diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2ad01c5f..2fb4885d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -9,6 +9,9 @@
 
 ### Added
 
+- **mcpplibs.os 0.2.3。** 钉 openkal-linux 0.18.3:目录句柄以 `O_PATH` 打开,进程可搜索而不可读的目录中按绝对名
+  启动的程序能被找到(Android 应用沙箱,mcpp-community/mcpp#857)。测试成员 `os` 随之移动。GLOBAL 为 GitHub 标签归档,CN 为 GitCode
+  `mcpp-res` 镜像,sha256 两处一致。
 - **openkal-platform 0.18.0。** 运行器声明 `hosts`(okrun 构建的系统与架构,即需要它的包能运行的地方);删除
   `universal`(打包只含命令命名的腿);版本组为 openkal-linux 0.18.3、openkal-musl 0.22.9、openkal-llvm-runtime
   0.16.9、openkal-ld/run/tools 0.1.4。需要 mcpp 2026.10.30.1;测试成员 `openkal-platform` 在本仓库 CI 的 mcpp 移到 2026.10.30.1 时随之移动。GLOBAL 为 GitHub
diff --git a/pkgs/o/os.lua b/pkgs/o/os.lua
index 80238ce0..6d17fc0b 100644
--- a/pkgs/o/os.lua
+++ b/pkgs/o/os.lua
@@ -31,6 +31,13 @@ package = {
 
     xpm = {
         linux = {
+            ["0.2.3"] = {
+                url    = {
+                    GLOBAL = "https://github.com/mcpplibs/os/archive/refs/tags/0.2.3.tar.gz",
+                    CN     = "https://gitcode.com/mcpp-res/os/releases/download/0.2.3/os-0.2.3.tar.gz",
+                },
+                sha256 = "e280c00d8be69c057dfbac9c9e49ea9aedb97aa5ec10b693f2262e861740e0b4",
+            },
             ["0.2.2"] = {
                 url    = {
                     GLOBAL = "https://github.com/mcpplibs/os/archive/refs/tags/0.2.2.tar.gz",
@@ -66,6 +73,13 @@ package = {
             },
         },
         macosx = {
+            ["0.2.3"] = {
+                url    = {
+                    GLOBAL = "https://github.com/mcpplibs/os/archive/refs/tags/0.2.3.tar.gz",
+                    CN     = "https://gitcode.com/mcpp-res/os/releases/download/0.2.3/os-0.2.3.tar.gz",
+                },
+                sha256 = "e280c00d8be69c057dfbac9c9e49ea9aedb97aa5ec10b693f2262e861740e0b4",
+            },
             ["0.2.2"] = {
                 url    = {
                     GLOBAL = "https://github.com/mcpplibs/os/archive/refs/tags/0.2.2.tar.gz",
@@ -101,6 +115,13 @@ package = {
             },
         },
         windows = {
+            ["0.2.3"] = {
+                url    = {
+                    GLOBAL = "https://github.com/mcpplibs/os/archive/refs/tags/0.2.3.tar.gz",
+                    CN     = "https://gitcode.com/mcpp-res/os/releases/download/0.2.3/os-0.2.3.tar.gz",
+                },
+                sha256 = "e280c00d8be69c057dfbac9c9e49ea9aedb97aa5ec10b693f2262e861740e0b4",
+            },
             ["0.2.2"] = {
                 url    = {
                     GLOBAL = "https://github.com/mcpplibs/os/archive/refs/tags/0.2.2.tar.gz",
diff --git a/tests/examples/os/mcpp.toml b/tests/examples/os/mcpp.toml
index 009a9455..8d9e351d 100644
--- a/tests/examples/os/mcpp.toml
+++ b/tests/examples/os/mcpp.toml
@@ -7,7 +7,7 @@ name    = "os-tests"
 version = "0.1.0"
 
 [dependencies.mcpplibs]
-os = "0.2.2"
+os = "0.2.3"
 
 [indices]
 mcpplibs = { path = "../../.." }