# Flatcar Container Linux Release - 10th November 2025

## Alpha 4515.0.0

- AMD64-usr
- Platforms succeeded: all
- Platforms failed: none
- Platforms not tested: none
- ARM64-usr
- Platforms succeeded: all
- Platforms failed: none
- Platforms not tested: Equinix Metal

## Beta 4459.1.1

- AMD64-usr
- Platforms succeeded: all
- Platforms failed: none
- Platforms not tested: none
- ARM64-usr
- Platforms succeeded: all
- Platforms failed: none
- Platforms not tested: Equinix Metal

## Stable 4459.2.0

- AMD64-usr
- Platforms succeeded: all
- Platforms failed: none
- Platforms not tested: none
- ARM64-usr
- Platforms succeeded: all
- Platforms failed: none
- Platforms not tested: Equinix Metal

VERDICT: _GO_

## Communication

---

#### Guidelines / Things to Remember

- Release notes are used in a PR and will appear on https://www.flatcar.org/releases/
- [Announcement Message](#Announcement-Message) is posted in [Flatcar-Linux-user](https://groups.google.com/g/flatcar-linux-user). Make sure to post as “Flatcar Container Linux User”, not with your personal user (this can be selected when drafting the post).
- Make sure the the LTS is referred to as `LTS-2021`, and not `LTS-2605`
---

### Announcement Message

Subject: Announcing new releases Alpha 4515.0.0, Beta 4459.1.1 and Stable 4459.2.0

Hello,
We are pleased to announce a new Flatcar Container Linux release for the Alpha, Beta and Stable channel.

