ContainerOS image release notes for ACK clusters-Container Service for Kubernetes(ACK)-阿里云帮助中心

Alibaba Cloud regularly updates the ContainerOS image with the latest operating system features and security patches. This topic lists the ContainerOS release versions and the updates in each release.

To learn about the features, use cases, and pricing of ContainerOS, see ContainerOS.

ContainerOS 3.7.2

Version

Image ID

Release date

Updates

ContainerOS 3.7.2

lifsea_3_x64_5G_alibase_20260507.qcow2

May 8, 2026

Upgraded the kernel to version 5.10.134-19.4.1.lifsea8 to fix the vulnerability CVE-2026-31431.

See the following sections for details.

lifsea_3_x64_10G_alibase_nvidia_570_20260507.qcow2

May 8, 2026

Important updates

Upgraded the kernel to version 5.10.134-19.4.1.lifsea8 to fix the Linux privilege-escalation vulnerability CVE-2026-31431.

Security updates

Package name

CVE ID

Package version

kernel

CVE-2023-54068

CVE-2026-23038

CVE-2026-23398

CVE-2026-23420

CVE-2026-23449

CVE-2026-23450

CVE-2026-23452

CVE-2026-23455

CVE-2026-23456

CVE-2026-23457

CVE-2026-31399

CVE-2026-31402

CVE-2026-31431

5.10.134-19.4.1.lifsea8

Package updates

Updated packages

kernel-core, 5.10.134-19.3.1.lifsea8.x86_64->5.10.134-19.4.1.lifsea8.x86_64

ContainerOS 3.7.0

Version

Image ID

Release date

Updates

ContainerOS 3.7.0

lifsea_3_x64_5G_alibase_20260113.qcow2

January 28, 2026

This version is in a phased release.

Added a ContainerOS image with pre-installed GPU drivers.

See the following sections for details.

lifsea_3_x64_10G_alibase_nvidia_570_20260113.qcow2

January 28, 2026

Important updates

The ContainerOS image for GPU instances now includes pre-installed NVIDIA driver version 570.195.03, which significantly reduces the initialization time for GPU nodes.
Upgraded the glibc component to fix an issue where a condition variable signal (pthread_cond_signal) could be missed by a waiting thread (pthread_cond_wait) in specific scenarios. This issue was introduced in version 2.27.

Security updates

Package name	CVE ID	Package version
expat	CVE-2025-59375	2.5.0-1.al8
libssh	CVE-2025-5372 CVE-2025-5318	0.9.6-16.0.1.al8
curl	CVE-2025-9086	7.61.1-35.0.2.al8.9

Package updates

Updated packages

curl, 7.61.1-35.0.2.al8.x86_64->7.61.1-35.0.2.al8.9.x86_64
expat, 2.2.5-17.al8.x86_64->2.5.0-1.al8.x86_64
glibc, 2.32-1.21.al8.lifsea8.x86_64->2.32-1.22.al8.lifsea8.x86_64
libcurl, 7.61.1-35.0.2.al8.3.x86_64->7.61.1-35.0.2.al8.9.x86_64
libcurl-devel, 7.61.1-35.0.2.al8.3.x86_64->7.61.1-35.0.2.al8.9.x86_64
libssh, 0.9.6-12.al8.x86_64->0.9.6-16.0.1.al8.x86_64
libssh-config, 0.9.6-12.al8.noarch->0.9.6-16.0.1.al8.noarch
lifsea-cli, 0.4.4-1.al8.x86_64->0.4.5-1.al8.x86_64
lifsea-release, 3-15.al8.x86_64->3-16.al8.x86_64

ContainerOS 3.6.2

Version

Image ID

Release date

Updates

ContainerOS 3.6.2

lifsea_3_x64_5G_alibase_20251204.qcow2

December 15, 2025

This version is in a phased release.

Upgraded containerd to version 2.1.5.
Upgraded the DADI image acceleration component to version 2.1.1.

See the following sections for details.

Important updates

Added support for user data in MIME format. Currently, this feature is limited to configuring custom scripts (by using the text/x-shellscript data type or the runcmd field of the text/cloud-config data type) and CA certificates.
Fixed an issue introduced in ContainerOS 3.5.0 where CloudMonitor failed to run.

Security updates

Package name

CVE ID

Package version

gnutls

CVE-2025-32988

CVE-2025-32990

CVE-2025-6395

3.6.16-8.0.2.al8.4

vim-minimal

CVE-2025-53905

CVE-2025-53906

2:8.0.1763-21.0.1.al8

Package updates

Updated packages

containerd, 2.1.4-2.alios7.x86_64->2.1.5-1.alios7.x86_64
gnutls, 3.6.16-8.0.2.al8.x86_64->3.6.16-8.0.2.al8.4.x86_64
ignition, 2.9.0-2.git1d56dc8.18.al8.x86_64->2.9.0-2.git1d56dc8.19.al8.x86_64
lifsea-cli, 0.4.3-1.al8.x86_64->0.4.4-1.al8.x86_64
overlaybd-snapshotter, 1.3.0-20250219063650.c5dd4fa.x86_64->1.3.1-20251105103635.95d4fff.x86_64
t-storage-overlaybd-open, 1.0.13-20250226164315.c185019.al8.x86_64->1.1.0-20250904172137.2072b54.al8.x86_64
vim-minimal, 2:8.0.1763-19.0.2.al8.5.x86_64->2:8.0.1763-21.0.1.al8.x86_64

ContainerOS 3.6.1

Version

Image ID

Release date

Updates

ContainerOS 3.6.1

lifsea_3_x64_5G_alibase_20251101.qcow2

November 5, 2025

This version is in a phased release.

Upgraded containerd to version 2.1.4.1.
Fixed three high-severity vulnerabilities (CVE-2025-31133, CVE-2025-52565, and CVE-2025-52881). An attacker could exploit these vulnerabilities to achieve container escape through various methods.

Security updates

Package name

CVE ID

Package version

containerd.io

CVE-2025-31133

CVE-2025-52565

CVE-2025-52881

2.1.4-2.alios7.x86_64

Package updates

Updated packages

containerd.io, 2.1.3-20250627164416.alios7->2.1.4-2.alios7

ContainerOS 3.6.0

Version	Image ID	Release date	Updates
ContainerOS 3.6.0	lifsea_3_x64_5G_alibase_20250916.qcow2	October 10, 2025	Added support for the hardened mode for ECS instance metadata. Added support for GPU instances. Admin Container: Upgraded Cloud Assistant to version 2.2.4.990.

