Announcing new Alpha release 3139.0.0, Beta release 3066.1.2, Stable release 3033.2.2

[Flatcar Container Linux User]

Hello,

We are pleased to announce a new Flatcar Container Linux major release for the Alpha channel, and maintenance releases for Beta and Stable.

New Alpha Release 3139.0.0

Changes since Alpha 3127.0.0

Security fixes

• Linux (CVE-2021-43976, CVE-2022-0330, CVE-2022-22942)
• expat (CVE-2022-23852, CVE-2022-23990)
• glibc (CVE-2021-3998, CVE-2021-3999, CVE-2022-23218, CVE-2022-23219)
• polkit (CVE-2021-4034)
• SDK: Rust (CVE-2022-21658)

Bug fixes

• network: Accept ICMPv6 Router Advertisements to fix IPv6 address assignment in the default DHCP setting (flatcar-linux/init#51, flatcar-linux/cloudinit#12, flatcar-linux/bootengine#30)
• flatcar-update: Stopped checking for the USER environment variable which may not be set in all environments, causing the script to fail unless a workaround was used like prepending an additional sudo invocation (flatcar-linux/init#58)

Changes

• Enabled the FIPS support for the Linux kernel, which users can now choose through a kernel parameter in grub.cfg (check it taking effect with cat /proc/sys/crypto/fips_enabled) (flatcar-linux/coreos-overlay#1602)

Updates

• Linux (5.15.19) (from 5.15.16)
• expat (2.4.4)
• polkit (0.120)
• sbsigntools (0.9.4)
• SDK: Rust (1.58.1)

New Beta Release 3066.1.2

Changes since Beta 3066.1.1

Security fixes

• Linux (CVE-2021-43976, CVE-2022-0330, CVE-2022-22942)
• expat (CVE-2022-23852, CVE-2022-23990)
• glibc (CVE-2021-3998, CVE-2021-3999, CVE-2022-23218, CVE-2022-23219)
• polkit (CVE-2021-4034)

Bug fixes

• SDK: Fixed build error popping up in the new SDK Container because policycoreutils used the wrong ROOT to update the SELinux store (flatcar-linux/coreos-overlay#1502)
• Fixed leak of SELinux policy store to the root filesystem top directory due to wrong store path in policycoreutils instead of /var/lib/selinux (flatcar-linux/Flatcar#596)

Updates

• Linux (5.10.96) (from 5.10.93)
• Linux Firmware (20211216)
• expat (2.4.4)

New Stable Release 3033.2.2

Changes since Stable 3033.2.1

Security fixes

• Linux (CVE-2021-43976, CVE-2022-0330, CVE-2022-22942)
• expat (CVE-2022-23852, CVE-2022-23990)
• glibc (CVE-2021-3998, CVE-2021-3999, CVE-2022-23218, CVE-2022-23219)
• polkit (CVE-2021-4034)

Bug fixes

• SDK: Fixed build error popping up in the new SDK Container because policycoreutils used the wrong ROOT to update the SELinux store (flatcar-linux/coreos-overlay#1502)
• Fixed leak of SELinux policy store to the root filesystem top directory due to wrong store path in policycoreutils instead of /var/lib/selinux (flatcar-linux/Flatcar#596)

Updates

• Linux (5.10.96) (from 5.10.93)
• Linux Firmware (20211216)
• expat (2.4.4)

Best,
The Flatcar Container Linux Maintainers