#### Stable 4459.2.0 release

_Changes since **Stable 4230.2.4**_

#### Security fixes:

- VMWare: open-vm-tools ([CVE-2025-22247](https://www.cve.org/CVERecord/?id=CVE-2025-22247))
- afterburn ([CVE-2025-0977](https://www.cve.org/CVERecord/?id=CVE-2025-0977), [CVE-2025-3416](https://www.cve.org/CVERecord?id=CVE-2025-3416))
- bind ([CVE-2024-11187](https://www.cve.org/CVERecord?id=CVE-2024-11187), [CVE-2024-12705](https://www.cve.org/CVERecord?id=CVE-2024-12705))
- binutils ([CVE-2024-53589](https://nvd.nist.gov/vuln/detail/CVE-2024-53589), [CVE-2025-1176](https://nvd.nist.gov/vuln/detail/CVE-2025-1176), [CVE-2025-1178](https://nvd.nist.gov/vuln/detail/CVE-2025-1178), [CVE-2025-1179](https://nvd.nist.gov/vuln/detail/CVE-2025-1179), [CVE-2025-1180](https://nvd.nist.gov/vuln/detail/CVE-2025-1180), [CVE-2025-1181](https://nvd.nist.gov/vuln/detail/CVE-2025-1181), [CVE-2025-1182](https://nvd.nist.gov/vuln/detail/CVE-2025-1182))
- c-ares ([CVE-2025-31498](https://www.cve.org/CVERecord?id=CVE-2025-31498))
- cifs-utils ([CVE-2025-2312](https://nvd.nist.gov/vuln/detail/CVE-2025-2312))
- containerd ([CVE-2024-25621](https://www.cve.org/CVERecord?id=CVE-2024-25621), [CVE-2025-64329](https://www.cve.org/CVERecord?id=CVE-2025-64329), [CVE-2024-40635](https://www.cve.org/CVERecord?id=CVE-2024-40635), [CVE-2025-47291](https://www.cve.org/CVERecord?id=CVE-2025-47291))
- crun ([CVE-2025-24965](https://nvd.nist.gov/vuln/detail/CVE-2025-24965))
- curl ([CVE-2025-0167](https://nvd.nist.gov/vuln/detail/CVE-2025-0167), [CVE-2025-0665](https://nvd.nist.gov/vuln/detail/CVE-2025-0665), [CVE-2025-0725](https://nvd.nist.gov/vuln/detail/CVE-2025-0725), [curl-20250205](https://github.com/curl/curl/issues/16197))
- expat ([CVE-2024-8176](https://nvd.nist.gov/vuln/detail/CVE-2024-8176))
- git ([CVE-2024-50349](https://nvd.nist.gov/vuln/detail/CVE-2024-50349), [CVE-2024-52005](https://nvd.nist.gov/vuln/detail/CVE-2024-52005), [CVE-2024-52006](https://nvd.nist.gov/vuln/detail/CVE-2024-52006), [CVE-2025-48384](https://www.cve.org/CVERecord?id=CVE-2025-48384), [CVE-2025-48385](https://www.cve.org/CVERecord?id=CVE-2025-48385), [CVE-2025-48386](https://www.cve.org/CVERecord?id=CVE-2025-48386))
- glib ([CVE-2024-52533](https://nvd.nist.gov/vuln/detail/CVE-2024-52533), [CVE-2025-4373](https://www.cve.org/CVERecord?id=CVE-2025-4373), ([CVE-2025-7039](https://www.cve.org/CVERecord?id=CVE-2025-7039))
- glibc ([CVE-2025-0395](https://nvd.nist.gov/vuln/detail/CVE-2025-0395), [CVE-2025-8058](https://www.cve.org/CVERecord?id=CVE-2025-8058))
- gnutls ([CVE-2024-12243](https://nvd.nist.gov/vuln/detail/CVE-2024-12243), [CVE-2025-32988](https://www.cve.org/CVERecord?id=CVE-2025-32988), [CVE-2025-32989](https://www.cve.org/CVERecord?id=CVE-2025-32989), [CVE-2025-32990](https://www.cve.org/CVERecord?id=CVE-2025-32990), [CVE-2025-6395](https://www.cve.org/CVERecord?id=CVE-2025-6395))
- go ([CVE-2025-22871](https://www.cve.org/CVERecord?id=CVE-2025-22871), [CVE-2025-22873](https://www.cve.org/CVERecord?id=CVE-2025-22873), [CVE-2025-4673](https://www.cve.org/CVERecord?id=CVE-2025-4673), [CVE-2025-0913](https://www.cve.org/CVERecord?id=CVE-2025-0913), [CVE-2025-22874](https://www.cve.org/CVERecord?id=CVE-2025-22874), [CVE-2025-4674](https://www.cve.org/CVERecord?id=CVE-2025-4674), [CVE-2025-47906](https://www.cve.org/CVERecord?id=CVE-2025-47906), [CVE-2025-47907](https://www.cve.org/CVERecord?id=CVE-2025-47907))
- intel-microcode ([CVE-2023-34440](https://nvd.nist.gov/vuln/detail/CVE-2023-34440), [CVE-2023-43758](https://nvd.nist.gov/vuln/detail/CVE-2023-43758), [CVE-2024-24582](https://nvd.nist.gov/vuln/detail/CVE-2024-24582), [CVE-2024-28047](https://nvd.nist.gov/vuln/detail/CVE-2024-28047), [CVE-2024-28127](https://nvd.nist.gov/vuln/detail/CVE-2024-28127), [CVE-2024-29214](https://nvd.nist.gov/vuln/detail/CVE-2024-29214), [CVE-2024-31157](https://nvd.nist.gov/vuln/detail/CVE-2024-31157), [CVE-2024-39279](https://nvd.nist.gov/vuln/detail/CVE-2024-39279), [CVE-2024-31068](https://nvd.nist.gov/vuln/detail/CVE-2024-31068), [CVE-2024-36293](https://nvd.nist.gov/vuln/detail/CVE-2024-36293), [CVE-2024-37020](https://nvd.nist.gov/vuln/detail/CVE-2024-37020), [CVE-2024-39355](https://nvd.nist.gov/vuln/detail/CVE-2024-39355))
- iperf ([CVE-2024-53580](https://www.cve.org/CVERecord?id=CVE-2024-53580), [CVE-2025-54349](https://www.cve.org/CVERecord?id=CVE-2025-54349), [CVE-2025-54350](https://www.cve.org/CVERecord?id=CVE-2025-54350), [CVE-2025-54351](https://www.cve.org/CVERecord?id=CVE-2025-54351))
- jq ([CVE-2024-23337](https://www.cve.org/CVERecord?id=CVE-2024-23337), [CVE-2024-53427](https://www.cve.org/CVERecord?id=CVE-2024-53427), [CVE-2025-48060](https://www.cve.org/CVERecord?id=CVE-2025-48060))