Security updates

Package name	CVE ID	Package version
glibc	CVE-2025-0395 CVE-2025-4802 CVE-2025-8058	2.32-1.21.al8.lifsea8
libxml2	CVE-2025-7425 CVE-2025-32415	2.9.7-21.0.1.1.al8.3
sqlite	CVE-2025-6965	3.26.0-20.al8

Package updates

Updated packages

NetworkManager, 1:1.40.16-18.0.1.al8.x86_64->1:1.40.16-19.0.1.1.al8.x86_64
NetworkManager-libnm, 1:1.40.16-18.0.1.al8.x86_64->1:1.40.16-19.0.1.1.al8.x86_64
device-mapper, 8:1.02.181-14.0.1.al8.x86_64->8:1.02.181-15.0.1.al8.x86_64
device-mapper-libs, 8:1.02.181-14.0.1.al8.x86_64->8:1.02.181-15.0.1.al8.x86_64
fuse, 2.9.7-19.al8.x86_64->2.9.7-19.1.al8.x86_64
fuse-common, 3.3.0-19.al8.x86_64->3.3.0-19.1.al8.x86_64
fuse-devel, 2.9.7-19.al8.x86_64->2.9.7-19.1.al8.x86_64
fuse-libs, 2.9.7-19.al8.x86_64->2.9.7-19.1.al8.x86_64
glibc, 2.32-1.20.al8.lifsea8.x86_64->2.32-1.21.al8.lifsea8.x86_64
ignition, 2.9.0-2.git1d56dc8.17.al8.x86_64->2.9.0-2.git1d56dc8.18.al8.x86_64
libarchive, 3.5.3-5.al8.x86_64->3.5.3-6.al8.x86_64
libblkid, 2.32.1-46.0.3.al8.x86_64->2.32.1-46.0.4.1.al8.x86_64
libcurl, 7.61.1-35.0.2.al8.x86_64->7.61.1-35.0.2.al8.3.x86_64
libcurl-devel, 7.61.1-35.0.2.al8.x86_64->7.61.1-35.0.2.al8.3.x86_64
libfdisk, 2.32.1-46.0.3.al8.x86_64->2.32.1-46.0.4.1.al8.x86_64
libmount, 2.32.1-46.0.3.al8.x86_64->2.32.1-46.0.4.1.al8.x86_64
libselinux, 2.9-8.2.al8.x86_64->2.9-10.1.al8.x86_64
libselinux-devel, 2.9-8.2.al8.x86_64->2.9-10.1.al8.x86_64
libselinux-utils, 2.9-8.2.al8.x86_64->2.9-10.1.al8.x86_64
libsemanage, 2.9-9.al8.x86_64->2.9-11.0.1.al8.x86_64
libsmartcols, 2.32.1-46.0.3.al8.x86_64->2.32.1-46.0.4.1.al8.x86_64
libtirpc, 1.3.3-8.0.1.al8.x86_64->1.3.3-9.0.1.al8.x86_64
libuuid, 2.32.1-46.0.3.al8.x86_64->2.32.1-46.0.4.1.al8.x86_64
libxml2, 2.9.7-21.0.1.1.al8.1.x86_64->2.9.7-21.0.1.1.al8.3.x86_64
libxml2-devel, 2.9.7-21.0.1.1.al8.1.x86_64->2.9.7-21.0.1.1.al8.3.x86_64
lifsea-cli, 0.4.2-1.al8.x86_64->0.4.3-1.al8.x86_64
lifsea-release, 3-14.al8.x86_64->3-15.al8.x86_64
numactl-libs, 2.0.16-3.0.1.al8.x86_64->2.0.18-2.0.3.al8.x86_64
openldap, 2.4.46-19.al8.x86_64->2.4.46-21.al8.x86_64
pam, 1.3.1-37.al8.x86_64->1.3.1-38.al8.x86_64
quota, 1:4.06-6.0.1.al8.x86_64->1:4.09-2.0.1.al8.x86_64
quota-nls, 1:4.06-6.0.1.al8.noarch->1:4.09-2.0.1.al8.noarch
rpm, 4.14.3-31.0.2.1.al8.x86_64->4.14.3-32.0.1.1.al8.x86_64
rpm-libs, 4.14.3-31.0.2.1.al8.x86_64->4.14.3-32.0.1.1.al8.x86_64
rpm-plugin-selinux, 4.14.3-31.0.2.1.al8.x86_64->4.14.3-32.0.1.1.al8.x86_64
sqlite-libs, 3.26.0-19.al8.x86_64->3.26.0-20.al8.x86_64
tzdata, 2024b-1.0.1.1.al8.noarch->2025b-1.0.1.1.al8.noarch
util-linux, 2.32.1-46.0.3.al8.x86_64->2.32.1-46.0.4.1.al8.x86_64

New packages

libatomic-10.2.1-3.8.al8.x86_64

ContainerOS 3.5.1

Version

Image ID

Release date

Updates

ContainerOS 3.5.1

lifsea_3_x64_5G_alibase_20250805.qcow2

August 11, 2025

Upgraded the kernel to version 5.10.134-19.1.1.lifsea8.
Upgraded containerd to version 2.1.3 to resolve an issue where pulling images from certain repositories failed.

Important

Your ACK cluster must be version 1.31 or later. To upgrade your cluster, see Manually upgrade an ACK cluster.

See the following sections for details.

Important updates

Upgraded the kernel to version 5.10.134-19.1.1.lifsea8. This update fixes a memory leak issue in the BPF module and patches multiple known CVE security vulnerabilities.
O&M container enhancement: The start_sshd script is integrated to support logging in to the container via SSH. After you log in to an instance from the ECS console without a password, you can run the sudo start_sshd.sh command in the container to start the SSH service. You can then use the key pair that is bound to the ECS instance to log in to the O&M container directly via SSH.

