"cos-arm64-125-19216-395-109"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/1dd147644c2ffa2b98ed57056012bfed5c2d2190
">COS-6.12.85</a></td>
<td>v27.5.1</td>
<td>v2.1.7</td>
<td><a href="https://storage.googleapis.com/cos-tools/19216.395.109/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Change</h3>
<p>Updated oslogin to v20260605.00.</p>
<h3>Security</h3>
<p>Fix CVE-2026-41568 in app-containers/docker.</p>
<h3>Security</h3>
<p>Fix CVE-2026-415687 in app-containers/docker.</p>
<h3>Security</h3>
<p>Fix CVE-2026-42306 in app-containers/docker.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46315 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46321 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46322 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46323 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, and CVE-2026-47262 in app-containers/containerd.</p>
<h3>Change</h3>
<p>Runtime sysctl changes:
<ul>
<li>Changed: net.ipv4.udp_mem: 188034   250715  376068 -&gt; 188034    250714  376068</li>
</ul></p>
]]>
    </content>
  </entry>

  <entry>
    <title>June 15, 2026</title>
    <id>tag:google.com,2016:cos-125-release-notes#June_15_2026</id>
    <updated>2026-06-15T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#June_15_2026"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-125-19216-395-101">cos-125-19216-395-101 <a id='"cos-arm64-125-19216-395-101"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/19cc070c0f9a696f1ec666a1c12e685222e54963
">COS-6.12.85</a></td>
<td>v27.5.1</td>
<td>v2.1.7</td>
<td><a href="https://storage.googleapis.com/cos-tools/19216.395.101/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Fixed</h3>
<p>Fixed a race condition triggered by ext4 online resize that
rarely causes machines to fail to boot.</p>
<h3>Fixed</h3>
<p>Upgraded cos-gpu-installer to v2.7.4.</p>
<h3>Fixed</h3>
<p>Upgraded sys-apps/less to v702.</p>
<h3>Fixed</h3>
<p>Uprev sys-kernel/lakitu-kernel-6_12 to v6.12.92</p>
<h3>Security</h3>
<p>Fixed CVE-2025-71289 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-23394 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-43245 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46160 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46244 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46274 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46283 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46289 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46294 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46303 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46304 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46306 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46316 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed KCTF-def602e in the Linux kernel.</p>
<h3>Security</h3>
<p>Updated dev-python/pyjwt to v2.13.0. This fixes
CVE-2026-48522, CVE-2026-48524, CVE-2026-48525, CVE-2026-485256.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>June 08, 2026</title>
    <id>tag:google.com,2016:cos-125-release-notes#June_08_2026</id>
    <updated>2026-06-08T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#June_08_2026"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-125-19216-395-73">cos-125-19216-395-73 <a id='"cos-arm64-125-19216-395-73"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/9b2019e2a0a65bafcc7fb941120bfa3088ef8a59
">COS-6.12.85</a></td>
<td>v27.5.1</td>
<td>v2.1.7</td>
<td><a href="https://storage.googleapis.com/cos-tools/19216.395.73/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Change</h3>
<p>Updated minijail to r188.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-43303 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-43492 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-43496 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-43499 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-43503 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-45837 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-45838 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-45839 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-45841 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-45842 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-45843 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-45844 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-45987 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-45991 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-45997 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46005 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46015 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46021 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46033 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46037 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46040 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46046 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46050 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46051 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46061 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46062 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46065 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46070 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46072 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46076 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46082 