- libarchive ([CVE-2024-57970](https://nvd.nist.gov/vuln/detail/CVE-2024-57970), [CVE-2025-25724](https://nvd.nist.gov/vuln/detail/CVE-2025-25724))
- libcap ([CVE-2025-1390](https://nvd.nist.gov/vuln/detail/CVE-2025-1390))
- libtasn1 ([CVE-2024-12133](https://nvd.nist.gov/vuln/detail/CVE-2024-12133))
- libxml2 ([CVE-2024-56171](https://nvd.nist.gov/vuln/detail/CVE-2024-56171), [CVE-2025-24928](https://nvd.nist.gov/vuln/detail/CVE-2025-24928), [CVE-2025-27113](https://nvd.nist.gov/vuln/detail/CVE-2025-27113), [CVE-2025-32414](https://www.cve.org/CVERecord?id=CVE-2025-32414), [CVE-2025-32415](https://www.cve.org/CVERecord?id=CVE-2025-32415), [CVE-2025-49794](https://www.cve.org/CVERecord?id=CVE-2025-49794), [CVE-2025-49795](https://www.cve.org/CVERecord?id=CVE-2025-49795), [CVE-2025-49796](https://www.cve.org/CVERecord?id=CVE-2025-49796))
- libxslt ([CVE-2025-24855](https://nvd.nist.gov/vuln/detail/CVE-2025-24855), [CVE-2024-55549](https://nvd.nist.gov/vuln/detail/CVE-2024-55549))
- mit-krb5 ([CVE-2025-24528](https://nvd.nist.gov/vuln/detail/CVE-2025-24528))
- nvidia-drivers ([CVE-2025-23277](https://www.cve.org/CVERecord?id=CVE-2025-23277), [CVE-2025-23278](https://www.cve.org/CVERecord?id=CVE-2025-23278), [CVE-2025-23279](https://www.cve.org/CVERecord?id=CVE-2025-23279), [CVE-2025-23286](https://www.cve.org/CVERecord?id=CVE-2025-23286))
- nvidia-drivers-service ([CVE-2025-23244](https://www.cve.org/CVERecord?id=CVE-2025-23244))
- openssh ([CVE-2025-26465](https://nvd.nist.gov/vuln/detail/CVE-2025-26465), [CVE-2025-26466](https://nvd.nist.gov/vuln/detail/CVE-2025-26466))
- openssl ([CVE-2024-12797](https://nvd.nist.gov/vuln/detail/CVE-2024-12797), [CVE-2024-13176](https://nvd.nist.gov/vuln/detail/CVE-2024-13176))
- perl ([CVE-2024-56406](https://www.cve.org/CVERecord?id=CVE-2024-56406))
- podman ([CVE-2024-11218](https://nvd.nist.gov/vuln/detail/CVE-2024-11218), [CVE-2025-6032](https://www.cve.org/CVERecord?id=CVE-2025-6032))
- python ([CVE-2025-0938](https://www.cve.org/CVERecord?id=CVE-2025-0938), [CVE-2025-4516](https://www.cve.org/CVERecord?id=CVE-2025-4516), [CVE-2024-12718](https://www.cve.org/CVERecord?id=CVE-2024-12718), [CVE-2025-4138](https://www.cve.org/CVERecord?id=CVE-2025-4138), [CVE-2025-4330](https://www.cve.org/CVERecord?id=CVE-2025-4330), [CVE-2025-4517](https://www.cve.org/CVERecord?id=CVE-2025-4517), [CVE-2025-6069](https://www.cve.org/CVERecord?id=CVE-2025-6069), [CVE-2025-8194](https://www.cve.org/CVERecord?id=CVE-2025-8194))
- requests ([CVE-2024-47081](https://www.cve.org/CVERecord?id=CVE-2024-47081))
- rsync ([CVE-2024-12084](https://nvd.nist.gov/vuln/detail/CVE-2024-12084), [CVE-2024-12085](https://nvd.nist.gov/vuln/detail/CVE-2024-12085), [CVE-2024-12086](https://nvd.nist.gov/vuln/detail/CVE-2024-12086), [CVE-2024-12087](https://nvd.nist.gov/vuln/detail/CVE-2024-12087), [CVE-2024-12088](https://nvd.nist.gov/vuln/detail/CVE-2024-12088), [CVE-2024-12747](https://nvd.nist.gov/vuln/detail/CVE-2024-12747))
- runc ([CVE-2025-31133](https://www.cve.org/CVERecord?id=CVE-2025-31133), [CVE-2025-52565](https://www.cve.org/CVERecord?id=CVE-2025-52565), [CVE-2025-52881](https://www.cve.org/CVERecord?id=CVE-2025-52881))
- socat ([CVE-2024-54661](https://nvd.nist.gov/vuln/detail/CVE-2024-54661), [socat-20250221](https://repo.or.cz/socat.git/blob/refs/tags/tag-1.8.0.3:/CHANGES#l4))
- vim ([CVE-2024-41957](https://nvd.nist.gov/vuln/detail/CVE-2024-41957), [CVE-2024-41965](https://nvd.nist.gov/vuln/detail/CVE-2024-41965), [CVE-2024-43374](https://nvd.nist.gov/vuln/detail/CVE-2024-43374), [CVE-2024-43790](https://nvd.nist.gov/vuln/detail/CVE-2024-43790), [CVE-2024-43802](https://nvd.nist.gov/vuln/detail/CVE-2024-43802), [CVE-2024-45306](https://nvd.nist.gov/vuln/detail/CVE-2024-45306), [CVE-2024-47814](https://nvd.nist.gov/vuln/detail/CVE-2024-47814), [CVE-2025-1215](https://www.cve.org/CVERecord?id=CVE-2025-1215), [CVE-2025-22134](https://www.cve.org/CVERecord?id=CVE-2025-22134), [CVE-2025-24014](https://www.cve.org/CVERecord?id=CVE-2025-24014), [GHSA-63p5-mwg2-787v](https://github.com/vim/vim/security/advisories/GHSA-63p5-mwg2-787v), [CVE-2025-27423](https://www.cve.org/CVERecord?id=CVE-2025-27423), [CVE-2025-29768](https://www.cve.org/CVERecord?id=CVE-2025-29768), [CVE-2025-53905](https://www.cve.org/CVERecord?id=CVE-2025-53905), [CVE-2025-53906](https://www.cve.org/CVERecord?id=CVE-2025-53906), [CVE-2025-9390](https://www.cve.org/CVERecord?id=CVE-2025-9390))
- xz-utils ([CVE-2025-31115](https://www.cve.org/CVERecord?id=CVE-2025-31115))

