alpha-3602.0.0

Changes since Alpha 3572.0.1

Security fixes:

• Linux (CVE-2023-1380, CVE-2023-2002, CVE-2023-31436)
• Go (CVE-2023-24539, CVE-2023-24540, CVE-2023-29400)
• OpenSSH (CVE-2023-28531)
• OpenSSL (CVE-2023-0464, CVE-2023-0465, CVE-2023-0466, CVE-2023-1255)
• bash (CVE-2022-3715)
• c-ares (CVE-2022-4904)
• curl (CVE-2023-27533, CVE-2023-27534, CVE-2023-27535, CVE-2023-27536, CVE-2023-27537, CVE-2023-27538)
• libxml2 (CVE-2023-28484, CVE-2023-29469)

Bug fixes:

• Fixed a miscompilation of getfacl causing it to dump core when executed (scripts#809)
• Restored the reboot warning and delay for non-SSH console sessions (locksmith#21)

Changes:

• Changed coreos-cloudinit to now set the short hostname instead of the FQDN when fetched from the metadata service (coreos-cloudinit#19)

Updates:

• Linux (5.15.111 (includes 5.15.110, 5.15.109))
• bash (5.2)
• bpftool (6.2.1)
• c-ares (1.19.0)
• ca-certificates (3.89.1)
• containerd (1.6.21)
• curl (8.0.1)
• e2fsprogs (1.47.0)
• gdb (13.1.90)
• glib (2.74.6)
• go (1.19.9)
• libarchive (3.6.2)
• libxml2 (2.10.4)
• multipath-tools (0.9.4)
• openSSH (9.3)
• pinentry (1.2.1)
• readline (8.2)
• runc (1.1.7)
• sqlite (3.41.2)
• xz-utils (5.4.2)
• SDK: nano (7.2)