Security updates

Package name	CVE ID	Package version
kernel	CVE-2022-48635 CVE-2022-48639 CVE-2022-48644 CVE-2022-48651 CVE-2022-48675 CVE-2022-48828 CVE-2022-48946 CVE-2022-48981 CVE-2022-48993 CVE-2022-49014 CVE-2022-49046 CVE-2022-49190 CVE-2022-49219 CVE-2022-49398 CVE-2022-49443 CVE-2022-49444 CVE-2022-49562 CVE-2022-49711 CVE-2023-52448 CVE-2023-52463 CVE-2023-5246 CVE-2023-52477 CVE-2023-52486 CVE-2023-52503 CVE-2023-52618 CVE-2023-52702 CVE-2023-52756 CVE-2023-52759 CVE-2023-52789 CVE-2023-52836 CVE-2023-52880 CVE-2023-52898 CVE-2023-52917 CVE-2024-26591 CVE-2024-26598 CVE-2024-26629 CVE-2024-26641 CVE-2024-26642 CVE-2024-26718 CVE-2024-26749 CVE-2024-26778 CVE-2024-26808 CVE-2024-26810 CVE-2024-26812 CVE-2024-26934 CVE-2024-26970 CVE-2024-26977 CVE-2024-26988 CVE-2024-27020 CVE-2024-27389 CVE-2024-27437 CVE-2024-35791 CVE-2024-35947 CVE-2024-36476 CVE-2024-36489 CVE-2024-36953 CVE-2024-37356 CVE-2024-38577 CVE-2024-38601 CVE-2024-38605 CVE-2024-39468 CVE-2024-39480 CVE-2024-41004 CVE-2024-41023 CVE-2024-41045 CVE-2024-42084 CVE-2024-42143 CVE-2024-42161 CVE-2024-42239 CVE-2024-42246 CVE-2024-42283 CVE-2024-42312 CVE-2024-43098 CVE-2024-43817 CVE-2024-43846 CVE-2024-43883 CVE-2024-43889 CVE-2024-43890 CVE-2024-43892 CVE-2024-43893 CVE-2024-43894 CVE-2024-43914 CVE-2024-44944 CVE-2024-44989 CVE-2024-44990 CVE-2024-45006 CVE-2024-46674 CVE-2024-46675 CVE-2024-46707 CVE-2024-46719 CVE-2024-46735 CVE-2024-46743 CVE-2024-46750 CVE-2024-46763 CVE-2024-46782 CVE-2024-46787 CVE-2024-46829 CVE-2024-47667 CVE-2024-47668 CVE-2024-47671 CVE-2024-47679 CVE-2024-47685 CVE-2024-47692 CVE-2024-47695 CVE-2024-47705 CVE-2024-47706 CVE-2024-47707 CVE-2024-47736 CVE-2024-47737 CVE-2024-47739 CVE-2024-47742 CVE-2024-47755 CVE-2024-48881 CVE-2024-49569 CVE-2024-49851 CVE-2024-49858 CVE-2024-49878 CVE-2024-49924 CVE-2024-49933 CVE-2024-49948 CVE-2024-49949 CVE-2024-49952 CVE-2024-49954 CVE-2024-49963 CVE-2024-49975 CVE-2024-49978 CVE-2024-50002 CVE-2024-50036 CVE-2024-50045 CVE-2024-50046 CVE-2024-50059 CVE-2024-50082 CVE-2024-50083 CVE-2024-50115 CVE-2024-50131 CVE-2024-50150 CVE-2024-50151 CVE-2024-50153 CVE-2024-50179 CVE-2024-50180 CVE-2024-50251 CVE-2024-50256 CVE-2024-50258 CVE-2024-50264 CVE-2024-50267 CVE-2024-50269 CVE-2024-50301 CVE-2024-50304 CVE-2024-53054 CVE-2024-53066 CVE-2024-53068 CVE-2024-53103 CVE-2024-53104 CVE-2024-53119 CVE-2024-53122 CVE-2024-53124 CVE-2024-53125 CVE-2024-53140 CVE-2024-53141 CVE-2024-53146 CVE-2024-53157 CVE-2024-53161 CVE-2024-53172 CVE-2024-53174 CVE-2024-53194 CVE-2024-53214 CVE-2024-53234 CVE-2024-56558 CVE-2024-56569 CVE-2024-56570 CVE-2024-56583 CVE-2024-56600 CVE-2024-56602 CVE-2024-56605 CVE-2024-56606 CVE-2024-56610 CVE-2024-56614 CVE-2024-56636 CVE-2024-56637 CVE-2024-56642 CVE-2024-56644 CVE-2024-56664 CVE-2024-56672 CVE-2024-56686 CVE-2024-56688 CVE-2024-56694 CVE-2024-56698 CVE-2024-56739 CVE-2024-56747 CVE-2024-56751 CVE-2024-56756 CVE-2024-56779 CVE-2024-56780 CVE-2024-57807 CVE-2024-57888 CVE-2024-57889 CVE-2024-57903 CVE-2024-57913 CVE-2024-57917 CVE-2024-57929 CVE-2024-57951 CVE-2024-57981 CVE-2024-58010 CVE-2025-21656 CVE-2025-21664 CVE-2025-21683 CVE-2025-21689 CVE-2025-21699 CVE-2025-21704 CVE-2025-21724 CVE-2025-21726 CVE-2025-21727 CVE-2025-21728 CVE-2025-21731 CVE-2025-21734 CVE-2025-21745 CVE-2025-21787 CVE-2025-21804 CVE-2025-21814 CVE-2025-21844 CVE-2025-21853 CVE-2025-21887	5.10.134-19.1.1.lifsea8
libxml2	CVE-2025-49794 CVE-2025-49796 CVE-2025-6021 CVE-2025-32414	2.9.7-21.0.1.1.al8.1
sudo	CVE-2025-32462	1.9.5p2-1.0.2.al8.1
jq	CVE-2024-23337 CVE-2025-48060	1.6-17.al8.2
libarchive	CVE-2025-25724	3.5.3-5.al8
glib2	CVE-2024-52533 CVE-2025-4373	2.68.4-16.0.1.al8.2
pam	CVE-2025-6020	1.3.1-37.al8

Package updates

Updated packages

glib2, 2.68.4-14.0.2.al8.x86_64->2.68.4-16.0.1.al8.2.x86_64
jq 1.6-16.al8.x86_64->1.6-17.al8.2.x86_64
kernel-core, 5.10.134-18.0.2.lifsea8.x86_64->5.10.134-19.1.1.lifsea8.x86_64
libarchive, 3.5.3-4.al8.x86_64->3.5.3-5.al8.x86_64
libxml2, 2.9.7-19.0.1.1.al8.x86_64->2.9.7-21.0.1.1.al8.1.x86_64
libxml2-devel, 2.9.7-19.0.1.1.al8.x86_64->2.9.7-21.0.1.1.al8.1.x86_64
lifsea-cli, 0.4.1-1.al8.x86_64->0.4.2-1.al8.x86_64
pam, 1.3.1-36.al8.x86_64->1.3.1-37.al8.x86_64
sudo, 1.9.5p2-1.0.2.al8.x86_64->1.9.5p2-1.0.2.al8.1.x86_64

ContainerOS 3.5.0

Version

Image ID

Release date

Updates

ContainerOS 3.5.0

lifsea_3_x64_5G_alibase_20250619.qcow2

June 20, 2025

Removed shell script interpreters to enhance system security and stability.
Upgraded containerd to version 2.1.1.

Important

Your ACK cluster must be version 1.31 or later. To upgrade your cluster, see Manually upgrade a cluster.

For detailed updates, see the following sections.

Important updates

Security enhancements:
- Removed shell script interpreters (/bin/bash and /bin/sh) to prevent shell scripts from running, mitigating the risk of malicious script attacks.
- The /etc directory is mounted with the noexec option to prevent binaries and potentially malicious scripts from executing in this directory.
- The command execution environment for Cloud Assistant is migrated to an O&M container, isolating all operations to improve system security. For more information about O&M containers, see Maintain ContainerOS nodes.
Adjusted the system disk partition sizes. The rootfs partition is now 3 GB, and the system metadata partition is 2 GB, optimizing storage allocation.
The cirrus kernel module is now loaded by default to fix the small VNC login window.
Removed redundant packages (see the package change list below) and refactored some system components to remove their dependency on shell.
A bootstrap container (a privileged container) is now used as a system boot component to run custom user-data scripts for node initialization.
- The bootstrap container shares the PID Namespace and NET Namespace with the host OS, ensuring a consistent kernel and network environment.
- Key system directories, including /etc, /opt, and /usr/local, are mounted as writable into the bootstrap container. Changes to these directories within the container are synchronized to the host OS for persistence.
- You can now run systemctl commands in the bootstrap container.
Limitations:
- Terway must be v1.14.1 or later. To upgrade the component, see Manage components.
- The ack-advanced-audit component is not supported.
- Using NAS or CPFS volumes requires installing cnfs-nas-daemon.
- A node pool can have only one data disk.
- Both Pre-defined Custom Data and User Data in the node pool configuration run in the bootstrap container. You cannot write directly to host directories such as /etc/hosts, /etc/resolv.conf, or /usr.

