Changes since Alpha 3572.0.1
Security fixes:
- Linux (CVE-2023-1380, CVE-2023-2002, CVE-2023-31436)
- Go (CVE-2023-24539, CVE-2023-24540, CVE-2023-29400)
- OpenSSH (CVE-2023-28531)
- OpenSSL (CVE-2023-0464, CVE-2023-0465, CVE-2023-0466, CVE-2023-1255)
- bash (CVE-2022-3715)
- c-ares (CVE-2022-4904)
- curl (CVE-2023-27533, CVE-2023-27534, CVE-2023-27535, CVE-2023-27536, CVE-2023-27537, CVE-2023-27538)
- libxml2 (CVE-2023-28484, CVE-2023-29469)
Bug fixes:
- Fixed a miscompilation of getfacl causing it to dump core when executed (scripts#809)
- Restored the reboot warning and delay for non-SSH console sessions (locksmith#21)
Changes:
- Changed coreos-cloudinit to now set the short hostname instead of the FQDN when fetched from the metadata service (coreos-cloudinit#19)
Updates:
- Linux (5.15.111 (includes 5.15.110, 5.15.109))
- bash (5.2)
- bpftool (6.2.1)
- c-ares (1.19.0)
- ca-certificates (3.89.1)
- containerd (1.6.21)
- curl (8.0.1)
- e2fsprogs (1.47.0)
- gdb (13.1.90)
- glib (2.74.6)
- go (1.19.9)
- libarchive (3.6.2)
- libxml2 (2.10.4)
- multipath-tools (0.9.4)
- openSSH (9.3)
- pinentry (1.2.1)
- readline (8.2)
- runc (1.1.7)
- sqlite (3.41.2)
- xz-utils (5.4.2)
- SDK: nano (7.2)