Container Optimized OS

Fixed CVE-2026-68329 in the Linux kernel.

Fixed CVE-2026-68284 in the Linux kernel.

Fixed CVE-2026-68116 in the Linux kernel.

Fixed CVE-2026-68325 in the Linux kernel.

Updated cos-gpu-installer to v2.7.6.

Fixed CVE-2026-68296 in the Linux kernel.

Fixed CVE-2026-68116 in the Linux kernel.

Fixed CVE-2026-64561 in the Linux kernel.

Fixed CVE-2026-64476 in the Linux kernel.

Fixed CVE-2026-64380 in the Linux kernel.

Fixed CVE-2026-68425 in the Linux kernel.

Fixed CVE-2026-68081 in the Linux kernel.

Fixed CVE-2026-64227 in the Linux kernel.

Fixed CVE-2026-68329 in the Linux kernel.

Fixed CVE-2026-64604 in the Linux kernel.

Added kernel patch to reduce bcache garbage collection sleep interval to prevent I/O stalls.

Fixed CVE-2026-64352 in the Linux kernel.

Updated app-admin/node-problem-detector to v0.8.25.

Fixed CVE-2026-64401 in the Linux kernel.

Upgraded net-libs/nghttp2 to 1.69.0 and fixed CVE-2026-58055.

Fixed CVE-2026-33186 in google-guest-agent.

Mask nfttables-restore.service to address time to ssh regression.

Fixed KCTF-8173f7e in the Linux Kernel.

Update dev-lang/go to 1.25.12.

Fixed CVE-2026-64227 in the Linux kernel.

Fixed CVE-2026-64508 in the Linux kernel.

Updated containerd to v2.3.2., containerd-test to v2.3.2.. This resolves CVE-2026-46680, CVE-2026-50195, CVE-2026-53488, CVE-2026-53492.

Upgraded net-misc/chrony to v4.8-r2.

Upgraded sys-apps/attr to v2.6.0.

Enabled CONFIG_MEMORY_FAILURE in the Linux kernel for ARM64. This should improve memory errors handling when running CUDA workloads.

Fixed CVE-2026-40355 and CVE-2026-40356 in app-crypt/mit-krb5.

Updated dev-lang/rust, dev-lang/rust-host, dev-lang/rust-bootstrap to v1.84.1; dev-rust/protobuf-codegen to v2.28.0; dev-rust/system_api to v0.24.53-r1596; dev-rust/third-party-crates-src to…

Updated sys-devel/llvm to v20.0_pre547379; sys-libs/compiler-rt to v20.0_pre547379; sys-libs/libcxx to v20.0_pre547379; sys-libs/llvm-libunwind to v20.0_pre547379.

Upgraded app-admin/oslogin to v20260626.00.

Added support for NVIDIA GRID driver version 580.159.03.

Changed google-guest-agent's plugin installation path to /var/lib/google/guest-agent.

Enabled buffer overflow detection for kernel str/mem functions.

Upgraded sys-apps/acl to v2.4.0.

Upgraded net-misc/openssh to version 10.3_p1. This resolves CVE-2026-35387 and CVE-2026-35388.

Fixed CVE-2026-64512 in the Linux kernel.

Upgraded app-crypt/sbsigntools to v0.42.0, and net-misc/m2crypto to v0.42.0.

Fixed an ek-cpu-balloon bug which would result in CPUs being underreported on ek machines with SMT enabled.

Fixed CVE-2026-64411 in the Linux kernel.

Upgraded dev-libs/openssl from v3.5.6 to v4.0.0.

Upgraded net-misc/curl to 8.21.0.

Fixed CVE-2026-29111 in sys-apps/systemd

Upgrade Kubernetes to 1.36.1

Fixed CVE-2026-64306 in the Linux kernel.

Upgraded dev-libs/expat to v2.8.2.

Fixed CVE-2026-59890 in dev-python/setuptools.

Fixed CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597,…

/dev/hugepages is now mounted with the noexec option.

Upgraded CASFS to v0.1.3.

Update udev rule for protected_stateful_partition

Fixed CVE-2026-40225 in sys-apps/systemd.

Updated dev-python/pyjwt to v2.13.0. This fixes CVE-2026-48522, CVE-2026-48524, CVE-2026-48525, CVE-2026-485256.

Upgraded net-misc/socat to v1.8.1.3.

Fixed CVE-2026-58470 in net-misc/wget.

Updated dev-libs/isa-l to v2.32.1.

Upgraded net-libs/nghttp2 to 1.69.0 and fixed CVE-2026-58055.