Security updates

Package name	CVE ID	Package version
grub2	CVE-2025-0624	1:2.02-165.0.2.al8
freetype	CVE-2025-27363	2.10.4-10.al8
expat	CVE-2024-8176	2.2.5-17.al8
libtasn1	CVE-2024-12133	4.13-5.0.1.al8
krb5	CVE-2025-24528	1.18.2-32.0.1.al8

Package updates

Updated packages

expat, 2.2.5-16.al8.x86_64->2.2.5-17.al8.x86_64
freetype, 2.10.4-9.al8.x86_64->2.10.4-10.al8.x86_64
grub2-common, 1:2.02-150.0.2.al8.noarch->1:2.02-165.0.2.al8.noarch
grub2-efi-x64, 1:2.02-150.0.2.al8.x86_64->1:2.02-165.0.2.al8.x86_64
grub2-tools, 1:2.02-150.0.2.al8.x86_64->1:2.02-165.0.2.al8.x86_64
grub2-tools-extra, 1:2.02-150.0.2.al8.x86_64->1:2.02-165.0.2.al8.x86_64
grub2-tools-minimal, 1:2.02-150.0.2.al8.x86_64->1:2.02-165.0.2.al8.x86_64
ignition, 2.9.0-2.git1d56dc8.16.al8.x86_64->2.9.0-2.git1d56dc8.17.al8.x86_64
krb5-devel, 1.18.2-30.0.1.al8.x86_64->1.18.2-32.0.1.al8.x86_64
krb5-libs, 1.18.2-30.0.1.al8.x86_64->1.18.2-32.0.1.al8.x86_64
libkadm5, 1.18.2-30.0.1.al8.x86_64->1.18.2-32.0.1.al8.x86_64
libtasn1, 4.13-4.0.1.al8.x86_64->4.13-5.0.1.al8.x86_64
lifsea-cli, 0.3.0-1.al8.x86_64->0.4.1-1.al8.x86_64
lifsea-release, 3-13.al8.x86_64->3-14.al8.x86_64
systemd, 239-82.0.3.5.al8.lifsea8.3.x86_64->239-82.0.4.2.al8.lifsea8.5.x86_64
systemd-libs, 239-82.0.3.5.al8.lifsea8.3.x86_64->239-82.0.4.2.al8.lifsea8.5.x86_64
systemd-udev, 239-82.0.3.5.al8.lifsea8.3.x86_64->239-82.0.4.2.al8.lifsea8.5.x86_64

Removed packages

cloud-utils-growpart-0.33-0.0.1.al8.noarch
json-c-0.13.1-3.0.1.al8.x86_64
libmodulemd-2.13.0-1.0.1.al8.x86_64
librepo-1.14.2-4.0.1.al8.x86_64
librhsm-0.0.3-5.0.1.al8.x86_64
libsolv-0.7.20-6.al8.x86_64
libyaml-0.1.7-5.2.al8.x86_64
lifsea-repos-1.0-5.al8.noarch
lifsea-repos-ostree-1.0-5.al8.noarch
rpm-ostree-2022.10.117.g52714b51-3.0.1.al8.lifsea8.x86_64
rpm-ostree-libs-2022.10.117.g52714b51-3.0.1.al8.lifsea8.x86_64

ContainerOS 3.4.0

Version

Image ID

Release date

Updates

ContainerOS 3.4.0

lifsea_3_x64_5G_alibase_20250410.qcow2

April 14, 2025

Upgraded the kernel to kernel-5.10.134-18.0.2.lifsea8.
Upgraded containerd to 1.6.38.
The system disk is now fully read-only. You must attach a data disk to ensure the system starts properly.
The default image size is reduced to 5 GB. The rootfs partition is 4 GB, and the system metadata partition is 1 GB.
The image acceleration component is pre-installed.

Important

This version supports only ACK clusters in Auto mode. For creation instructions, see Create an ACK cluster in Auto mode.
Your ACK cluster must be version 1.30 or later. To upgrade your cluster, see Manually upgrade a cluster.

For details about the updates, see the sections below.

Important updates

Kernel update:
- Upgraded the kernel to kernel-5.10.134-18.0.2.lifsea8 to fix an issue where the DNS cache failed in IPVS scenarios.
Security enhancements:
- A fifth partition is added to the system disk to serve as a system metadata partition. It is bound to the /etc directory using OverlayFS.
- User data is stored on the data disk, which is mounted to the /var directory by default.
The O&M container is updated and now includes common O&M tools.
This version adds support for the UEFI boot mode, enabling use with more ECS instance types, such as Elastic Bare Metal Instances.

Security updates

Package name	CVE ID	Package version
libcap	CVE-2025-1390	2.48-6.0.2.al8
libxml2	CVE-2024-56171 CVE-2025-24928	2.9.7-19.0.1.1.al8
NetworkManager	CVE-2024-3661	1:1.40.16-18.0.1.al8
bzip2-libs	CVE-2019-12900	1.0.6-28.al8

