Announcing new Alpha 3374.0.0, Beta 3346.1.0

[Flatcar Container Linux User]

Hello,
We are pleased to announce a new Flatcar Container Linux release for the Alpha and Beta channel.

New Alpha Release 3374.0.0

Changes since Alpha 3346.0.0

Security fixes:

• Linux (CVE-2022-0171, CVE-2022-2663, CVE-2022-2905, CVE-2022-3028, CVE-2022-3061, CVE-2022-3176, CVE-2022-3303, CVE-2022-39190, CVE-2022-39842, CVE-2022-40307)
• Go (CVE-2022-27664, CVE-2022-32190)
• Docker (CVE-2022-36109)
• expat (CVE-2022-40674)
• intel-microcode (CVE-2022-21233)
• GNU Libtasn1 (Gentoo#866237)
• libxml2 (CVE-2016-3709, CVE-2022-2309)
• polkit (CVE-2021-4115)
• rsync (CVE-2022-29154)
• unzip (CVE-2022-0529, CVE-2022-0530, CVE-2021-4217)
• zlib (CVE-2022-37434)

Bug fixes:

• Added back gettext to the OS (Flatcar#849)
• Added merging of Ignition systemd duplicated units when auto-translating from Ignition 2 to Ignition 3. (coreos-overlay#2187)
• Equinix Metal: Fixed serial console settings for the m3.small.x86 instance by expanding the GRUB check for i386 to x86_64 (coreos-overlay#2122)

Changes:

• emerge-gitclone: Migrate emerge-gitclone to use scripts repo tags and submodule refs

Updates:

• Linux (5.15.70 (includes 5.15.69, 5.15.68, 5.15.67, 5.15.66, 5.15.65, 5.15.64))
• Linux Firmware (20220913)
• Go (1.18.6)
• ca-certificates (3.83)
• Docker (20.10.18)
• expat (2.4.9)
• gettext (0.21)
• intel-microcode (20220809)
• GNU Libtasn1 (4.19.0)
• libxml2 (2.10.2)
• locksmith(0.7.0)
• polkit (121)
• rsync (3.2.6)
• runc (1.1.4)
• unzip (6.0_p27)
• SDK: libxslt (1.1.35)

New Beta Release 3346.1.0

Changes since Beta 3277.1.2

Security fixes:

• Linux (CVE-2022-0171, CVE-2022-2663, CVE-2022-2905, CVE-2022-3028, CVE-2022-3061, CVE-2022-3176, CVE-2022-3303, CVE-2022-39190, CVE-2022-39842, CVE-2022-40307)
• Go (CVE-2022-27664, CVE-2022-32190, (CVE-2022-32189))
• binutils (CVE-2021-45078)
• cifs-utils (CVE-2022-27239, CVE-2022-29869)
• curl (CVE-2022-32205, CVE-2022-32206, CVE-2022-32207, CVE-2022-32208)
• expat (CVE-2022-40674)
• git (CVE-2022-29187)
• gnupg (CVE-2022-34903)
• gnutls (CVE-2022-2509)
• libtirpc (CVE-2021-46828)
• oniguruma (oniguruma-20220430)
• open-vm-tools (CVE-2022-31676)
• shadow (CVE-2013-4235)
• vim (CVE-2022-0629, CVE-2022-0685, CVE-2022-0714, CVE-2022-0729, CVE-2022-0943, CVE-2022-1154, CVE-2022-1160, CVE-2022-1381, CVE-2022-1420, CVE-2022-1616, CVE-2022-1619, CVE-2022-1620, CVE-2022-1621, CVE-2022-1629, CVE-2022-1674, CVE-2022-1733, CVE-2022-1735, CVE-2022-1769, CVE-2022-1771, CVE-2022-1785, CVE-2022-1796, CVE-2022-1897, CVE-2022-1898, CVE-2022-1886, CVE-2022-1851, CVE-2022-1927, CVE-2022-1942, CVE-2022-1968, CVE-2022-2000)

Bug fixes:

• Added back gettext to the OS (Flatcar#849)
• Added merging of Ignition systemd duplicated units when auto-translating from Ignition 2 to Ignition 3. (coreos-overlay#2187)
• Equinix Metal: Fixed serial console settings for the m3.small.x86 instance by expanding the GRUB check for i386 to x86_64 (coreos-overlay#2122)
• Removed outdated LTS channel information printed on login (init#75)

Changes:

• Added symlink from nc to ncat. -q option is not yet supported (flatcar#545)
• emerge-gitclone: Migrate emerge-gitclone to use scripts repo tags and submodule refs

Updates:

• Linux (5.15.70 (includes 5.15.69, 5.15.68, 5.15.67, 5.15.66, 5.15.65, 5.15.64, 5.15.51))
• Linux Firmware (20220815 (includes 20220708))
• Go (1.18.6)
• adcli (0.9.1)
• automake (1.16.5)
• binutils (2.38)
• bison (3.8.2)
• boost (1.79)
• ca-certificates (3.83)
• cifs-utils (6.15)
• containerd (1.6.8 (includes 1.6.7))
• curl (7.84.0)
• Cyrus SASL (2.1.28)
• expat (2.4.9)
• gcc (11.3.0)
• gdb (11.2)
• gettext (0.21)
• git (2.37.1)
• glib (2.72.3)
• gnupg (2.2.35)
• gnutls (3.7.7)
• libtool (2.4.7)
• locksmith(0.7.0)
• oniguruma (6.9.8)
• perl (5.34.1)
• pkgconf (1.8.0)
• shadow (4.12.3)
• sudo (1.9.10)
• vim (8.2.5066)
• SDK: Rust (1.63.0 (includes 1.62.1, 1.62.0))
• VMware: open-vm-tools (12.1.0)

Changes since Alpha 3346.0.0

Security fixes:

• Linux (CVE-2022-0171, CVE-2022-2663, CVE-2022-2905, CVE-2022-3028, CVE-2022-3061, CVE-2022-3176, CVE-2022-3303, CVE-2022-39190, CVE-2022-39842, CVE-2022-40307)
• Go (CVE-2022-27664, CVE-2022-32190)
• expat (CVE-2022-40674)

Bug fixes:

• Added back gettext to the OS (Flatcar#849)
• Added merging of Ignition systemd duplicated units when auto-translating from Ignition 2 to Ignition 3. (coreos-overlay#2187)
• Equinix Metal: Fixed serial console settings for the m3.small.x86 instance by expanding the GRUB check for i386 to x86_64 (coreos-overlay#2122)

Changes:

• emerge-gitclone: Migrate emerge-gitclone to use scripts repo tags and submodule refs

Updates:

• Linux (5.15.70 (includes 5.15.69, 5.15.68, 5.15.67, 5.15.66, 5.15.65, 5.15.64))
• Go (1.18.6)
• ca-certificates (3.83)
• gettext (0.21)
• locksmith(0.7.0)
• expat (2.4.9)

Best,
The Flatcar Container Linux Maintainers