[Security Notice]: When installing from the OC9.6 ISO using the "Server Installation" option, the system will, by default, enable the SSH service (sshd) and open TCP port 22 for remote login. No other network ports are opened by default unless additional services are manually installed and enabled.


[2026-05-26]:We are pleased to announce the release of the first version of OpenCloudOS 9.6, version 20260514.1, which will serve as the baseline release of OC9.6 and includes kernel version kernel-6.6.119-49.21.oc9. The file pointing relationship is as follows:
baseline/OpenCloudOS-9.6-aarch64-boot.iso -> 20260514.1/OpenCloudOS-9.6-20260514.1-aarch64-boot.iso
baseline/OpenCloudOS-9.6-aarch64-minimal.iso -> 20260514.1/OpenCloudOS-9.6-20260514.1-aarch64-minimal.iso
baseline/OpenCloudOS-9.6-aarch64-everything.iso -> 20260514.1/OpenCloudOS-9.6-20260514.1-aarch64-everything.iso


[2026-07-24]: Update monthly version OpenCloudOS-9.6-20260708.0. Typically includes: fixed rpm packages for recently discovered bugs, security fixes, and optimization or upgrades for some rpm packages. Special note the following updates:
- ** kernel      ** has been updated to kernel-6.6.119-50.12, fixes critical CVEs CVE-2026-46331, CVE-2026-43494, CVE-2026-46333, CVE-2026-43503, CVE-2026-46300, CVE-2026-43284, CVE-2026-31431, CVE-2026-43500, CVE-2026-46243, and disables CONFIG_INET_ESPINTCP/CONFIG_INET6_ESPINTCP to mitigate the Fragnesia vulnerability. Additional high-severity fixes address sched/fair DELAY_DEQUEUE starvation, reweight_entity() double-counting, mm/swap workingset shadow overlap panic, XFS null pointer dereference in log recovery, and NULL pointer crashes in psi/fuse/cpuset. Networking bugfixes cover net/sched pedit COW page cache corruption, net/skb shared-frag marker propagation, macsec SA cleanup in softirq context, and sched tg->load_avg unfairness. New features include HAOC kernel code pre-integration, mlnx DOCA 3.4 driver, mpt3sas driver upgrade to 57.00.00.00, UFFD_FEATURE_WP_ASYNC support, cgroup v2 role, x86_64 syscall dispatch table optimization, and CPU microcode late-loading. Platform enhancements sync OCK patches for Intel Clearwater Forest/SNC, AMD Zen6, 海光 family 18h model 18h, 龙芯 LoongArch, 鲲鹏 kunpeng950, 兆芯 microcode/KVM, 申威 SW64, ZTE Dinghai NIC, and Linkdata controllers. Also fixes over 80 additional non-critical CVEs across net, crypto, fs, and driver subsystems. Refer to the rpm package changelog for the complete list of changes.
- ** gcc         ** has been updated to 12.3.1.8-4, adding support for HYGON C86-4G series processors, backporting Zhaoxin lujiazui, yongfeng, and shijidadao architecture enablements, and applying an Intel patch to slightly discourage DFmode moves between SSE_REGS and GENERAL_REGS.
- ** glibc       ** has been updated to 2.38-49, fixing CVE-2025-15281 (wordexp WRDE_REUSE reset), CVE-2026-0915 (NSS DNS getnetbyaddr), and CVE-2026-0861 (memalign alignment overflow check). It also fixes regressions in posix_memalign() and malloc/free core counting, addresses pthread condition variable compatibility and lost wakeup issues, and fixes sem_open O_CREAT handling and CVE-2025-8058 double-free in regcomp. Additionally, it backports Hygon model 0x8 support, NT threshold adjustment, AVX512/AVX fast unaligned load optimizations, cache computation fix under hypervisors, adds SW64 ISA support, and syncs LoongArch upstream changes.
- ** openssl     ** has been updated to 3.0.12-27, fixing CVE-2026-34182, CVE-2026-45447, CVE-2026-22795, CVE-2026-22796, CVE-2025-69418, CVE-2025-68160, CVE-2025-69419, CVE-2025-69420, CVE-2025-69421, CVE-2025-15467, CVE-2024-13176, CVE-2024-9143, CVE-2024-41996, CVE-2024-6119, CVE-2024-5535, CVE-2024-2511, CVE-2024-4741, and CVE-2024-4603. It also fixes multiple memory leaks, DH key computation error handling, OSSL_STORE EOF check, SM2 key encoding, and SM2 CMS signature support, and adds SW64 architecture support and QAT engine enablement.


