flatcar/scripts stable-4757.2.3

on GitHub

Changes since Stable 4757.2.2

Security fixes:

• Linux (CVE-2026-99092, CVE-2026-99098, CVE-2026-99082, CVE-2026-99085, CVE-2026-99083, CVE-2026-99019, CVE-2026-99044, CVE-2026-99041, CVE-2026-99014, CVE-2026-99028, CVE-2026-99027, CVE-2026-98974, CVE-2026-98981, CVE-2026-99009, CVE-2026-98977, CVE-2026-99002, CVE-2026-98993, CVE-2026-98985, CVE-2026-98975, CVE-2026-98916)

Changes:

• The system CA bundle now only contains roots that Mozilla trusts for TLS. The 49 roots that Mozilla trusts only for S/MIME (email) were removed from /etc/ssl/certs and ca-certificates.crt, reducing the bundle from 167 to 118 roots. (scripts#4333)

Updates:

• Linux (6.12.114)
• ca-certificates (3.132)