Container Optimized OS

Upgraded app-admin/google-guest-configs to v20260928.00.

Fixed CVE-2026-5928 in sys-libs/glibc.

Upgraded sys-libs/timezone-data to v2026e.

Upgraded dev-libs/libxml2 to v2.15.4. This fixes CVE-2026-86140.

Upgraded sys-apps/xemu to v0.0.11.

Upgraded sys-process/lsof to v4.99.7.

Added support for NVIDIA driver v595.91.07.

Upgraded app-admin/oslogin to v20260924.00.

Updated app-admin/google-guest-configs to v20260928.00.

Added support for net-fs/lustre-client-drivers v2.14.0_p262.

Upgraded dev-libs/expat to v2.8.5.

Added the "watchdog_timeout" module parameter to the idpf driver.

Updated default cos-gpu-installer version to v2.7.9. It installs ucodes firmwares for VR200.

Rebuilt Go binaries with Go 1.25.14.

Fixed CVE-2026-90054 in the Linux kernel.

Upgraded app-arch/zstd to v1.5.7-r1.

Upgraded dev-libs/json-c to v0.19-r2.

Upgraded app-admin/sosreport to v4.12.0.

Upgraded app-arch/unzip to v6.0_p31.

Fixed an issue where temporary efivarfs mounts under /tmp could persist after boot.

Upgraded net-misc/rsync to version 3.5.0. This fixes CVE-2026-53791, CVE-2026-53784, CVE-2026-53786, CVE-2026-53789, CVE-2026-53795, CVE-2026-53797, CVE-2026-53798, CVE-2026-53799, CVE-2026-53800,…

Upgraded app-arch/bzip2 to v1.0.8-r5.

Upgraded dev-python/pyjwt to v2.14.0.

Upgraded app-misc/ca-certificates to v20260601.3.112.5.

Upgraded dev-lang/luajit to v2.1.1787165859.

Fixed CVE-2026-15308 in dev-lang/python.

Fixed CVE-2026-56391 in sys-apps/coreutils.

Fixed a bug which could cause DOCA workloads to fail to initialize.

Upgraded app-admin/google-guest-configs to v20260911.00.

Upgraded containerd and containerd-test to v2.4.1.

Added support for bare metal TPUs.

Added support for NVIDIA driver v580.178.04.

Upgraded app-admin/oslogin to v20260902.00.

Upgraded dev-libs/expat to v2.8.4.

Upgraded app-arch/xz-utils to v5.8.4.

Upgraded chromeos-base/chromeos-common-script to v0.0.1-r675.

Upgraded sys-devel/binutils-config to v5.6.

Upgraded dev-libs/libverto to v0.3.2-r1.

Upgraded dev-libs/xxhash to v0.8.3-r2.

Fixed CVE-2026-0864 in dev-lang/python.

Upgraded dev-libs/popt to v1.19-r1.

This is an <a href="https://docs.cloud.google.com/container-optimized-os/docs/concepts/versioning#lts_refresh_releases">LTS Refresh release.</a>

Fixed CVE-2026-80737 in the Linux kernel.

Fixed CVE-2026-80590 in the Linux kernel.

Fixed CVE-2026-80805 in the Linux kernel.

Upgraded net-libs/nghttp2 to 1.69.0 and fixed CVE-2026-58055.

Fixed CVE-2026-80916 in the Linux kernel.

Fixed CVE-2026-56391 in sys-apps/coreutils.

Fixed CVE-2026-59890 in dev-python/setuptools.

Fixed CVE-2026-58470 in net-misc/wget.

Upgraded net-libs/libnftnl to v1.2.9.

Upgraded app-admin/google-guest-configs to v20260819.00.

Updated dev-go/net to v0.55.0 to fix CVE-2026-25680.

Upgraded net-libs/libnftnl to v1.2.9.

Updated the Linux kernel to v6.18.48.

Upgraded dev-libs/expat to v2.8.4.

Upgraded dev-libs/popt to v1.19-r1.

Upgraded app-shells/dash to v0.5.13.5.

Upgraded sys-apps/acl to v2.4.0-r2.

Fixed CVE-2026-6238 in sys-libs/glibc.

Fixed docker cp failure when copying to/from containers with symlinked bind mounts.

Upgraded dev-db/sqlite to v3.53.4.

Added support for NVIDIA driver v595.91.07.

Upgraded app-containers/docker-credential-helpers to v0.9.9.

Update dev-go/net to v0.55.0 to fix CVE-2026-25680.

Upgraded sys-process/lsof to v4.99.7.

Updated sys-devel/binutils to v2.40.

Upgraded dev-libs/xxhash to v0.8.3-r2.

Fixed CVE-2026-33186 in app-containers/docker.

Upgraded dev-libs/libverto to v0.3.2-r1.

Upgraded sys-auth/passwdqc to v2.0.3-r1.

Upgraded app-arch/zstd to v1.5.7-r1.

Fixed CVE-2026-6238 in sys-libs/glibc.

Upgraded dev-lang/luajit to v2.1.1780076327.

Upgraded dev-python/oauthlib to v3.3.1.

Upgraded sys-apps/pciutils to v3.15.0.

Upgraded dev-libs/xxhash to v0.8.3-r2.

Fixed CVE-2026-68142 in the Linux kernel.

Upgraded app-admin/sosreport to v4.12.0.

Upgraded sys-apps/ethtool to v7.0.

Upgraded sys-process/lsof to v4.99.7.

Upgraded sys-fs/e2fsprogs to v1.47.4.

Upgraded dev-libs/userspace-rcu to v0.15.6.

Upgraded vim &amp; vim-core to version 9.2.0280. This fixes CVE-2026-35177.