beta-3602.1.0

Changes since Beta 3572.1.0

Security fixes:

• Linux (CVE-2022-48425)
• Go (CVE-2023-24539, CVE-2023-24540, CVE-2023-29400)
• OpenSSH (CVE-2023-28531)
• OpenSSL (CVE-2023-0464, CVE-2023-0465, CVE-2023-0466, CVE-2023-1255)
• bash (CVE-2022-3715)
• c-ares (CVE-2022-4904)
• curl (CVE-2023-27533, CVE-2023-27534, CVE-2023-27535, CVE-2023-27536, CVE-2023-27537, CVE-2023-27538)
• libxml2 (CVE-2023-28484, CVE-2023-29469)

Bug fixes:

• Restored the reboot warning and delay for non-SSH console sessions (locksmith#21)

Changes:

• Changed coreos-cloudinit to now set the short hostname instead of the FQDN when fetched from the metadata service (coreos-cloudinit#19)

Updates:

• Linux (5.15.113 (includes 5.15.112))
• Go (1.19.9)
• OpenSSH (9.3)
• bash (5.2)
• bpftool (6.2.1)
• c-ares (1.19.0)
• containerd (1.6.21)
• curl (8.0.1)
• e2fsprogs (1.47.0)
• gdb (13.1.90)
• GLib (2.74.6)
• libarchive (3.6.2)
• libxml2 (2.10.4)
• multipath-tools (0.9.4)
• pinentry (1.2.1)
• readline (8.2)
• runc (1.1.7)
• sqlite (3.41.2)
• XZ utils (5.4.2)
• SDK: nano (7.2)

Changes since Alpha 3602.0.0

Security fixes:

• Linux (CVE-2022-48425)

Bug fixes:

Changes:

Updates:

• Linux (5.15.113 (includes 5.15.112))