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46086 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46089 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46094 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46101 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46102 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46106 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46107 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46108 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46115 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46116 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46120 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46124 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46128 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46129 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46131 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46132 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46135 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46139 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46149 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46150 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46155 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46159 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46161 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46172 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46173 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46174 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46176 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46177 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46185 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46193 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46195 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46196 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46209 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46214 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46234 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46243 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46300 in the Linux kernel.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>June 01, 2026</title>
    <id>tag:google.com,2016:cos-125-release-notes#June_01_2026</id>
    <updated>2026-06-01T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#June_01_2026"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-125-19216-395-55">cos-125-19216-395-55 <a id='"cos-arm64-125-19216-395-55"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/d2ec5b118f6f5f38bb03d3079965327c76256ba1
">COS-6.12.85</a></td>
<td>v27.5.1</td>
<td>v2.1.7</td>
<td><a href="https://storage.googleapis.com/cos-tools/19216.395.55/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Change</h3>
<p>Allow overriding IMA policy from oem partition.</p>
<h3>Change</h3>
<p>On cchost boards, autoload IMA policy on boot.</p>
<h3>Change</h3>
<p>Set static UUID for the stateful partition.</p>
<h3>Fixed</h3>
<p>Added support for NVIDIA driver v580.159.04.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>May 26, 2026</title>
    <id>tag:google.com,2016:cos-125-release-notes#May_26_2026</id>
    <updated>2026-05-26T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#May_26_2026"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-125-19216-395-47">cos-125-19216-395-47 <a id='"cos-arm64-125-19216-395-47"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/b82d4fb79da9ccb0fb216da3a51f977397f3193d
">COS-6.12.85</a></td>
<td>v27.5.1</td>
<td>v2.1.7</td>
<td><a href="https://storage.googleapis.com/cos-tools/19216.395.47/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Announcement</h3>
<p>This update contains several package upgrades to the latest patch version to ensure security, along with package patches for known CVEs.</p>
<h3>Change</h3>
<p>Added support for the <code>swiotlb=any</code> kernel command line parameter.</p>
<h3>Change</h3>
<p>Update sys-process/audit to v3.0.9.</p>
<h3>Change</h3>
<p>Updated glib to v2.86.5.</p>
<h3>Change</h3>
<p>Upgrade app-admin/fluent-bit to v3.2.10</p>
<h3>Change</h3>
<p>Updated sys-libs/pam to v1.5.3.</p>
<h3>Change</h3>
<p>Upgraded net-misc/openssh to v10.0_p2.</p>
<h3>Fixed</h3>
<p>Fixed a crash that occurs when using the <code>configfile</code> or
<code>source</code> GRUB2 commands when Secure Boot is enabled.</p>
<h3>Fixed</h3>
<p>Upgraded cos-gpu-installer to v2.7.2.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-23171 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-31419 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-31709 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-43088 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-44431 in dev-python/urllib3.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-6732 in dev-libs/libxml2.</p>
<h3>Security</h3>
<p>Fixed KCTF-9e6bf14 in the Linux kernel.</p>
<h3>Security</h3>
<p>Updated dev-lang/go to 1.25.10. This fixes CVE-2026-42499,CVE-2026-39820,CVE-2026-39826,CVE-2026-33814,CVE-2026-39836,CVE-2026-39823,CVE-2026-39825,CVE-2026-39817,CVE-2026-39819.</p>
<h3>Security</h3>
<p>Updated net-misc/curl to v8.20. This fixes CVE-2026-5545,CVE-2026-4873,CVE-2026-6429,CVE-2026-7168,CVE-2026-6253,CVE-2026-6276,CVE-2026-7009,CVE-2026-5773.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>May 21, 2026</title>
    <id>tag:google.com,2016:cos-125-release-notes#May_21_2026</id>