#### Bug fixes:

- Enabled `CONFIG_CPUSETS_V1` to mitigate cgroupsv1 removal (e.g JVM) ([Flatcar#1884](https://github.com/flatcar/Flatcar/issues/1884))
- Enabled `CONFIG_MEMCG_V1` to mitigate cgroupsv1 removal (e.g JVM) ([Flatcar#1884](https://github.com/flatcar/Flatcar/issues/1884))
- Excluded TUN/TAP interfaces from the default DHCP network configuration to solve conflicts with the programs that created them ([Flatcar#1933](https://github.com/flatcar/Flatcar/issues/1933))
- Fix non-conforming GPT partition table ([Flatcar#1651](https://github.com/flatcar/Flatcar/issues/1651))
- Fixed Intel microcode updates which were broken in recent Alpha and Beta releases by switching back to built-in extra firmware instead of early cpio inclusion ([Flatcar#1909](https://github.com/flatcar/Flatcar/issues/1909))
- Fixed a UID/GID mis-alignment for user/group `messagebus` between acct-user/acct-group and baselayout. ([baselayout#36](https://github.com/flatcar/baselayout/pull/36))
- Fixed path handling in the QEMU .sh launcher scripts. Given paths now are relative to the current directory and absolute paths work as you would expect.
- Fixed race condition in the script that grows the root partition to fill the disk. This bug sometimes caused the operation to not occur. ([init#132](https://github.com/flatcar/init/pull/132))
- Fixed that the needed Flatcar extensions don't get removed on update which caused a re-download ([update_engine#51](https://github.com/flatcar/update_engine/pull/51))
- Reenabled console support for DRM drivers, so that with the virtio graphics driver the interactive console is shown again after boot ([Flatcar#1834](https://github.com/flatcar/Flatcar/issues/1834))
- azure: Fixed issue of wa-linux-agent overriding ssh public key from ignition configuration during provisioning ([flatcar/Flatcar#1661](https://github.com/flatcar/Flatcar/issues/1661))
- sysext-podman: removed `/etc/subuid` and `/etc/subgid` generation for `core` user, before this change it partially overwrites the file and causes issues. ([Flatcar#1733](https://github.com/flatcar/Flatcar/issues/1733)) This could be created through initial provisioning. ([scripts#3043](https://github.com/flatcar/scripts/pull/3043))
- update-ssh-keys: More intuitive --help text and the -n (no-replace) option has been fixed. ([flatcar/Flatcar#1554](https://github.com/flatcar/Flatcar/issues/1554))