Package updates

Updated packages

NetworkManager, 1.40.16-15.0.1.al8->1.40.16-18.0.1.al8
NetworkManager-libnm, 1.40.16-15.0.1.al8->1.40.16-18.0.1.al8
audit-libs, 3.0.7-5.0.1.al8->3.1.2-1.0.2.al8
bash, 4.4.20-4.al8->4.4.20-5.0.1.al8
bzip2-libs, 1.0.6-27.al8->1.0.6-28.al8
ca-certificates, 2023.2.60_v7.0.306-80.0.al8->2024.2.69_v8.0.303-80.0.al8
chrony, 4.2-1.0.1.al8->4.5-2.0.1.al8
cmake-filesystem, 3.26.5-1.0.2.al8->3.26.5-2.0.2.al8
cpio, 2.12-11.0.1.al8->2.12-11.0.2.al8
device-mapper, 8:1.02.181-13.al8.0.1.al8->8:1.02.181-14.0.1.al8
device-mapper-libs, 8:1.02.181-13.al8.0.1.al8->8:1.02.181-14.0.1.al8
diffutils, 3.6-6.1.al8->3.6-6.2.al8
dnsmasq, 2.79-32.0.1.al8->2.79-33.al8
e2fsprogs, 1.46.0-1.0.1.al8->1.46.0-1.0.3.al8
e2fsprogs-libs, 1.46.0-1.0.1.al8->1.46.0-1.0.3.al8
elfutils-libelf, 0.189-3.al8->0.190-2.0.2.al8
file-libs, 5.33-25.al8->5.33-26.al8
findutils, 1:4.6.0-21.0.1.al8->1:4.6.0-23.0.1.al8
fuse, 2.9.7-17.al8->2.9.7-19.al8
fuse-common, 3.3.0-17.al8->3.3.0-19.al8
fuse-devel, 2.9.7-17.al8->2.9.7-19.al8
fuse-libs, 2.9.7-17.al8->2.9.7-19.al8
gawk, 4.2.1-4.0.1.al8->4.2.1-4.0.2.al8
gnutls, 3.6.16-8.0.1.al8.3->3.6.16-8.0.2.al8
gpgme, 1.13.1-11.0.1.al8->1.13.1-12.0.2.al8
gzip, 1.9-14.al8->1.9-14.0.1.al8
hwdata, 0.314-8.19.0.2.1.al8->0.314-8.22.0.1.2.al8
ignition, 2.9.0-2.git1d56dc8.15.al8->2.9.0-2.git1d56dc8.16.al8
iptables, 1.8.5-9.0.1.al8->1.8.5-11.0.1.al8
iptables-libs, 1.8.5-9.0.1.al8->1.8.5-11.0.1.al8
iptables-services, 1.8.5-9.0.1.al8->1.8.5-11.0.1.al8
jq, 1.6-15.al8->1.6-16.al8
kernel-core, 5.10.134-18.0.1.lifsea8->5.10.134-18.0.2.lifsea8
kmod-25, 19.0.2.al8->25-20.0.1.al8
kmod-libs, 25-19.0.2.al8->25-20.0.1.al8
less, 530-1.2.al8->530-3.0.1.al8
libacl, 2.2.53-1.2.al8->2.2.53-3.0.1.al8
libblkid, 2.32.1-45.0.1.1.al8.1->2.32.1-46.0.3.al8
libcap, 2.48-6.0.1.al8->2.48-6.0.2.al8
libcom_err, 1.46.0-1.0.1.al8->1.46.0-1.0.3.al8
libcom_err-devel, 1.46.0-1.0.1.al8->1.46.0-1.0.3.al8
libdb, 5.3.28-42.0.1.al8->5.3.28-42.0.3.al8
libdb-utils, 5.3.28-42.0.1.al8->5.3.28-42.0.3.al8
libfdisk, 2.32.1-45.0.1.1.al8.1->2.32.1-46.0.3.al8
libffi, 3.1-24.0.1.al8->3.1-24.0.4.al8
libibverbs, 46.0-1.0.3.al8.1->48.0-1.0.1.al8
libmount, 2.32.1-45.0.1.1.al8.1->2.32.1-46.0.3.al8
libnfsidmap, 1:2.3.3-59.0.3.al8.lifsea8->1:2.3.3-59.0.4.al8.lifsea8
libpcap, 14:1.9.1-5.1.al8->14:1.9.1-5.2.al8
libpsl, 0.20.2-6.1.al8->0.20.2-6.1.0.1.al8
libseccomp, 2.5.2-1.0.6.al8->2.5.2-1.0.9.al8
libsigsegv, 2.11-5.2.al8->2.11-5.3.al8
libsmartcols, 2.32.1-45.0.1.1.al8.1->2.32.1-46.0.3.al8
libss, 1.46.0-1.0.1.al8->1.46.0-1.0.3.al8
libtirpc, 1.3.2-1.0.1.al8->1.3.3-8.0.1.al8
libuuid, 2.32.1-45.0.1.1.al8.1->2.32.1-46.0.3.al8
libxml2, 2.9.7-18.0.3.1.al8->2.9.7-19.0.1.1.al8
libxml2-devel, 2.9.7-18.0.3.1.al8->2.9.7-19.0.1.1.al8
lifsea-cli, 0.2.1-1.al8->0.3.0-1.al8
lifsea-release, 3-12.al8->3-13.al8
lua-libs, 5.3.4-12.0.2.al8->5.3.4-12.0.3.al8
ncurses-base, 6.1-10.20180224.0.1.al8->6.1-10.20180224.0.2.al8
ncurses-libs, 6.1-10.20180224.0.1.al8->6.1-10.20180224.0.2.al8
nfs-utils, 1:2.3.3-59.0.3.al8.lifsea8->1:2.3.3-59.0.4.al8.lifsea8
numactl-libs, 2.0.16-1.0.1.al8->2.0.16-3.0.1.al8
ostree, 2022.2-9.al8.lifsea8->2022.2-11.al8.lifsea8
ostree-libs, 2022.2-9.al8.lifsea8->2022.2-11.al8.lifsea8
ostree-prepare-root, 2022.2-9.al8.lifsea8->2022.2-11.al8.lifsea8
p11-kit, 0.23.22-1.1.al8->0.23.22-2.al8
p11-kit-trust, 0.23.22-1.1.al8->0.23.22-2.al8
pciutils, 3.7.0-3.0.1.al8->3.8.0-1.0.2.al8
pciutils-libs, 3.7.0-3.0.1.al8->3.8.0-1.0.2.al8
pcre, 8.42-6.0.1.al8->8.42-6.0.2.al8
pcre2, 10.32-3.0.1.al8->10.32-3.0.2.al8
pcre2-devel, 10.32-3.0.1.al8->10.32-3.0.2.al8
pcre2-utf16, 10.32-3.0.1.al8->10.32-3.0.2.al8
pcre2-utf32, 10.32-3.0.1.al8->10.32-3.0.2.al8
policycoreutils, 2.9-24.al8->2.9-26.al8
procps-ng, 3.3.15-14.0.1.al8->3.3.15-14.0.3.al8
quota, 1:4.06-6.al8->1:4.06-6.0.1.al8
quota-nls, 1:4.06-6.al8->1:4.06-6.0.1.al8
readline, 7.0-10.2.al8->7.0-10.3.al8
rpm, 4.14.3-27.0.5.2.al8->4.14.3-31.0.2.1.al8
rpm-libs, 4.14.3-27.0.5.2.al8->4.14.3-31.0.2.1.al8
rpm-ostree, 2022.10.117.g52714b51-2.0.2.al8.lifsea8->2022.10.117.g52714b51-3.0.1.al8.lifsea8
rpm-ostree-libs, 2022.10.117.g52714b51-2.0.2.al8.lifsea8->2022.10.117.g52714b51-3.0.1.al8.lifsea8
rpm-plugin-selinux, 4.14.3-27.0.5.2.al8->4.14.3-31.0.2.1.al8
sed, 4.5-5.0.1.al8->4.5-5.0.2.al8
selinux-policy, 3.14.3-128.0.1.al8.1->3.14.3-139.0.1.al8
selinux-policy-targeted, 3.14.3-128.0.1.al8.1->3.14.3-139.0.1.al8
shadow-utils, 2:4.6-19.0.1.al8->2:4.6-22.0.1.al8
sudo, 1.9.5p2-1.0.1.al8->1.9.5p2-1.0.2.al8
systemd, 239-78.0.4.1.al8.lifsea8->239-82.0.3.5.al8.lifsea8.3
systemd-libs, 239-78.0.4.1.al8.lifsea8->239-82.0.3.5.al8.lifsea8.3
systemd-udev, 239-78.0.4.1.al8.lifsea8->239-82.0.3.5.al8.lifsea8.3
tar, 2:1.30-9.0.1.al8->2:1.30-9.0.2.al8
tzdata, 2024a-1.0.1.6.al8->2024b-1.0.1.1.al8
util-linux, 2.32.1-45.0.1.1.al8.1->2.32.1-46.0.3.al8
vim-minimal, 2:8.0.1763-19.0.1.al8.4->2:8.0.1763-19.0.2.al8.5
xfsprogs, 5.0.0-12.0.1.al8->5.0.0-12.0.2.al8
xz-devel, 5.4.4-2.al8->5.4.4-2.0.1.al8
xz-libs, 5.4.4-2.al8->5.4.4-2.0.1.al8

New packages

bootupd-0.2.5-3.1.al8
dracut-049-233.git20240115.0.2.al8
efi-filesystem-3-3.1.al8
efivar-libs-37-4.2.al8
file-5.33-26.al8
freetype-2.10.4-9.al8
fwupd-1.7.8-2.0.1.al8
gdisk-1.0.7-5.al8
gettext-0.19.8.1-17.2.al8
gettext-libs-0.19.8.1-17.2.al8
graphite2-1.3.14-9.0.1.al8
grub2-common-1:2.02-150.0.2.al8
grub2-efi-x64-1:2.02-150.0.2.al8 
grub2-tools-1:2.02-150.0.2.al8
grub2-tools-extra-1:2.02-150.0.2.al8
grub2-tools-minimal-1:2.02-150.0.2.al8
harfbuzz-2.7.4-10.0.1.al8
libcroco-0.6.12-4.3.al8.1
libgcab1-1.4-6.0.1.al8
libgomp-10.2.1-3.8.al8
libgudev-237-1.0.1.al8
libgusb-0.3.0-1.2.al8
libkcapi-1.4.0-2.0.1.1.al8
libkcapi-hmaccalc-1.4.0-2.0.1.1.al8
libpng-2:1.6.34-5.2.al8
libsmbios-2.4.1-2.2.al8
libxmlb-0.1.15-1.2.al8
mokutil-1:0.3.0-12.0.1.al8
os-prober-1.74-9.0.1.al8
overlaybd-snapshotter-1.3.0-20250219063650.c5dd4fa
t-storage-overlaybd-open-1.0.13-20250226164315.c185019.al8
polkit-libs-0.115-15.al8.2
shared-mime-info-2.1-5.0.1.al8
shim-x64-15.8-2.0.1.1.al8
xz-5.4.4-2.0.1.al8

ContainerOS 3.3.3

Version number

Image ID

Release date

Description

ContainerOS 3.3.3

lifsea_3_x64_10G_alibase_20250210.qcow2

February 14, 2025

Upgraded the kernel to kernel-5.10.134-18.0.1.lifsea8.
Upgraded containerd to 1.6.36.
Upgraded Terway to v1.9.12.