[2026-09-18]: Update monthly version OpenCloudOS-9.6-20260825.0. Typically includes: fixed rpm packages for recently discovered bugs, security fixes, and optimization or upgrades for some rpm packages. Special note the following updates:
- ** kernel      ** has been updated to kernel-6.6.119-51.5, fixing KVM/SVM use-after-free bugs in shadow paging and LBR virtualization, disabling AVIC IPI virtualization on Hygon Family 18h (erratum #1235), and disabling XSAVES for Hygon C86-4G-M4/M6. It adds Intel Diamond Rapids (DMR) support including cstate PMU, SST, intel_pstate OOB mode, and core PMU with PEBS memory auxiliary info. AMD IBS is enhanced with streaming store filter, RIP bit63 hardware filtering, fetch latency filtering, OP load latency filtering, and race condition fixes. New drivers include Huawei hinic5 intelligent NIC, guangruntong NIC, and RDMA/zxdh userspace ABI. SW64 architecture patches fix compile errors and improve KVM signal mask handling. Per-cgroup THP control is introduced with global switch and per-type granularity, and KVM x86 advertises AVX10.2, AVX10_VNNI_INT, AMX, and MOVRS CPUIDs. Network bugfixes address bonding infinite loop, IPv6 extension header validation, SCTP transport double-free, and nvmet pre-auth out-of-bounds heap read. Refer to the rpm package changelog for the complete list of changes.
- ** gcc         ** has been updated to 12.3.1.8-6, adding support for HYGON C86-4G series and C86-4G-M8 processors with RNG instruction support, backporting 兆芯 lujiazui/yongfeng/shijidadao architecture enablements, and including an Intel SSE/DFmode register allocation improvement. It also features AArch64 loop optimization and hip12 pipeline updates, enables libasan/libubsan for RISC-V, fixes LoongArch sanitizer errors and cross toolchain conflicts, and improves 鲲鹏 compilation with AI model updates, SLP transpose, and struct field compression optimizations.
- ** glibc       ** has been updated to 2.38-49, fixing CVE-2026-6791, CVE-2026-6368 (wordexp tilde expansion stack overflow and WRDE_APPEND invalid memory), CVE-2025-15281 (wordexp WRDE_REUSE field reset), CVE-2026-0915 (NSS DNS backend for getnetbyaddr), and CVE-2026-0861 (memalign alignment overflow check). It also backports Hygon model 0x8 support, NT threshold adjustment, AVX512/AVX fast unaligned load fixes for Hygon platforms, x86 CET test and APX register fixes, condition variable compatibility with pre-2.41 versions, and adds SW64 ISA support and LoongArch upstream sync.
- ** openssh     ** has been updated to 9.3p2-16, fixing CVE-2026-35414, CVE-2026-35385, and CVE-2025-26465.
- ** systemd     ** has been updated to 235-8, rebuilding the package to clarify requirements in BaseOS and AppStream, with earlier revisions adding LoongArch support and Python 3.11 compatibility.


[2026-10-16]: Update monthly version OpenCloudOS-9.6-20260930.1. Typically includes: fixed rpm packages for recently discovered bugs, security fixes, and optimization or upgrades for some rpm packages. Special note the following updates:
- ** kernel      ** has been updated to kernel-6.6.119-52.9, fixes critical CVEs CVE-2026-53212, CVE-2026-53266, CVE-2026-74580, CVE-2026-64600, CVE-2026-43456, CVE-2026-64564, CVE-2026-64531, CVE-2026-43499, CVE-2026-53359, CVE-2026-46113, CVE-2026-53362, CVE-2026-46242, CVE-2026-52943, CVE-2026-46331, CVE-2026-43494, CVE-2026-46333, CVE-2026-43503, CVE-2026-46300, CVE-2026-43284, CVE-2026-31431, CVE-2026-43500, and also fixes additional high-severity CVEs in netfilter, sctp, macvlan, nvmet-tcp, xfs, bonding, KVM/x86 shadow paging, eventpoll, net/sched, ptrace, crypto subsystems, and skbuff zerocopy paths. Key bugfixes address UAF/panic issues in bridge multicast teardown, openvswitch tunnel self-deadlock, BPF stale offload pointer, sched soft_domain NULL deref, x86 MCE/AMD bogus error filtering, and KVM SVM MSR leakage to non-SEV-ES guests. New features include ublk+io_uring support, PCI storage/network probe delay boot parameters, IOMMU default domain set to passthrough for DMA performance, virtio-net napi_poll_refill control, CONFIG_DMA_SHARED_BUFFER and CONFIG_PCI_P2PDMA enablement, AMD CCP crypto driver, and GuangRunTong Ethernet driver modules. Platform enhancements cover 鲲鹏 (Kunpeng), 海光 (Hygon), 龙芯 (LoongArch), 兆芯 (Zhaoxin), and 申威 (SW64) architecture commits from OCK. Refer to the rpm package changelog for the complete list of changes.
- ** gcc         ** has been updated to 12.3.1.8-8, fixing a link error when a coroutine template is instantiated in multiple translation units at -O2, and correcting a LoongArch vector shift operation that failed to extend the shift amount to element size before broadcasting. It also adds support for Hygon C86-4G series processors and Hygon RNG instructions, and backports 兆芯 lujiazui, yongfeng, and shijidadao architecture enablements from the community trunk.
- ** systemd     ** has been updated to 235-8, rebuilt to clarify package requirements in BaseOS and AppStream, with added LoongArch release support and Python 3.11 compatibility.