#### Changes:

- Added [overlaybd](https://containerd.github.io/overlaybd/) system extension to support accelerated container images. Add `overlaybd` to [`/etc/flatcar/enabled-sysext.conf`](https://www.flatcar.org/docs/latest/provisioning/sysext/) to check it out. The extension includes both [overlaybd](https://github.com/containerd/overlaybd/) as well as [accelerated-container-image](https://github.com/containerd/accelerated-container-image) tools.
- Added changes for our secureboot signed images with our signed release process until the official shim signing ([scripts#2754](https://github.com/flatcar/scripts/pull/2754/))
- Added `nftables-load.service` and `nftables-store.service` services to load/store rules from/in `/var/lib/nftables/rules-save` ([Flatcar#900](https://github.com/flatcar/Flatcar/issues/900))
- Added support for podman in `toolbox` ([toolbox#11](https://github.com/flatcar/toolbox/pull/11))
- Allow per-sysext USE flags and architecture-specific sysexts. ([scripts#2798](https://github.com/flatcar/scripts/pull/2798/))
- Always truncate hostnames on the first occurrence of `.` ([cloud-init#32](https://github.com/flatcar/coreos-cloudinit/pull/32))
- Azure OEM: add inotify-tools, python urllib3 ([flatcar/scripts#3116](https://github.com/flatcar/scripts/pull/3116))
- Build Intel iGPU i915 driver as module ([scripts#2349](https://github.com/flatcar/scripts/pull/2349))
- Compiled OS-dependent NVIDIA kernel module sysexts signed for secure boot. ([scripts#2798](https://github.com/flatcar/scripts/pull/2798/))
- Enabled CONFIG_INET_DIAG_DESTROY in kernel options ([flatcar/scripts#3176](https://github.com/flatcar/scripts/pull/3176))
- Enabled EROFS module with XATTR support ([Flatcar#1659](https://github.com/flatcar/Flatcar/issues/1659))
- Enabled virtiofs and fuse-dax modules in the kernel for advaned Qemu usecases. Thank you @aaronk6! ([Flatcar#2825](https://github.com/flatcar/scripts/pull/2825))
- Ensured hostnames never exceeds 63 characters, regardless of the metadata provider ([cloud-init#31](https://github.com/flatcar/coreos-cloudinit/pull/31))
- Hyper-V images now use a systemd-sysext image for layering additional platform-specific software on top of `/usr`
- Provided an Incus Flatcar extension as optional systemd-sysext image with the release. Write 'incus' to `/etc/flatcar/enabled-sysext.conf` through Ignition and the sysext will be installed during provisioning. ([scripts#1655](https://github.com/flatcar/scripts/pull/1655))
- Scaleway: The Linux console is now attached to the correct console port. ([scripts#3383](https://github.com/flatcar/scripts/pull/3383))
- Signed out-of-tree kernel modules using the ephemeral signing key so that ZFS and NVIDIA sysexts can work with secure boot. ([scripts#2636](https://github.com/flatcar/scripts/pull/2636/))
- The kernel image and its embedded initrd are now compressed with xz rather than zstd. This gives greater compression at the cost of decompression performance. Systems may therefore now be ever so slightly slower to boot, but this was necessary to avoid running out of space in the /boot partition. Further measures to address the space issue are planned, and perhaps we can switch back to zstd in a later release.
- The qemu script (`flatcar_production_qemu*.sh`) received two new options. `-D` (or `-image-disk-opts`) can be used to add extra options to the `virtio-blk-pci` device for primary disk. `-d` (or `-disk`) can be used to add extra disks to the machine - this one takes a path to a raw or qcow2 image file and, after a comma, `virtio-blk-pci` options. To learn what disk options can be passed to `-D` or `-d`, call `qemu-system-x86_64 -device virtio-blk-pci,help` (`qemu-system-aarch64` can be used too).
- `/boot` is now only accessible by the root user for better security. ([Flatcar#296](https://github.com/flatcar/Flatcar/issues/296))
- ftrace syscalls also available in ARM64 builds. (Enables syscall tracepoints) ([flatcar/scripts#2600](https://github.com/flatcar/scripts/pull/2600))
- sysext-incus: removed `/etc/subuid` and `/etc/subgid` generation for `root` user, it has to be created through initial provisioning. ([scripts#3028](https://github.com/flatcar/scripts/pull/3028))
- systemd now uses OpenSSL instead of gcrypt for cryptography to reduce the size of the initrd. This change disables systemd-journal's Forward Secure Sealing feature, but it is generally not useful for Flatcar.