Important

Your ACK cluster must be version 1.28 or later. To upgrade your cluster, see Manually upgrade a cluster.

See the following sections for more details.

Important updates

Kernel update:
- Upgraded the kernel to kernel-5.10.134-18.0.1.lifsea8.
Disabled haltpoll to improve network SLA metrics.
Removed classic network configurations from chrony.

Security updates

Package name	CVE ID	Package version
glibc	CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602 CVE-2022-23218 CVE-2022-23219	2.32-1.20.al8.lifsea8
Kernel	CVE-2023-52478 CVE-2023-52628 CVE-2024-36883 CVE-2024-36886 CVE-2024-36889 CVE-2024-36898 CVE-2024-38544 CVE-2024-38564 CVE-2024-38579 CVE-2024-38583 CVE-2024-38588 CVE-2024-39487 CVE-2024-41012 CVE-2024-41014 CVE-2024-41040 CVE-2024-41087 CVE-2024-41090 CVE-2024-41091 CVE-2024-42232 CVE-2024-42265 CVE-2024-42280 CVE-2024-42285 CVE-2024-42286 CVE-2024-42288 CVE-2024-42289 CVE-2024-42292 CVE-2024-43861 CVE-2024-43871 CVE-2024-43882 CVE-2024-44931 CVE-2024-44958 CVE-2024-44987 CVE-2024-45003 CVE-2024-45018 CVE-2024-45025 CVE-2024-46673 CVE-2024-46695 CVE-2024-46715 CVE-2024-46722 CVE-2024-46723 CVE-2024-46737 CVE-2024-46738 CVE-2024-46739 CVE-2024-46744 CVE-2024-46755 CVE-2024-46756 CVE-2024-46758 CVE-2024-46759 CVE-2024-46761 CVE-2024-46777	5.10.134-18.0.1.lifsea8
pam	CVE-2024-10041 CVE-2024-10963	1.3.1-36.al8

Package updates

Updated packages

containerd.io, 1.6.34-20240829163547.alios7->1.6.36-20241017174428.alios7
glibc, 2.32-1.17.al8.lifsea8->2.32-1.20.al8.lifsea8
ignition, 2.9.0-2.git1d56dc8.14.al8->2.9.0-2.git1d56dc8.15.al8
kernel-core, 5.10.134-17.3.1.lifsea8->5.10.134-18.0.1.lifsea8
pam, 1.3.1-28.al8->1.3.1-36.al8

Fixed issues

Image:
- Fixed a disk expansion failure for images on NVMe disks.

ContainerOS 3.3.2

Version

Image ID

Release date

Release content

ContainerOS 3.3.2

lifsea_3_x64_10G_alibase_20241202.qcow2

December 6, 2024

Upgraded the kernel to kernel-5.10.134-17.3.1.lifsea8.
Upgraded Terway to v1.9.10.

Important

ACK clusters must be version 1.28 or later. To upgrade your cluster, see Manually upgrade a cluster.

For details on these updates, see the sections below.

Important updates

Kernel updates:
- Upgraded the kernel to kernel-5.10.134-17.3.1.lifsea8.
- Enabled the CONFIG_RANDOM_TRUST_CPU option by default to accelerate kernel random number initialization.
Aligned the default startup state of some system services with Alibaba Cloud Linux 3.2104 U10.1:
- Services disabled by default:
  - fstrim.timer
- Services enabled by default:
  - NetworkManager-dispatcher.service
ContainerOS now mounts the root directory as read-only by default. Users cannot mount data disks directly in the root directory.
Added the chpasswd tool for setting temporary passwords during operations.

Security updates

Parameter	CVE ID	Package version
bubblewrap	CVE-2024-42472	0.4.0-2.1.al8
bzip2-libs	CVE-2019-12900	1.0.6-27.al8
curl	CVE-2023-28322 CVE-2023-38546 CVE-2023-46218 CVE-2024-2398	7.61.1-35.0.2.al8
expat	CVE-2024-50602 CVE-2024-45490 CVE-2024-45491 CVE-2024-45492	2.2.5-16.al8
glib2	CVE-2024-34397	2.68.4-14.0.2.al8
gnutls	CVE-2024-0553 CVE-2024-28834	3.6.16-8.0.1.al8.3
krb5	CVE-2024-3596	1.18.2-30.0.1.al8
nghttp2	CVE-2024-28182	1.33.0-6.0.1.al8.1
openssl	CVE-2024-5535	1.1.1k-14.0.2.al8
wget	CVE-2024-38428	1.19.5-12.0.1.al8

Package updates

Updated packages

bubblewrap, 0.4.0-2.1.al8->0.4.0-2.2.al8
bzip2-libs, 1.0.6-26.2.al8->1.0.6-27.al8
curl, 7.61.1-34.0.1.al8->7.61.1-35.0.2.al8
expat, 2.2.5-13.al8->2.2.5-16.al8
glib2, 2.68.4-11.1.al8->2.68.4-14.0.2.al8
gnutls, 3.6.16-8.0.2.al8->3.6.16-8.0.1.al8.3
kernel-core, 5.10.134-17.2.1.lifsea8->5.10.134-17.3.1.lifsea8
krb5-devel, 1.18.2-26.0.1.al8->1.18.2-30.0.1.al8
krb5-libs, 1.18.2-26.0.1.al8->1.18.2-30.0.1.al8
libcurl, 7.61.1-34.0.1.al8->7.61.1-35.0.2.al8
libcurl-devel, 7.61.1-34.0.1.al8->7.61.1-35.0.2.al8
libkadm5, 1.18.2-26.0.1.al8->1.18.2-30.0.1.al8
libnghttp2, 1.33.0-5.al8->1.33.0-6.0.1.al8.1
lifsea-release, 3-11.al8->3-12.al8
openldap, 2.4.46-18.al8->2.4.46-19.al8
openssl-devel, 1.1.1k-12.0.1.al8->1.1.1k-14.0.2.al8
openssl-libs, 1.1.1k-12.0.1.al8->1.1.1k-14.0.2.al8
tzdata, 2024a-1.0.1.3.al8->2024a-1.0.1.6.al8
wget, 1.19.5-11.0.1.al8->1.19.5-12.0.1.al8

ContainerOS 3.3.1

Version

Image ID

Release date

Updates

ContainerOS 3.3.1

lifsea_3_x64_10G_alibase_20240918.qcow2

September 12, 2024

Updated the base ContainerOS image to include the latest packages.
Upgraded the kernel to version 5.10.134-17.2.1.lifsea8.
Upgraded containerd to version 1.6.34.

