flatcar/scripts beta-3760.1.0

on GitHub

⚠️ From Alpha 3794.0.0 Torcx has been removed - please assert that you don't rely on specific Torcx mechanism but now use systemd-sysext. See here for more information.

Changes since Beta 3745.1.0

Security fixes:

• Linux (CVE-2023-35827, CVE-2023-46813, CVE-2023-46862, CVE-2023-5178, CVE-2023-5717)
• curl (CVE-2023-38545, CVE-2023-38546)
• glibc (CVE-2023-4911)
• go (CVE-2023-39325, CVE-2023-39325)
• grub (CVE-2023-4692, CVE-2023-4693)
• libtirpc (libtirpc-rhbg-2138317, libtirpc-rhbg-2150611, libtirpc-rhbg-2224666)

Bug fixes:

• Added AWS EKS support for versions 1.24-1.28. Fixed /usr/share/amazon/eks/download-kubelet.sh to include download paths for these versions. (scripts#1210)
• Fixed iterating over the OEM update payload signatures which prevented the AWS OEM update to 3745.x.y (update-engine#31)
• Fixed quotes handling for update-engine (Flatcar#1209)
• Made sshkeys.service more robust to only run coreos-metadata-sshkeys@core.service when not masked and also retry on failure (init#112)

Changes:

• Brightbox: The regular OpenStack image should now be used, it includes Afterburn for instance metadata attributes
• OpenStack: An uncompressed image is provided for simpler import (since the images use qcow2 inline compression, there is no benefit in using the .gz or .bz2 images)

Updates:

• Go (1.20.10 (includes 1.20.9))
• Linux (6.1.62 (includes 6.1.61, 6.1.60 and includes 6.1.59))
• containerd (1.7.7)
• curl (8.4.0)
• libnl (3.8.0)
• libtirpc (1.3.4)
• libxml2 (2.11.5)
• openssh (9.5p1)
• pigz (2.8)
• strace(6.4)
• whois (5.5.18)

Changes since Alpha 3760.0.0

Security fixes:

• Linux (CVE-2023-35827, CVE-2023-46813, CVE-2023-46862, CVE-2023-5178, CVE-2023-5717)

Bug fixes:

• Fixed iterating over the OEM update payload signatures which prevented the AWS OEM update to 3745.x.y (update-engine#31)
• Made sshkeys.service more robust to only run coreos-metadata-sshkeys@core.service when not masked and also retry on failure (init#112)

Changes:

• Brightbox: The regular OpenStack image should now be used, it includes Afterburn for instance metadata attributes
• OpenStack: An uncompressed image is provided for simpler import (since the images use qcow2 inline compression, there is no benefit in using the .gz or .bz2 images)

Updates:

• Linux (6.1.62 (includes 6.1.61, 6.1.60 and includes 6.1.59))