#### Updates:

- AWS: Amazon SSM Agent ([3.3.2299.0](https://github.com/aws/amazon-ssm-agent/blob/mainline/RELEASENOTES.md#3322990))
- Ignition ([2.22.0](https://coreos.github.io/ignition/release-notes/#ignition-2220-2025-07-08) (includes [2.21.0](https://coreos.github.io/ignition/release-notes/#ignition-2210-2025-03-13)))
- Linux ([6.12.54](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.54) (includes [6.12](https://lwn.net/Articles/998490/), [6.12.1](https://lwn.net/Articles/999108/), [6.12.2](https://lwn.net/Articles/1000872/), [6.12.3](https://lwn.net/Articles/1001203/), [6.12.4](https://lwn.net/Articles/1001437/), [6.12.5](https://lwn.net/Articles/1002176/), [6.12.6](https://lwn.net/Articles/1002918/), [6.12.7](https://lwn.net/Articles/1003608/), [6.12.8](https://lwn.net/Articles/1003985/), [6.12.9](https://lwn.net/Articles/1004549/), [6.12.10](https://lwn.net/Articles/1005382/), [6.12.11](https://lwn.net/Articles/1006009/), [6.12.12](https://lwn.net/Articles/1007440/), [6.12.13](https://lwn.net/Articles/1008643/), [6.12.14](https://lwn.net/Articles/1010356/), [6.12.15](https://lwn.net/Articles/1010623/), [6.12.16](https://lwn.net/Articles/1011265/), [6.12.17](https://lwn.net/Articles/1012191/), [6.12.18](https://lwn.net/Articles/1013397/), [6.12.19](https://lwn.net/Articles/1014045/), [6.12.20](https://lwn.net/Articles/1015185/), [6.12.21](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.21), [6.12.22](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.22), [6.12.23](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.23), [6.12.24](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.24), [6.12.25](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.25), [6.12.26](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.26), [6.12.27](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.27), [6.12.28](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.28), [6.12.29](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.29), [6.12.30](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.30), [6.12.31](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.31), [6.12.32](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.32), [6.12.33](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.33), [6.12.34](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.34), [6.12.35](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.35), [6.12.36](https://lwn.net/Articles/1028828/), [6.12.37](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.37), [6.12.38](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.38), [6.12.39](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.39), [6.12.40](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.40), [6.12.41](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.41), [6.12.42](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.42), [6.12.43](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.43), [6.12.44](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.44), [6.12.45](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.45), [6.12.46](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.46), [6.12.47](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.47), [6.12.48](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.48), [6.12.49](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.49), [6.12.50](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.50), [6.12.51](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.51), [6.12.52](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.52), [6.12.53](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.53)))
- Linux Firmware ([20250808](https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tag/?h=20250808) (includes [20250211](https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tag/?h=20250211), [20250311](https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tag/?h=20250311), [20250410](https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tag/?h=20250410), [20250509](https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tag/?h=20250509), [20250613](https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tag/?h=20250613), [20250627](https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tag/?h=20250627), [20250708](https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tag/?h=20250708)))
- SDK: cmake ([3.31.7](https://cmake.org/cmake/help/v3.31/release/3.31.html#id1) (includes [3.31.5](https://cmake.org/cmake/help/v3.31/release/3.31.html)))
- SDK: gdb ([16.3](https://lists.gnu.org/archive/html/info-gnu/2025-04/msg00014.html))
- SDK: gentoo-syntax ([16](https://github.com/gentoo/gentoo-syntax/releases/tag/v16))
