beta-4012.1.0

Changes since Beta 3975.1.1

Security fixes:

• Linux (CVE-2024-42098, CVE-2024-42097, CVE-2024-42096, CVE-2024-42095, CVE-2024-42093, CVE-2024-42094, CVE-2024-42092, CVE-2024-42090, CVE-2024-42089, CVE-2024-42087, CVE-2024-42086, CVE-2024-42084, CVE-2024-42085, CVE-2024-42070, CVE-2024-42069, CVE-2024-42068, CVE-2024-42067, CVE-2024-42082, CVE-2024-42080, CVE-2024-42079, CVE-2024-42077, CVE-2024-42076, CVE-2024-42074, CVE-2024-42073, CVE-2023-52887, CVE-2024-42063, CVE-2024-41094, CVE-2024-41093, CVE-2024-41092, CVE-2024-41089, CVE-2024-41088, CVE-2024-41087, CVE-2024-41098, CVE-2024-41097, CVE-2024-41096, CVE-2024-41095, CVE-2024-41084, CVE-2024-41009, CVE-2024-39486, CVE-2024-42068, CVE-2024-42067, CVE-2024-42145, CVE-2024-42154, CVE-2024-42153, CVE-2024-42152, CVE-2024-42148, CVE-2024-42230, CVE-2024-42229, CVE-2024-42228, CVE-2024-42226, CVE-2024-42225, CVE-2024-42147, CVE-2024-42224, CVE-2024-42223, CVE-2024-42161, CVE-2024-42160, CVE-2024-42159, CVE-2024-42157, CVE-2024-42110, CVE-2024-42119, CVE-2024-42116, CVE-2024-42115, CVE-2024-42144, CVE-2024-42143, CVE-2024-42142, CVE-2024-42141, CVE-2024-42140, CVE-2024-42113, CVE-2024-42138, CVE-2024-42137, CVE-2024-42136, CVE-2024-42135, CVE-2024-42133, CVE-2024-42132, CVE-2024-42131, CVE-2024-42130, CVE-2024-42128, CVE-2024-42127, CVE-2024-42126, CVE-2024-42124, CVE-2024-42121, CVE-2024-42120, CVE-2023-52888, CVE-2024-42106, CVE-2024-42105, CVE-2024-42104, CVE-2024-42103, CVE-2024-42102, CVE-2024-42101, CVE-2024-42100, CVE-2024-42109, CVE-2024-40947, CVE-2024-41056, CVE-2024-41053, CVE-2024-41055, CVE-2024-41054, CVE-2024-41032, CVE-2024-41031, CVE-2024-41030, CVE-2024-41028, CVE-2024-41027, CVE-2024-41052, CVE-2024-41051, CVE-2024-41050, CVE-2024-41049, CVE-2024-41048, CVE-2024-41047, CVE-2024-41046, CVE-2024-41044, CVE-2024-41025, CVE-2024-41041, CVE-2024-41040, CVE-2024-41039, CVE-2024-41038, CVE-2024-41037, CVE-2024-41036, CVE-2024-41035, CVE-2024-41034, CVE-2024-41024, CVE-2024-41081, CVE-2024-41078, CVE-2024-41079, CVE-2024-41076, CVE-2024-41075, CVE-2024-41074, CVE-2024-41073, CVE-2024-41072, CVE-2024-41070, CVE-2024-41069, CVE-2024-41077, CVE-2024-41068, CVE-2024-41066, CVE-2024-41065, CVE-2024-41064, CVE-2024-41063, CVE-2024-41062, CVE-2024-41060, CVE-2024-41059, CVE-2024-41057, CVE-2024-41058, CVE-2024-41022, CVE-2024-41020, CVE-2024-41019, CVE-2024-41018, CVE-2024-41017, CVE-2024-41015, CVE-2024-41090, CVE-2024-41091, [CVE-2024-...

alpha-4054.0.0

Changes since Alpha 4012.0.1

Security fixes:

• curl (CVE-2024-6197, CVE-2024-6874)
• docker (CVE-2024-29018)
• git (CVE-2024-32002, CVE-2024-32004, CVE-2024-32020, CVE-2024-32021, CVE-2024-32465)
• glib (CVE-2024-34397)
• go (CVE-2023-45288, CVE-2023-45289, CVE-2023-45290, CVE-2024-24783, CVE-2024-24784, CVE-2024-24785, CVE-2024-24788, CVE-2024-24789, CVE-2024-24790, CVE-2024-24791)
• intel-microcode (CVE-2023-45733, CVE-2023-45745, CVE-2023-46103, CVE-2023-47855)
• libarchive (CVE-2024-26256, CVE-2024-37407)
• libxml2 (CVE-2024-34459)
• mit-krb5 (CVE-2024-26461, CVE-2024-26462, CVE-2024-37370, CVE-2024-37371)
• tpm2-tools (CVE-2024-29038, CVE-2024-29039, CVE-2024-29040)
• SDK: nasm (CVE-2019-6290, CVE-2019-6291, CVE-2019-8343, CVE-2020-21528, CVE-2021-33450, CVE-2021-33452, CVE-2022-44368, CVE-2022-44369, CVE-2022-44370)
• sysext-podman: podman (CVE-2024-3727)
• Linux (CVE-2024-42098, CVE-2024-42097, CVE-2024-42096, CVE-2024-42095, CVE-2024-42093, CVE-2024-42094, CVE-2024-42092, CVE-2024-42090, CVE-2024-42089, CVE-2024-42087, CVE-2024-42086, CVE-2024-42084, CVE-2024-42085, CVE-2024-42070, CVE-2024-42069, CVE-2024-42068, CVE-2024-42067, CVE-2024-42082, CVE-2024-42080, CVE-2024-42079, CVE-2024-42077, CVE-2024-42076, CVE-2024-42074, CVE-2024-42073, CVE-2023-52887, CVE-2024-42063, CVE-2024-41094, CVE-2024-41093, CVE-2024-41092, CVE-2024-41089, CVE-2024-41088, CVE-2024-41087, CVE-2024-41098, CVE-2024-41097, CVE-2024-41096, CVE-2024-41095, CVE-2024-41084, CVE-2024-41009, CVE-2024-39486, CVE-2024-42068, CVE-2024-42067, CVE-2024-42145, CVE-2024-42154, CVE-2024-42153, CVE-2024-42152, CVE-2024-42148, CVE-2024-42230, CVE-2024-42229, CVE-2024-42228, CVE-2024-42226, CVE-2024-42225, CVE-2024-42147, CVE-2024-42224, CVE-2024-42223, CVE-2024-42161, CVE-2024-42160, CVE-2024-42159, CVE-2024-42157, CVE-2024-42110, CVE-2024-42119, CVE-2024-42116, CVE-2024-42115, CVE-2024-42144, CVE-2024-42143, CVE-2024-42142, CVE-2024-42141, CVE-2024-42140, CVE-2024-42113, CVE-2024-42138, CVE-2024-42137, CVE-2024-42136, CVE-2024-42135, CVE-2024-42133, CVE-2024-42132, CVE-2024-42131, CVE-2024-42130, CVE-2024-42128, CVE-2024-42127, CVE-2024-42126, CVE-2024-42124, CVE-2024-42121, CVE-2024-42120, CVE-2023-52888, CVE-2024-42106, CVE-2024-42105, CVE-2024-42104, CVE-2024-42103, CVE-2024-42102, CVE-2024-42101, CVE-2024-42100, CVE-2024-42109, CVE-2024-40947, CVE-2024-41056, CVE-2024-41053, CVE-2024-41055, CVE-2024-41054, CVE-2024-41032, CVE-2024-41031, CVE-2024-41030, CVE-2024-41028, CVE-2024-41027, CVE-2024-41052, [CVE-2024-41051](https://nvd.nist.gov/vuln/detail/CVE-2024-4105...

stable-3815.2.5

Changes since Stable 3815.2.4

Security fixes:

• openssh (CVE-2024-6387)

Updates:

• Linux (6.1.96)
• openssh (9.7_p1)

lts-3510.3.5

Changes since LTS 3510.3.4

Security fixes:

• openssh (CVE-2024-6387)

beta-3975.1.1

Changes since Beta 3975.1.0

Security fixes:

• openssh (CVE-2024-6387)

Updates:

• Linux (6.6.36)
• openssh (9.7_p1)

alpha-4012.0.1

Changes since Alpha 4012.0.0

Security fixes:

• openssh (CVE-2024-6387)

Updates:

• Linux (6.6.36)
• openssh (9.7_p1)

stable-3815.2.4

Changes since Stable 3815.2.3

Changes:

• Added azure-nvme-utils to the image, which is used by udev to create symlinks for NVMe disks on Azure v6 instances under /dev/disk/azure/. (scripts#1950)

Updates:

• Linux (6.1.95 (includes 6.1.94, 6.1.93, 6.1.92 and 6.1.91))
• ca-certificates (3.101)

lts-3510.3.4

Changes since LTS 3510.3.3

Updates:

• Linux (5.15.161 (includes 5.15.160, 5.15.159, 5.15.158, 5.15.157, 5.15.156 and 5.15.155))
• ca-certificates (3.101 (includes 3.100))

beta-3975.1.0

Changes since Beta 3941.1.0

Security fixes:

• expat (CVE-2023-52425, CVE-2024-28757)
• gnutls (CVE-2024-28834, CVE-2024-28835)
• intel-microcode (CVE-2023-22655, CVE-2023-28746, CVE-2023-38575, CVE-2023-39368, CVE-2023-43490)
• less (CVE-2024-32487)
• SDK: python (CVE-2023-6597, CVE-2024-0450, gh-81194, gh-113659, gh-102388, gh-114572, gh-115243)

Bug fixes:

• Fixed issue file generation from /etc/issue.d (scripts#2018)

Changes:

• Added KubeVirt qcow2 image for amd64/arm64 (flatcar/scripts#1962)
• Added azure-nvme-utils to the image, which is used by udev to create symlinks for NVMe disks on Azure v6 instances under /dev/disk/azure/. (scripts#1950)
• Backported systemd-sysext mutable overlays functionality from yet-unreleased systemd v256. (flatcar/scripts#1753)
• Provided a Podman Flatcar extension as optional systemd-sysext image with the release. Write 'podman' to /etc/flatcar/enabled-sysext.conf through Ignition and the sysext will be installed during provisioning (scripts#1964)
• OpenStack: Changed metadata hostname source order. The service first tries with the config drive then fallback on the metadata service. (bootengine#96)

Updates:

• Linux (6.6.35 (includes 6.6.34, 6.6.33, 6.6.32 and 6.6.31))
• Linux Firmware (20240513)
• Rust (1.77.2)
• ca-certificates (3.101)
• containerd (1.7.17 (includes 1.7.16))
• expat (2.6.2 (includes 2.6.1 and 2.6.0))
• gnutls (3.8.5 (includes 3.8.4))
• intel-microcode (20240312)
• libunistring (1.2)
• systemd (255.4)
• SDK: python (3.11.9)

Changes since Alpha 3975.0.0

Bug fixes:

• Fixed issue file generation from /etc/issue.d (scripts#2018)

Changes:

• OpenStack: Changed metadata hostname source order. The service first tries with the config drive then fallback on the metadata service. (bootengine#96)

Updates:

• Linux (6.6.35 (includes 6.6.34, 6.6.33, 6.6.32 and 6.6.31))
• ca-certificates (3.101)

alpha-4012.0.0

Changes since Alpha 3975.0.0

Bug fixes:

• Fixed issue file generation from /etc/issue.d (scripts#2018)

Changes:

• Added Akamai / Linode images (flatcar/scripts#1806)
• Provided a Python Flatcar extension as optional systemd-sysext image with the release. Write 'python' to /etc/flatcar/enabled-sysext.conf through Ignition and the sysext will be installed during provisioning (scripts#1979)
• OpenStack: Changed metadata hostname source order. The service first tries with the config drive then fallback on the metadata service. (bootengine#96)
• Removed unused grub executable duplicate files and removed grub modules that are already assembled in the grub executable (scripts#1955).
• libcrypt is now provided by the libxcrypt library instead of glibc. Glibc libcrypt was deprecated long time ago.

Updates:

• Ignition (2.19.0)
• Linux (6.6.35 (includes 6.6.34, 6.6.33, 6.6.32 and 6.6.31))
• Linux Firmware (20240610)
• Rust (1.79.0 (includes 1.78.0))
• afterburn (5.6.0)
• ca-certificates (3.101)
• containerd (1.7.18)