Changes since Alpha 3305.0.1
Security fixes:
- Linux (CVE-2022-1679, CVE-2022-2585, CVE-2022-2586, CVE-2022-2588, CVE-2022-26373, CVE-2022-36946)
- Go (CVE-2022-32189)
- binutils (CVE-2021-45078)
- git (CVE-2022-29187)
- gnutls (CVE-2022-2509)
- libtirpc (CVE-2021-46828)
- oniguruma (oss-fuzz issues fixed 2022-04-30)
- shadow (CVE-2013-4235)
- vim (CVE-2022-0629, CVE-2022-0685, CVE-2022-0714, CVE-2022-0729, CVE-2022-0943, CVE-2022-1154, CVE-2022-1160, CVE-2022-1381, CVE-2022-1420, CVE-2022-1616, CVE-2022-1619, CVE-2022-1620, CVE-2022-1621, CVE-2022-1629, CVE-2022-1674, CVE-2022-1733, CVE-2022-1735, CVE-2022-1769, CVE-2022-1771, CVE-2022-1785, CVE-2022-1796, CVE-2022-1897, CVE-2022-1898, CVE-2022-1886, CVE-2022-1851, CVE-2022-1927, CVE-2022-1942, CVE-2022-1968, CVE-2022-2000)
- VMware: open-vm-tools (CVE-2022-31676)
Bug fixes:
- AWS: added EKS support for version 1.22 and 1.23. (coreos-overlay#2110, Flatcar#829)
- VMWare: excluded
wireguard
(and others) fromsystemd-networkd
management. (init#80)
Changes:
- Added symlink from
nc
toncat
.-q
option is not yet supported (flatcar#545) - The new image signing subkey was added to the public key embedded into
flatcar-install
(the old expired on 10th August 2022), only an updatedflatcar-install
script can verify releases signed with the new key (init#79) - AWS: Added AWS IMDSv2 support to coreos-cloudinit (flatcar-linux/coreos-cloudinit#13)
Updates:
- Linux (5.15.63 (includes 5.15.62, 5.15.61, 5.15.60, 5.15.59)
- Linux Firmware (20220815)
- binutils (2.38)
- boost (1.79)
- ca-certificates (3.82)
- containerd (1.6.8)
- Cyrus SASL (2.1.28)
- gcc (11.3.0)
- git (2.37.1)
- glib (2.72.3)
- gnutls (3.7.7)
- oniguruma (6.9.8)
- shadow (4.12.3)
- vim (8.2.5066)
- SDK: automake (1.16.5)
- SDK: bison (3.8.2)
- SDK: libtool (2.4.7)
- SDK: perl (5.34.1)
- SDK: pkgconf (1.8.0)
- SDK: Rust (1.63.0)
- VMware: open-vm-tools (12.1.0)