- SDK: gnu-efi ([4.0.2](https://github.com/ncroxon/gnu-efi/releases/tag/4.0.2))
- SDK: go ([1.24.6](https://go.dev/doc/devel/release#go1.24.minor) (includes [1.23.5](https://go.dev/doc/go1.23), [1.23.6](https://go.dev/doc/devel/release#go1.23.6), [1.24.1](https://go.dev/doc/go1.24), [1.24.2](https://go.dev/doc/devel/release#go1.24.minor), [1.24.4](https://go.dev/doc/devel/release#go1.24.minor), [1.24.5](https://go.dev/doc/devel/release#go1.24.minor)))
- SDK: iperf ([3.19](https://github.com/esnet/iperf/releases/tag/3.19))
- SDK: m4 ([1.4.20](https://lists.gnu.org/archive/html/m4-discuss/2025-05/msg00002.html))
- SDK: maturin ([1.9.1](https://github.com/PyO3/maturin/blob/main/Changelog.md#191))
- SDK: meson ([1.7.2](https://github.com/mesonbuild/meson/commits/1.7.2/) (includes [1.6.1](https://mesonbuild.com/Release-notes-for-1-6-0.html)))
- SDK: mtools ([4.0.49](https://www.gnu.org/software/mtools/manual/mtools.html))
- SDK: nano ([8.5](https://lists.gnu.org/archive/html/info-gnu/2025-06/msg00003.html))
- SDK: perl ([5.40.2](https://perldoc.perl.org/perl5402delta) (includes [5.40.1](https://perldoc.perl.org/perl5401delta)))
- SDK: pkgcheck ([0.10.36](https://github.com/pkgcore/pkgcheck/blob/v0.10.36/NEWS.rst) (includes [0.10.34](https://github.com/pkgcore/pkgcheck/releases/tag/v0.10.34)))
- SDK: python-cryptography ([45.0.4](https://cryptography.io/en/latest/changelog/#v45-0-5))
- SDK: qemu ([9.2.3](https://wiki.qemu.org/ChangeLog/9.2) (includes [9.0](https://wiki.qemu.org/ChangeLog/9.0), [9.1.2](https://wiki.qemu.org/ChangeLog/9.1)))
- SDK: rust ([1.88.0](https://blog.rust-lang.org/2025/06/26/Rust-1.88.0/) (includes [1.83.0](https://blog.rust-lang.org/2024/11/28/Rust-1.83.0.html), [1.84.0](https://releases.rs/docs/1.84.0/), [1.84.1](https://releases.rs/docs/1.84.1/), [1.85.0](https://github.com/rust-lang/rust/releases/tag/1.85.0), [1.85.1](https://github.com/rust-lang/rust/releases/tag/1.85.1), [1.86.0](https://releases.rs/docs/1.86.0/), [1.87.0](https://releases.rs/docs/1.87.0/)))
- SDK: sbsigntools ([0.9.5](https://git.kernel.org/pub/scm/linux/kernel/git/jejb/sbsigntools.git/commit/?h=v0.9.5&id=9cfca9fe7aa7a8e29b92fe33ce8433e212c9a8ba))
- VMWare: open-vm-tools ([12.5.2](https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.2))
- afterburn ([5.8.2](https://coreos.github.io/afterburn/release-notes/#afterburn-582))
- azure, dev, gce, sysext-python: gdbm ([1.26](https://lists.gnu.org/archive/html/info-gnu/2025-07/msg00012.html) (includes [1.25](https://lists.gnu.org/archive/html/info-gnu/2025-03/msg00010.html)))
- azure, dev, gce, sysext-python: mpdecimal ([4.0.1](https://www.bytereef.org/mpdecimal/changelog.html#version-4-0-1xs))
- azure, dev, gce, sysext-python: python ([3.11.13](https://www.python.org/downloads/release/python-31113/) (includes [3.11.12](https://www.python.org/downloads/release/python-31112/)))
- azure: wa-linux-agent ([2.12.0.4](https://github.com/Azure/WALinuxAgent/releases/tag/v2.12.0.4))
- base, dev: azure-vm-utils ([0.7.0](https://github.com/Azure/azure-vm-utils/releases/tag/v0.7.0) (includes [0.5.0](https://github.com/Azure/azure-vm-utils/releases/tag/v0.5.0), [0.5.1](https://github.com/Azure/azure-vm-utils/releases/tag/v0.5.1), [0.5.2](https://github.com/Azure/azure-vm-utils/releases/tag/v0.5.2), [0.6.0](https://github.com/Azure/azure-vm-utils/releases/tag/v0.6.0)))
- base, dev: bind ([9.18.37](https://bind9.readthedocs.io/en/v9.18.37/notes.html#notes-for-bind-9-18-37) (includes [9.18.30](https://bind9.readthedocs.io/en/v9.18.30/notes.html#notes-for-bind-9-18-30), [9.18.31](https://bind9.readthedocs.io/en/v9.18.31/notes.html#notes-for-bind-9-18-31), [9.18.32](https://bind9.readthedocs.io/en/v9.18.32/notes.html#notes-for-bind-9-18-32), [9.18.33](https://bind9.readthedocs.io/en/v9.18.33/notes.html#notes-for-bind-9-18-33), [9.18.34](https://bind9.readthedocs.io/en/v9.18.34/notes.html#notes-for-bind-9-18-34), [9.18.35](https://bind9.readthedocs.io/en/v9.18.35/notes.html#notes-for-bind-9-18-35), [9.18.36](https://bind9.readthedocs.io/en/v9.18.36/notes.html#notes-for-bind-9-18-36)))
- base, dev: binutils ([2.44](https://lists.gnu.org/archive/html/info-gnu/2025-02/msg00001.html))
- base, dev: btrfs-progs ([6.15](https://github.com/kdave/btrfs-progs/releases/tag/v6.15) (includes [6.13](https://raw.githubusercontent.com/kdave/btrfs-progs/refs/tags/v6.13/CHANGES)))
- base, dev: c-ares ([1.34.4](https://github.com/c-ares/c-ares/releases/tag/v1.34.4))
- base, dev: checkpolicy ([3.8.1](https://github.com/SELinuxProject/selinux/releases/tag/3.8.1) (includes [3.8](https://github.com/SELinuxProject/selinux/releases/tag/3.8)))
