stable-3510.2.8

Changes since Stable 3510.2.7

Security fixes:

• Linux (CVE-2023-20588, CVE-2023-3772, CVE-2023-40283, CVE-2023-4128, CVE-2023-4206, CVE-2023-4207, CVE-2023-4208, CVE-2023-4273, CVE-2023-4569)

Changes:

• Azure: Add support for Microsoft Azure Network Adapter (MANA) NICs on Azure (scripts#1131)

Updates:

• Linux (5.15.129 (includes 5.15.128, 5.15.127, 5.15.126))
• ca-certificates (3.93)

beta-3602.1.6

Changes since Beta 3602.1.5

Changes:

• Azure: Add support for Microsoft Azure Network Adapter (MANA) NICs on Azure (scripts#1131)

Updates:

• Linux (5.15.132 (includes 5.15.131, 5.15.130))
• ca-certificates (3.93)

alpha-3732.0.0

Changes since Alpha 3717.0.0

Known issues:

• Regression in Kernel 6.1.54, so that a specific cgroupv1 sysfs entry for reading Kernel memory limit disappeared. Container runtimes like runc are mainly affected. The issue was already reported to the upstream Kernel community.

Security fixes:

• Linux (CVE-2023-25775, CVE-2023-4623)
• Go (CVE-2023-39318, CVE-2023-39319, CVE-2023-39320, CVE-2023-39321, CVE-2023-39322)
• nvidia-drivers (CVE-2023-25515, CVE-2023-25516)
• torcx (CVE-2022-28948)
• SDK: Python (CVE-2023-40217, CVE-2023-41105)

Bug fixes:

• Fix the RemainAfterExit clause in nvidia.service (Flatcar#1169)
• Fixed bug in handling renamed network interfaces when generating login issue (init#102)

Changes:

• OEM vendor tools are now A/B updated if they are shipped as systemd-sysext images, the migration happens when both partitions require a systemd-sysext OEM image - note that this will delete the nvidia.service from /etc on Azure because it's now part of /usr (Flatcar#60)
• Azure: Add support for Microsoft Azure Network Adapter (MANA) NICs on Azure (scripts#1131)

Updates:

• Linux (6.1.54 (includes 6.1.53, 6.1.52, 6.1.51))
• Go (1.19.13)
• Go (1.20.8)
• cJSON (1.7.16)
• ca-certificates (3.93)
• containerd (1.7.6)
• ethtool (6.4)
• glib (2.76.4)
• glibc (2.37)
• gmp (6.3.0)
• hwdata (0.373 (includes 0.372))
• inih (57)
• iproute2 (6.4.0)
• libmicrohttpd (0.9.77)
• libnftnl (1.2.6)
• libnvme (1.5)
• nvidia-drivers (535.104.05)
• nvme-cli (2.5)
• openldap (2.6.4)
• tar (1.35)
• xfsprogs (6.4.0)
• SDK: file (5.45)
• SDK: gnuconfig (20230731)
• SDK: kbd (2.6.1 (includes 2.6.0))
• SDK: python (3.11.5)
• SDK: qemu (8.0.4)

stable-3510.2.7

Changes since Stable 3510.2.6

Security fixes:

• Linux (CVE-2022-40982, CVE-2022-41804, CVE-2023-1206, CVE-2023-20569, CVE-2023-4004, CVE-2023-4147, CVE-2023-20569, CVE-2023-23908)

Bug fixes:

• Fixed the restart of Systemd services when the main process is being killed by a SIGHUP signal (flatcar#1157)

Updates:

• Linux (5.15.125 (includes 5.15.124, 5.15.123))

lts-3033.3.17

Changes since LTS 3033.3.16

Security fixes:

• Linux (CVE-2022-40982, CVE-2022-41804, CVE-2023-20569, CVE-2023-23908, CVE-2023-1206, CVE-2023-20588, CVE-2023-40283, CVE-2023-4128, CVE-2023-4147, CVE-2023-4273)

Updates:

• Linux (5.10.193 (includes 5.10.192, 5.10.191,5.10.190, 5.10.189))

beta-3602.1.5

Changes since Beta 3602.1.4

Security fixes:

• Linux (CVE-2022-40982, CVE-2022-41804, CVE-2023-20569, CVE-2023-20588, CVE-2023-40283, CVE-2023-4128, CVE-2023-23908)

Bug fixes:

• Fixed the restart of Systemd services when the main process is being killed by a SIGHUP signal (flatcar#1157)