Important

Your ACK cluster must be version 1.28 or later. To upgrade your cluster, see Manually upgrade a cluster.

See the following sections for details.

Important updates

Kernel update:
- Upgraded the kernel to version 5.10.134-17.2.1.lifsea8.
Upgraded containerd to version 1.6.34.
You can now create directories in the root directory and mount custom data disks.

Package updates

Updated packages

bubblewrap, 0.4.0-1.1.al8->0.4.0-2.1.al8
containerd.io, 1.6.28-20240202134619.alios7->1.6.34-20240829163547.alios7
glib2, 2.68.4-11.al8->2.68.4-11.1.al8
ignition, 2.9.0-2.git1d56dc8.13.al8->2.9.0-2.git1d56dc8.14.al8
kernel-core, 5.10.134-17.0.2.lifsea8->5.10.134-17.2.1.lifsea8
libndp, 1.7-6.0.1.al8->1.7-7.0.1.al8
libxml2, 2.9.7-18.0.3.al8->2.9.7-18.0.3.1.al8
libxml2-devel, 2.9.7-18.0.3.al8->2.9.7-18.0.3.1.al8
lifsea-cli, 0.2.0-2.al8->0.2.1-1.al8
tzdata, 2024a-1.0.1.1.al8->2024a-1.0.1.3.al8

Fixed issues

Image
- The lifseacli tool now prompts you to restart the system after a kernel update.

ContainerOS 3.3

Version

Image ID

Release date

Release notes

ContainerOS 3.3

lifsea_3_x64_10G_containerd_1_6_28_alibase_20240705.vhd

July 5, 2024

Updated the ContainerOS image to the latest version.
Upgraded the kernel to 5.10.134-17.0.2.lifsea8.
Enabled cgroup v2 mode by default.

Important

Your ACK cluster must be version 1.28 or later. To upgrade your cluster, see Manually upgrade a cluster.

For details, see the following sections.

Important updates

Kernel updates.
- Upgraded the kernel to 5.10.134-17.0.2.lifsea8.
- Disabled the CONFIG_BT Bluetooth module for faster startup.
Enabled cgroup v2 mode by default.
Adjusted two scheduling-related kernel parameters to improve performance for CPU-intensive tasks:
- kernel.sched_wakeup_granularity_ns=15000000
- kernel.sched_min_granularity_ns=10000000

Adjusted the following kernel parameters to align with the official Alibaba Cloud Linux 3 image.

kernel.hung_task_timeout_secs = 240
kernel.panic_on_oops = 1
kernel.watchdog_thresh = 50
kernel.hardlockup_panic = 1
kernel.sysrq = 1
net.ipv4.neigh.default.gc_stale_time = 120
net.ipv4.conf.all.rp_filter = 0
net.ipv4.conf.default.rp_filter = 0
net.ipv4.conf.default.arp_announce = 2
net.ipv4.conf.lo.arp_announce = 2
net.ipv4.conf.all.arp_announce = 2
net.ipv4.tcp_max_tw_buckets = 5000
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_synack_retries = 2
net.ipv4.tcp_slow_start_after_idle = 0
vm.swappiness = 0

Changed the default configuration of transparent huge pages (THP) from always to madvise.

Security updates

Package name	CVE ID	Package version
curl	CVE-2023-38546	7.61.1-34.0.1.al8
dnsmasq	CVE-2023-28450 CVE-2023-50387 CVE-2023-50868	2.79-32.0.1.al8
expat	CVE-2023-52425	2.2.5-13.al8
glib2	CVE-2023-29499 CVE-2023-32611 CVE-2023-32665	2.68.4-11.al8
glibc	CVE-2024-2961	2.32-1.17.al8.lifsea8
gmp	CVE-2021-43618	6.2.0-13.0.1.al8
gnutls	CVE-2023-5981	3.6.16-8.0.2.al8
kernel-core	CVE-2022-3114 CVE-2022-3424 CVE-2022-38096 CVE-2022-3903 CVE-2022-45887 CVE-2023-0160 CVE-2023-0615 CVE-2023-1206 CVE-2023-20569 CVE-2023-20588 CVE-2023-20593 CVE-2023-28464 CVE-2023-2860 CVE-2023-3006 CVE-2023-31083 CVE-2023-31085 CVE-2023-3358 CVE-2023-3567 CVE-2023-3772 CVE-2023-3863 CVE-2023-39192 CVE-2023-4015 CVE-2023-4132 CVE-2023-4155 CVE-2023-42753 CVE-2023-42754 CVE-2023-42755 CVE-2023-45863 CVE-2023-45871 CVE-2023-4622 CVE-2023-4623 CVE-2023-4921 CVE-2023-51042 CVE-2023-51779 CVE-2023-5178 CVE-2023-52438 CVE-2023-52445 CVE-2023-5717 CVE-2023-6176 CVE-2023-6546 CVE-2023-6817 CVE-2023-6915 CVE-2023-6931 CVE-2023-6932 CVE-2024-0565 CVE-2024-0646 CVE-2024-1086 CVE-2024-22099 CVE-2024-23307 CVE-2024-24855 CVE-2024-24860 CVE-2024-26589 CVE-2024-26597	5.10.134-17.0.2.lifsea8
libssh	CVE-2023-6004 CVE-2023-6918 CVE-2023-48795	0.9.6-12.al8
libxml2	CVE-2024-25062	2.9.7-18.0.3.al8
oniguruma	CVE-2019-13224 CVE-2019-16163 CVE-2019-19012 CVE-2019-19203 CVE-2019-19204	6.8.2-3.0.1.al8
openssl	CVE-2023-3446 CVE-2023-3817 CVE-2023-5678	1.1.1k-12.0.1.al8
pam	CVE-2024-22365	1.3.1-28.al8
procps-ng	CVE-2023-4016	3.3.15-14.0.1.al8
rpm	CVE-2021-35937 CVE-2021-35938 CVE-2021-35939	4.14.3-27.0.5.2.al8
shadow-utils	CVE-2023-4641	4.6-19.0.1.al8
sudo	CVE-2023-28486 CVE-2023-28487 CVE-2023-42465	1.9.5p2-1.0.1.al8
util-linux	CVE-2024-28085	2.32.1-45.0.1.1.al8.1