    <updated>2026-05-21T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#May_21_2026"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-125-19216-395-31">cos-125-19216-395-31 <a id='"cos-arm64-125-19216-395-31"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/5241cda1d789949bbcddde5d9320a36c610237d4
">COS-6.12.85</a></td>
<td>v27.5.1</td>
<td>v2.1.7</td>
<td><a href="https://storage.googleapis.com/cos-tools/19216.395.31/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Change</h3>
<p>Switch cchost-* boards to legacy iptables.</p>
<h3>Fixed</h3>
<p>Added support for NVIDIA driver v535.309.01.</p>
<h3>Fixed</h3>
<p>Added support for NVIDIA driver v580.159.03.</p>
<h3>Fixed</h3>
<p>Added support for NVIDIA driver v595.71.05.</p>
<h3>Fixed</h3>
<p>Upgraded app-shells/dash to v0.5.13.4.</p>
<h3>Fixed</h3>
<p>Upgraded cos-gpu-installer to v2.7.1.</p>
<h3>Fixed</h3>
<p>Upgraded net-misc/rsync to v3.4.2.</p>
<h3>Security</h3>
<p>Fixed CVE-2025-38584 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-23473 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-46333 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed argument injection in toolbox.</p>
]]>
    </content>
  </entry>

  <entry>
    <title>May 11, 2026</title>
    <id>tag:google.com,2016:cos-125-release-notes#May_11_2026</id>
    <updated>2026-05-11T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#May_11_2026"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-125-19216-395-7">cos-125-19216-395-7 <a id='"cos-arm64-125-19216-395-7"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/8615dfb7470816ab28b148bb67bba5f12bb4ea0b
">COS-6.12.85</a></td>
<td>v27.5.1</td>
<td>v2.1.7</td>
<td><a href="https://storage.googleapis.com/cos-tools/19216.395.7/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Change</h3>
<p>Runtime sysctl changes:
<ul>
<li>Changed: net.ipv4.udp_mem: 188034   250715  376068 -&gt; 188034    250714  376068</li>
</ul></p>
]]>
    </content>
  </entry>

  <entry>
    <title>May 08, 2026</title>
    <id>tag:google.com,2016:cos-125-release-notes#May_08_2026</id>
    <updated>2026-05-08T00:00:00-07:00</updated>
    <link rel="alternate" href="https://docs.cloud.google.com/container-optimized-os/docs/release-notes#May_08_2026"/>
    <content type="html"><![CDATA[<h3>Change</h3>
<h3 id="cos-125-19216-395-4">cos-125-19216-395-4 <a id='"cos-arm64-125-19216-395-4"/'></a></h3>
<table class="pkg">
<tr>
<td>Kernel</td>
<td>Docker</td>
<td>Containerd</td>
<td><a href="https://cloud.google.com/container-optimized-os/docs/how-to/run-gpus">GPU Drivers</a></td>
</tr>
<tr>
<td><a href="https://cos.googlesource.com/third_party/kernel/+/8615dfb7470816ab28b148bb67bba5f12bb4ea0b
">COS-6.12.85</a></td>
<td>v27.5.1</td>
<td>v2.1.7</td>
<td><a href="https://storage.googleapis.com/cos-tools/19216.395.4/lakitu/gpu_driver_versions.textproto">See List</a></td>
</tr>
</table>
<h3>Announcement</h3>
<p>This is an <a href="https://docs.cloud.google.com/container-optimized-os/docs/concepts/versioning#lts_refresh_releases">LTS Refresh release.</a></p>
<h3>Security</h3>
<p>Fixed CVE-2026-43284 (dirtyfrag) in the Linux kernel.</p>
<h3>Change</h3>
<p>Apply hardening sysctls on cchost boards.</p>
<h3>Change</h3>
<p>Enabled mm hardening kernel cmdlines on cchost.</p>
<h3>Fixed</h3>
<p>Upgraded dev-db/sqlite to v3.51.2.</p>
<h3>Fixed</h3>
<p>Upgraded dev-libs/expat to v2.7.4.</p>
<h3>Fixed</h3>
<p>Upgraded net-libs/libnetfilter_conntrack to v1.1.1.</p>
<h3>Fixed</h3>
<p>Upgraded sys-libs/libseccomp to v2.6.0-r3.</p>
<h3>Fixed</h3>
<p>Upgraded sys-process/procps to v4.0.6.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-31693 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-31694 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-31700 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-31708 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-31716 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-31738 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-31752 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-31774 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-31781 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-35385 and CVE-2026-35386 in net-misc/openssh.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-43012 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-43013 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-43016 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-43024 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-43026 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-43027 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-43028 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-43030 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-43035 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-43037 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-43038 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-43040 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-43043 in the Linux kernel.</p>
<h3>Security</h3>
<p>Fixed CVE-2026-43057 in the Linux kernel.</p>
<h3>Security</h3>
<p>Upgraded cos-gpu-installer to v2.6.8.</p>
<h3>Security</h3>
<p>Upgraded dev-libs/libgcrypt to v1.10.4 to fix CVE-2026-41989.</p>
<h3>Change</h3>
<p>Runtime sysctl changes:
<ul>
<li>Changed: net.ipv4.udp_mem: 188034   250714  376068 -&gt; 188034    250715  376068</li>
</ul></p>
]]>
    </content>
  </entry>

</feed>
