flatcar/scripts lts-4081.3.12

on GitHub

Changes since LTS 4081.3.11

Security fixes:

• Linux (CVE-2026-99095, CVE-2026-99091, CVE-2026-99090, CVE-2026-99088, CVE-2026-99089, CVE-2026-99082, CVE-2026-99083, CVE-2026-99049, CVE-2026-99058, CVE-2026-99057, CVE-2026-99056, CVE-2026-99054, CVE-2026-99053, CVE-2026-99081, CVE-2026-99080, CVE-2026-99079, CVE-2026-99052, CVE-2026-99078, CVE-2026-99074, CVE-2026-99072, CVE-2026-99071, CVE-2026-99070, CVE-2026-99067, CVE-2026-99063, CVE-2026-99061, CVE-2026-99060, CVE-2026-99059, CVE-2026-99012, CVE-2026-99020, CVE-2026-99019, CVE-2026-99045, CVE-2026-99043, CVE-2026-99015, CVE-2026-99041, CVE-2026-99040, CVE-2026-99039, CVE-2026-99038, CVE-2026-99037, CVE-2026-99036, CVE-2026-99035, CVE-2026-99034, CVE-2026-99033, CVE-2026-99032, CVE-2026-99014, CVE-2026-99031, CVE-2026-99027, CVE-2026-99025, CVE-2026-99024, CVE-2026-99022, CVE-2026-98981, CVE-2026-98979, CVE-2026-99010, CVE-2026-99009, CVE-2026-99008, CVE-2026-99007, CVE-2026-99006, CVE-2026-99005, CVE-2026-98977, CVE-2026-99002, CVE-2026-98993, CVE-2026-98992, CVE-2026-98990, CVE-2026-98985, CVE-2026-98984, CVE-2026-98943, CVE-2026-98950, CVE-2026-98948, CVE-2026-98971, CVE-2026-98970, CVE-2026-98969, CVE-2026-98968, CVE-2026-98967, CVE-2026-98964, CVE-2026-98945, CVE-2026-98959, CVE-2026-98956, CVE-2026-98955, CVE-2026-98944, CVE-2026-98931, CVE-2026-98940, CVE-2026-98936, CVE-2026-98935, CVE-2026-98934, CVE-2026-98933, CVE-2026-98916)

Changes:

• The system CA bundle now only contains roots that Mozilla trusts for TLS. The 49 roots that Mozilla trusts only for S/MIME (email) were removed from /etc/ssl/certs and ca-certificates.crt, reducing the bundle from 167 to 118 roots. (scripts#4333)

Updates:

• Linux (6.6.160)
• ca-certificates (3.132)