Package updates

Upgraded packages

NetworkManager, 1.40.16-4.0.1.al8->1.40.16-15.0.1.al8
NetworkManager-libnm, 1.40.16-4.0.1.al8->1.40.16-15.0.1.al8
acpid, 2.0.32-6.0.1.al8->2.0.32-7.al8
audit-libs, 3.0.7-4.0.1.al8->3.0.7-5.0.1.al8
chkconfig, 1.19.1-1.al8->1.19.2-1.al8
cmake-filesystem, 3.20.2-5.al8->3.26.5-1.0.2.al8
coreutils-single, 8.30-15.al8->8.30-15.0.3.al8
crypto-policies, 20221215-1.gitece0092.al8->20230731-1.git3177e06.al8
curl, 7.61.1-31.0.3.al8.2->7.61.1-34.0.1.al8
dbus, 1.12.8-25.0.1.al8->1.12.8-26.0.1.al8
dbus-common, 1.12.8-25.0.1.al8->1.12.8-26.0.1.al8
dbus-daemon, 1.12.8-25.0.1.al8->1.12.8-26.0.1.al8
dbus-libs, 1.12.8-25.0.1.al8->1.12.8-26.0.1.al8
dbus-tools, 1.12.8-25.0.1.al8->1.12.8-26.0.1.al8
device-mapper, 1.02.181-9.0.1.al8->1.02.181-13.al8.0.1.al8
device-mapper-libs, 1.02.181-9.0.1.al8->1.02.181-13.al8.0.1.al8
dnsmasq, 2.79-27.al8->2.79-32.0.1.al8
elfutils-libelf, 0.188-3.0.1.al8->0.189-3.al8
expat, 2.2.5-11.al8->2.2.5-13.al8
file-libs, 5.33-24.al8->5.33-25.al8
findutils, 4.6.0-20.2.al8->4.6.0-21.0.1.al8
fuse, 2.9.7-16.al8->2.9.7-17.al8
fuse-common, 3.3.0-16.al8->3.3.0-17.al8
fuse-devel, 2.9.7-16.al8->2.9.7-17.al8
fuse-libs, 2.9.7-16.al8->2.9.7-17.al8
glib2, 2.68.4-6.al8->2.68.4-11.al8
glibc, 2.32-1.13.2.lifsea8->2.32-1.17.al8.lifsea8
gmp, 6.2.0-10.0.1.al8->6.2.0-13.0.1.al8
gnutls, 3.6.16-6.0.1.al8->3.6.16-8.0.2.al8
gzip, 1.9-13.al8->1.9-14.al8
hwdata, 0.314-8.16.al8->0.314-8.19.0.2.1.al8
ignition, 2.9.0-2.git1d56dc8.11.al8->2.9.0-2.git1d56dc8.13.al8
iptables, 1.8.4-24.0.1.al8->1.8.5-9.0.1.al8
iptables-libs, 1.8.4-24.0.1.al8->1.8.5-9.0.1.al8
iptables-services, 1.8.4-24.0.1.al8->1.8.5-9.0.1.al8
irqbalance, 1.9.0-4.0.1.al8->1.9.2-1.0.1.al8
jq, 1.6-14.al8->1.6-15.al8
kernel-core, 5.10.134-16.1.1.lifsea8->5.10.134-17.0.2.lifsea8
krb5-devel, 1.18.2-25.0.1.al8->1.18.2-26.0.1.al8
krb5-libs, 1.18.2-25.0.1.al8->1.18.2-26.0.1.al8
libblkid, 2.32.1-42.0.1.al8->2.32.1-45.0.1.1.al8.1
libcap, 2.48-5.al8->2.48-6.0.1.al8
libcurl, 7.61.1-31.0.3.al8.2->7.61.1-34.0.1.al8
libcurl-devel, 7.61.1-31.0.3.al8.2->7.61.1-34.0.1.al8
libfdisk, 2.32.1-42.0.1.al8->2.32.1-45.0.1.1.al8.1
libgcc, 10.2.1-3.5.al8->10.2.1-3.8.al8
libibverbs, 44.0-2.0.1.al8.1->46.0-1.0.3.al8.1
libkadm5, 1.18.2-25.0.1.al8->1.18.2-26.0.1.al8
libmount, 2.32.1-42.0.1.al8->2.32.1-45.0.1.1.al8.1
libnfsidmap, 2.3.3-41.2.lifsea8->2.3.3-59.0.3.al8.lifsea8
libnftnl, 1.1.5-5.0.1.al8->1.2.2-3.0.1.al8
libnghttp2, 1.33.0-4.0.1.al8.1->1.33.0-5.al8
libsmartcols, 2.32.1-42.0.1.al8->2.32.1-45.0.1.1.al8.1
libsolv, 0.7.20-4.al8->0.7.20-6.al8
libssh, 0.9.6-10.al8->0.9.6-12.al8
libssh-config, 0.9.6-10.al8->0.9.6-12.al8
libstdc++, 10.2.1-3.5.al8->10.2.1-3.8.al8
libuuid, 2.32.1-42.0.1.al8->2.32.1-45.0.1.1.al8.1
libxml2, 2.9.7-18.0.2.al8->2.9.7-18.0.3.al8
libxml2-devel, 2.9.7-18.0.2.al8->2.9.7-18.0.3.al8
lifsea-release, 3-8.al8->3-11.al8
lifsea-repos, 1.0-4.al8->1.0-5.al8
lifsea-repos-ostree, 1.0-4.al8->1.0-5.al8
nfs-utils, 2.3.3-41.2.lifsea8->2.3.3-59.0.3.al8.lifsea8
numactl-libs, 2.0.14-9.al8->2.0.16-1.0.1.al8
oniguruma, 6.8.2-2.1.al8->6.8.2-3.0.1.al8
openssl-devel, 1.1.1k-9.0.1.al8->1.1.1k-12.0.1.al8
openssl-libs, 1.1.1k-9.0.1.al8->1.1.1k-12.0.1.al8
ostree, 2022.2-5.0.1.3.lifsea8->2022.2-9.al8.lifsea8
ostree-libs, 2022.2-5.0.1.3.lifsea8->2022.2-9.al8.lifsea8
ostree-prepare-root, 2022.2-5.0.1.3.lifsea8->2022.2-9.al8.lifsea8
pam, 1.3.1-25.0.1.al8->1.3.1-28.al8
procps-ng, 3.3.15-13.0.1.al8->3.3.15-14.0.1.al8
rpcbind, 1.2.5-8.2.lifsea8->1.2.5-10.0.2.al8.lifsea8
rpm, 4.14.3-26.0.6.al8->4.14.3-27.0.5.2.al8
rpm-libs, 4.14.3-26.0.6.al8->4.14.3-27.0.5.2.al8
rpm-ostree, 2022.10.115.g15eba7b1-2.0.1.4.lifsea8->2022.10.117.g52714b51-2.0.2.al8.lifsea8
rpm-ostree-libs, 2022.10.115.g15eba7b1-2.0.1.4.lifsea8->2022.10.117.g52714b51-2.0.2.al8.lifsea8
rpm-plugin-selinux, 4.14.3-26.0.6.al8->4.14.3-27.0.5.2.al8
selinux-policy, 3.14.3-54.4.lifsea8->3.14.3-128.0.1.al8.1
selinux-policy-targeted, 3.14.3-54.4.lifsea8->3.14.3-128.0.1.al8.1
shadow-utils, 4.6-17.0.1.al8->4.6-19.0.1.al8
sqlite-libs, 3.26.0-18.al8->3.26.0-19.al8
sudo, 1.8.29-10.al8->1.9.5p2-1.0.1.al8
systemd, 239-74.0.3.lifsea8.3.1->239-78.0.4.1.al8.lifsea8
systemd-libs, 239-74.0.3.lifsea8.3.1->239-78.0.4.1.al8.lifsea8
systemd-udev, 239-74.0.3.lifsea8.3.1->239-78.0.4.1.al8.lifsea8
tzdata, 2023c-1.0.1.al8->2024a-1.0.1.1.al8
util-linux, 2.32.1-42.0.1.al8->2.32.1-45.0.1.1.al8.1
which, 2.21-18.0.1.al8->2.21-20.0.1.al8
xfsprogs, 5.0.0-11.0.1.al8->5.0.0-12.0.1.al8

Fixed issues

Image:
- Fixed an issue that prevented automatic resizing of NVMe cloud disks used as system disks.