Updates:

• Linux (5.15.129 (includes 5.15.128, 5.15.127, 5.15.126, 5.15.125))

alpha-3717.0.0

Changes since Alpha 3689.0.0

Security fixes:

• Linux (CVE-2022-40982, CVE-2022-41804, CVE-2023-20569, CVE-2023-20588, CVE-2023-34319, CVE-2023-3772, CVE-2023-3773, CVE-2023-40283, CVE-2023-4128, CVE-2023-4155, CVE-2023-4273, CVE-2023-23908)
• grub (CVE-2020-10713, CVE-2020-14372, CVE-2020-25632, CVE-2020-25647, CVE-2020-27749, CVE-2020-27779, CVE-2021-20225, CVE-2021-20233, CVE-2021-3981, CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735, CVE-2022-28736, CVE-2022-28737, CVE-2022-2601, CVE-2022-3775)
• intel-microcode (CVE-2022-40982, CVE-2022-41804, CVE-2023-23908)
• libarchive (libarchive-20230729)
• vim (CVE-2023-2609, CVE-2023-2610)
• VMware: open-vm-tools (CVE-2023-20900)
• SDK: qemu (CVE-2023-0330, CVE-2023-2861)
• SDK: Rust (CVE-2023-38497)

Bug fixes:

• Fixed the restart of Systemd services when the main process is being killed by a SIGHUP signal (Flatcar#1157)

Changes:

• Change nvidia.service to type oneshot (from the default "simple") so the subsequent services (configured with "Requires/After") are executed after the driver installation is successfully finished (Flatcar#1136)

Updates:

• Linux (6.1.50 (includes 6.1.49, 6.1.48, 6.1.47, 6.1.46, 6.1.45, 6.1.44))
• Linux Firmware (20230804)
• cifs-utils (7.0)
• containerd (1.7.5 (includes 1.7.4))
• cryptsetup (2.6.1 (includes 2.6.0 and 2.5.0))
• curl (8.2.1 (includes 8.2.0))
• gdbm (1.23)
• grub (2.06)
• intel-microcode (20230808 (includes 20230613))
• libarchive (3.7.1 (includes 3.7.0))
• libassuan (2.5.6)
• libksba (1.6.4)
• libmd (1.1.0)
• libuv (1.46.0 (includes 1.45.0))
• lsof (4.98.0)
• open-isns (0.102)
• openldap (2.6.3 (includes 2.6))
• parted (3.6)
• psmisc (23.6)
• qemu guest agent (8.0.3)
• quota (4.09)
• runc (1.1.9)
• vim (9.0.1678 (includes 9.0.1677))
• xfsprogs (6.3.0)
• VMware: open-vm-tools (12.3.0)
• SDK: portage (3.0.49)
• SDK: Rust (1.72.0 (includes 1.71.1))
• SDK: qemu (8.0.3)

stable-3510.2.6

Changes since Stable 3510.2.5

Security fixes:

• Linux (CVE-2022-48502, CVE-2023-20593, CVE-2023-2898, CVE-2023-31248, CVE-2023-35001, CVE-2023-3611, CVE-2023-3776, CVE-2023-38432, CVE-2023-3863)
• linux-firmware (CVE-2023-20593)

Updates:

• Linux (5.15.122 (includes 5.15.121, 5.15.120))
• ca-certificates (3.92)
• linux-firmware (20230625)

lts-3033.3.16

Changes since LTS 3033.3.15

Security fixes:

• Linux (CVE-2023-20593, CVE-2023-2898, CVE-2023-31248, CVE-2023-3390, CVE-2023-35001, CVE-2023-3610, CVE-2023-3611, CVE-2023-3776, CVE-2023-3863)
• linux-firmware (CVE-2023-20593)

Updates:

• Linux (5.10.188 (includes 5.10.187))
• ca-certificates (3.92)
• linux-firmware (20230625)

beta-3602.1.4

Changes since Beta 3602.1.3

Security fixes:

• Linux (CVE-2022-48502, CVE-2023-20593, CVE-2023-2898, CVE-2023-31248, CVE-2023-35001, CVE-2023-3611, CVE-2023-3776, CVE-2023-38432, CVE-2023-3863)
• OpenSSH (CVE-2023-38408)
• linux-firmware (CVE-2023-20593)

Updates:

• Linux (5.15.124 (includes 5.15.123, 5.15.122, 5.15.121))
• ca-certificates (3.92)
• linux-firmware (20230625)