beta-3602.1.3

Changes since Beta 3602.1.2

Updates:

• Linux (5.15.120)

stable-3510.2.4

Changes since Stable 3510.2.3

Security fixes:

• Linux (CVE-2023-2124, CVE-2023-3212, CVE-2023-35788)

Bug fixes:

Changes:

• Changed ext4 inode size of root partition to 256 bytes. This improves compatibility with applications and is necessary for 2038 readiness (Flatcar#1082)

Updates:

• Linux (5.15.117 (includes 5.15.116, 5.15.115, 5.15.114))
• ca-certificates (3.91)

beta-3602.1.2

Changes since Beta 3602.1.1

Security fixes:

• Linux (CVE-2023-3338, CVE-2023-3390)

Bug fixes:

• Ensured that the folder /var/log/sssd is created if it doesn't exist, required for sssd.service (Flatcar#1096)
• Worked around a bash regression in flatcar-install and added error reporting for disk write failures (Flatcar#1059)

Changes:

• Changed ext4 inode size of root partition to 256 bytes. This improves compatibility with applications and is necessary for 2038 readiness (Flatcar#1082)

Updates:

• Linux (5.15.119 (includes 5.15.118))
• ca-certificates (3.91)

alpha-3654.0.0

Changes since Alpha 3637.0.0

Security fixes:

• Linux (CVE-2023-3269, CVE-2023-3390)
• OpenSSL (CVE-2023-2650)
• libmicrohttpd (CVE-2023-27371)
• vim (CVE-2023-2426)

Bug fixes:

• Ensured that the folder /var/log/sssd is created if it doesn't exist, required for sssd.service (Flatcar#1096)
• Worked around a bash regression in flatcar-install and added error reporting for disk write failures (Flatcar#1059)

Changes:

• Changed ext4 inode size of root partition to 256 bytes. This improves compatibility with applications and is necessary for 2038 readiness (Flatcar#1082)
• Updated locksmith to use non-deprecated resource control options in the systemd unit (Locksmith#20)
• SDK: Added the build_sysext script to ease building systemd-sysext images for Flatcar (Flatcar#1052, scripts#920)

Updates:

• Linux (6.1.37 (includes 6.1.36, 6.1.35))
• OpenSSL (3.0.9)
• XZ utils (5.4.3)
• bind tools (9.16.41)
• bpftool (6.3)
• ca-certificates (3.91)
• coreutils (9.3)
• curl (8.1.2)
• diffutils (3.10)
• ethtool (6.3)
• gawk (5.2.2)
• gdb (13.2)
• grep (3.11)
• hwdata (0.371)
• intel-microcode (20230512)
• iproute (6.3.0)
• less (633)
• libgpg-error (1.47)
• libmicrohttpd (0.9.76)
• libpcap (1.10.4)
• multipath-tools (0.9.5)
• pciutils (3.10.0)
• sqlite (3.42.0)
• strace (6.3)
• vim (9.0.1503)
• wget (1.21.4)
• whois (5.5.17)
• SDK: portage (3.0.46)
• SDK: python (3.10.12)

alpha-3637.0.0

Changes since Alpha 3619.0.0

Security fixes:

• Go (CVE-2023-29402, CVE-2023-29403, CVE-2023-29404, CVE-2023-29405)
• c-ares (CVE-2023-31124, CVE-2023-31130, CVE-2023-31147, CVE-2023-32067)
• sudo (CVE-2023-27320, CVE-2023-28486, CVE-2023-28487)
• VMware: open-vm-tools (CVE-2023-20867)

Bug fixes:

• Resolved the conflicting FD usage of libselinux and systemd which caused, e.g., a systemd crash on certain watchdog interaction during shutdown (patch in systemd 252.11)

Changes:

• Added TLS Kernel module (scripts#865)
• Added support for multipart MIME userdata in coreos-cloudinit. Ignition now detects multipart userdata and delegates execution to coreos-cloudinit. (scripts#873)
• Enabled the virtio GPU driver (scripts#830)
• Migrate to Type=notify in containerd.service. Changed the unit to Type=notify, utilizing the existing containerd support for sd_notify call after socket setup. (scripts#866)
• Migrated the NVIDIA installer from the Azure/AWS OEM partition to /usr to make it available on all platforms (scripts#932, Flatcar#1077)
• Azure and QEMU OEM images now use systemd-sysext images for layering additional platform-specific software on top of /usr. For Azure images this also means that the image has a normal Python installation available through the sysext image. The OEM software is still not updated but this will be added soon.
• Moved a mountpoint of the OEM partition from /usr/share/oem to /oem. /usr/share/oem became a symlink to /oem for backward compatibility. Despite the move, the initrd images providing files through /usr/share/oem should keep using /usr/share/oem. The move was done to enable activating the OEM sysext images that are placed in the OEM partition.

Updates:

• Linux (6.1.34 (includes 6.1.33, 6.1.32, 6.1.31))
• Go (1.20.5)
• c-ares (1.19.1)
• ca-certificates (3.90)
• coreutils (9.1)
• debianutils (5.7)
• ethtool (6.2)
• grep (3.8)
• hwdata (0.367)
• iproute (6.2)
• kbd (2.5.1)
• kexec-tools (2.0.24)
• kmod (30)
• less (632)
• nvme-cli (2.3)
• pciutils (3.9.0)
• sed (4.9)
• smartmontools (7.3)
• strace (6.2)
• sudo (1.9.13p3)
• systemd (252.11 (from 252.5))
• usbutils (015)
• util-linux (2.38.1)
• SDK: Rust (1.70.0)
• SDK: man-db (2.11.2)
• SDK: man-pages (6.03)
• VMware: open-vm-tools (12.2.5)

stable-3510.2.3

Changes since Stable 3510.2.2

Security fixes:

• Linux (CVE-2022-48425)

Updates:

• Linux (5.15.113 (includes 5.15.112))
• ca-certificates (3.90)

lts-3033.3.14

Changes since LTS 3033.3.13

Security fixes:

• Linux (CVE-2022-4269)

Updates:

• Linux (5.10.184 (includes 5.10.183, 5.10.182, 5.10.181))
• ca-certificates (3.90)

beta-3602.1.1

Changes since Beta 3602.1.0

Bug fixes:

• Resolved the conflicting FD usage of libselinux and systemd which caused, e.g., a systemd crash on certain watchdog interaction during shutdown (patch in systemd 252.11)

Updates:

• Linux (5.15.117 (includes 5.15.116, 5.15.115, 5.15.114))
• ca-certificates (3.90)
• systemd (252.11 (from 252.5))

stable-3510.2.2

Changes since Stable 3510.2.1

Security fixes:

• Linux (CVE-2023-1380, CVE-2023-1859, CVE-2023-2002, CVE-2023-2269, CVE-2023-31436, CVE-2023-32233)

Bug fixes:

Changes:

Updates:

• Linux (5.15.111 (includes 5.15.110, 5.15.109, 5.15.108, 5.15.107))
• ca-certificates (3.89.1)

lts-3033.3.13

Changes since LTS 3033.3.12

Security fixes:

• Linux (CVE-2022-39189, CVE-2023-1380, CVE-2023-2002, CVE-2023-2269, CVE-2023-2513, CVE-2023-31436, CVE-2023-32233)

Bug fixes:

Changes:

Updates:

• Linux (5.10.180 (includes 5.10.179))
• ca-certificates (3.89.1)