A security-focused maintenance release with extensive Linux and OpenSSH vulnerability remediation, broad dependency updates, and platform and image changes. Operators should account for the dropped platform and image support and the new Vagrant 2.2.5 requirement.
Action needed (41)
securitycriticalcontainerd vulnerability remediation
containerdis updated with remediation for CVE-2026-47262, CVE-2026-50195, CVE-2026-53488, CVE-2026-53489, and CVE-2026-53492.securitycriticalgo vulnerability remediation
gois updated with remediation for the listed vulnerabilities, including CVE-2025-61726, CVE-2025-61727, and CVE-2025-61728.securityhighbind vulnerability remediation
bindis updated with remediation for CVE-2025-40778, CVE-2025-40780, and CVE-2025-8677.securityhighglib vulnerability remediation
glibis updated with remediation for CVE-2025-13601 and CVE-2025-14087.securityhighglibc vulnerability remediation
glibcis updated with remediation for CVE-2025-15281, CVE-2026-0861, and CVE-2026-0915.securityhighgnutls vulnerability remediation
gnutlsis updated with remediation for the listed vulnerabilities, including CVE-2025-14831, CVE-2025-9820, and CVE-2026-1584.securityhighincus vulnerability remediation
incusis updated with remediation for CVE-2026-23953.securityhighlibtasn1 vulnerability remediation
libtasn1is updated with remediation for CVE-2025-13151.securityhigh
nvidia-driversvulnerability remediationnvidia-driversis updated with remediation for the listed vulnerabilities, including CVE-2025-33219, CVE-2025-33221, and CVE-2026-24182.securityhighpodman vulnerability remediation
podmanis updated with remediation for CVE-2025-52881 and CVE-2025-9566.securityhighsssd vulnerability remediation
sssdis updated with remediation for CVE-2025-11561 and CVE-2026-6245.securityhighurllib3 vulnerability remediation
urllib3is updated with remediation for CVE-2025-66418 and CVE-2025-66471.securityhighopenssh vulnerability remediation
opensshis updated with remediation for CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, and CVE-2026-60002.securitymedium
c-aresvulnerability remediationc-aresis updated with remediation for CVE-2025-62408.securityhighcurl vulnerability remediation
curlis updated with remediation for CVE-2025-13034, CVE-2025-14017, CVE-2025-14524, CVE-2025-14819, CVE-2025-15079, CVE-2025-15224, CVE-2026-1965, CVE-2026-3783, CVE-2026-3784, and CVE-2026-3805.securitymediumlibarchive vulnerability remediation
libarchiveis updated with remediation for CVE-2025-60753 and CVE-2026-4426.securitymediumlibxml2 vulnerability remediation
libxml2is updated with remediation for CVE-2026-0989, CVE-2026-0990, CVE-2026-0992, and CVE-2026-1757.securitymediumlibxslt vulnerability remediation
libxsltis updated with remediation for CVE-2025-10911 and CVE-2025-11731.securitymedium
p11-kitvulnerability remediationp11-kitis updated with remediation for CVE-2026-2100.securityhighrsync vulnerability remediation
rsyncis updated with remediation for the listed vulnerabilities, including CVE-2025-10158, CVE-2026-29518, and CVE-2026-41035.securitymedium
util-linuxvulnerability remediationutil-linuxis updated with remediation for CVE-2025-14104 and CVE-2026-27456.securitylow
intel-microcodevulnerability remediationintel-microcodeis updated with remediation for CVE-2025-31648.securitylowlibpcap vulnerability remediation
libpcapis updated with remediation for CVE-2025-11961 and CVE-2025-11964.securitycritical
Linuxvulnerability remediationLinuxis updated with remediation for the listed vulnerabilities, including CVE-2026-80888 and the other advisories recorded for this change.securityhighbubblewrap vulnerability remediation
bubblewrapis updated with remediation for CVE-2026-41163.securitymediumexpat vulnerability remediation
expatis updated with remediation for CVE-2026-24515, CVE-2026-25210, CVE-2026-32776, CVE-2026-32777, CVE-2026-32778, CVE-2026-41080, and CVE-2026-45186.securityhighgnupg vulnerability remediation
gnupgis updated with remediation for CVE-2026-24881, CVE-2026-24882, and CVE-2026-24883.securitymediumlibcap vulnerability remediation
libcapis updated with remediation for CVE-2026-4878.securitymediumlibgcrypt vulnerability remediation
libgcryptis updated with remediation for CVE-2026-41989.securityhighopenssh vulnerability remediation
opensshis updated with remediation for CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, and CVE-2026-35414.securitycriticalopenssl vulnerability remediation
opensslis updated with remediation for the listed vulnerabilities, including CVE-2026-2673, CVE-2026-28386, and CVE-2026-28387.securitylowrunc vulnerability remediation
runcis updated with remediation for CVE-2026-41579.securitymediumsystemd vulnerability remediation
systemdis updated with remediation for CVE-2026-40223, CVE-2026-40225, and CVE-2026-40226.securitylow
xz-utilsvulnerability remediationxz-utilsis updated with remediation for CVE-2026-34743.securitylowzlib vulnerability remediation
zlibis updated with remediation for CVE-2026-27171.breakingEquinix Metal (Packet) support removal
Support for Equinix Metal (Packet) is dropped.
breaking
Rackspacesupport removalSupport for
Rackspace, including OnMetal, is dropped.breakingThe
Oklorelease codename, removedThe
Oklorelease codename is dropped.breakingVMware "insecure" image removal
The VMware "insecure" image is dropped.
breakingVagrant VirtualBox image removal
The Vagrant VirtualBox image is dropped.
breaking
Vagrant2.2.5 requirementVagrant2.2.5 is now required.