- base, dev: cifs-utils ([7.3](https://lists.samba.org/archive/samba-technical/2025-March/139360.html) (includes [7.1](https://lists.samba.org/archive/samba-technical/2024-October/139146.html), [7.2](https://lists.samba.org/archive/samba-technical/2025-February/139330.html)))
- base, dev: cracklib ([2.10.3](https://github.com/cracklib/cracklib/releases/tag/v2.10.3))
- base, dev: cri-tools ([1.32.0](https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.32.0) (includes [1.27.1](https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.27.1), [1.28.0](https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.28.0), [1.29.0](https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.29.0), [1.30.0](https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.30.0), [1.30.1](https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.30.1), [1.31.0](https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.31.0), [1.31.1](https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.31.1)))
- base, dev: cryptsetup ([2.8.0](https://gitlab.com/cryptsetup/cryptsetup/-/blob/v2.8.0/docs/v2.8.0-ReleaseNotes))
- base, dev: curl ([8.15.0](https://curl.se/ch/8.15.0.html) (includes [8.12.0](https://curl.se/ch/8.12.0.html), [8.12.1](https://curl.se/ch/8.12.1.html), [8.13.0](https://curl.se/ch/8.13.0.html), [8.14.0](https://curl.se/ch/8.14.0.html), [8.14.1](https://curl.se/ch/8.14.1.html)))
- base, dev: dbus ([1.16.2](https://gitlab.freedesktop.org/dbus/dbus/-/blob/dbus-1.16.2/NEWS) (includes [1.14.6](https://gitlab.freedesktop.org/dbus/dbus/-/blob/dbus-1.14.6/NEWS), [1.14.8](https://gitlab.freedesktop.org/dbus/dbus/-/blob/dbus-1.14.8/NEWS), [1.16.0](https://gitlab.freedesktop.org/dbus/dbus/-/blob/dbus-1.16.0/NEWS)))
- base, dev: diffutils ([3.12](https://lists.gnu.org/archive/html/info-gnu/2025-04/msg00005.html) (includes [3.11](https://savannah.gnu.org/news/?id=10720)))
- base, dev: e2fsprogs ([1.47.3](https://e2fsprogs.sourceforge.net/e2fsprogs-release.html#1.47.3) (includes [1.47.2](https://e2fsprogs.sourceforge.net/e2fsprogs-release.html#1.47.2)))
- base, dev: elfutils ([0.193](https://inbox.sourceware.org/elfutils-devel/CAJDtP-RjuT13zehLgSvz9TnwQZ1VYPOS=[e-mail]/T/#u) (includes [0.192](https://inbox.sourceware.org/elfutils-devel/[e-mail]/T/)))
- base, dev: ethtool ([6.15](https://git.kernel.org/pub/scm/network/ethtool/ethtool.git/plain/NEWS?h=v6.15) (includes [6.11](https://git.kernel.org/pub/scm/network/ethtool/ethtool.git/tree/NEWS?h=v6.11)))
- base, dev: expat ([2.7.1](https://github.com/libexpat/libexpat/blob/R_2_7_1/expat/Changes#L40) (includes [2.7.0](https://github.com/libexpat/libexpat/blob/R_2_7_0/expat/Changes#L40)))
- base, dev: gawk ([5.3.2](https://lists.gnu.org/archive/html/info-gnu/2025-04/msg00003.html))
- base, dev: gcc ([14.3.0](https://lists.gnu.org/archive/html/info-gnu/2025-05/msg00004.html))
- base, dev: git ([2.49.0](https://github.com/git/git/blob/v2.49.0/Documentation/RelNotes/2.49.0.adoc) (includes [2.45.3](https://github.com/git/git/blob/v2.45.3/Documentation/RelNotes/2.45.3.txt), [2.46.0](https://github.com/git/git/blob/v2.46.0/Documentation/RelNotes/2.46.0.txt), [2.46.1](https://github.com/git/git/blob/v2.46.1/Documentation/RelNotes/2.46.1.txt), [2.46.2](https://github.com/git/git/blob/v2.46.2/Documentation/RelNotes/2.46.2.txt), [2.46.3](https://github.com/git/git/blob/v2.46.3/Documentation/RelNotes/2.46.3.txt), [2.47.0](https://github.com/git/git/blob/v2.47.0/Documentation/RelNotes/2.47.0.txt), [2.47.1](https://github.com/git/git/blob/v2.47.1/Documentation/RelNotes/2.47.1.txt), [2.47.2](https://github.com/git/git/blob/v2.47.2/Documentation/RelNotes/2.47.2.txt), [2.48.0](https://github.com/git/git/blob/v2.48.0/Documentation/RelNotes/2.48.0.txt), [2.48.1](https://github.com/git/git/blob/v2.48.1/Documentation/RelNotes/2.48.1.txt)))
- base, dev: glib ([2.84.4](https://gitlab.gnome.org/GNOME/glib/-/releases/2.84.4) (includes [2.82.0](https://gitlab.gnome.org/GNOME/glib/-/releases/2.82.0), [2.82.1](https://gitlab.gnome.org/GNOME/glib/-/releases/2.82.1), [2.82.2](https://gitlab.gnome.org/GNOME/glib/-/releases/2.82.2), [2.82.3](https://gitlab.gnome.org/GNOME/glib/-/releases/2.82.3), [2.82.4](https://gitlab.gnome.org/GNOME/glib/-/releases/2.82.4), [2.82.5](https://gitlab.gnome.org/GNOME/glib/-/releases/2.82.5), [2.83.0](https://gitlab.gnome.org/GNOME/glib/-/releases/2.83.0), [2.83.1](https://gitlab.gnome.org/GNOME/glib/-/releases/2.83.1), [2.83.2](https://gitlab.gnome.org/GNOME/glib/-/releases/2.83.2), [2.83.3](https://gitlab.gnome.org/GNOME/glib/-/releases/2.83.3), [2.83.4](https://gitlab.gnome.org/GNOME/glib/-/releases/2.83.4), [2.83.5](https://gitlab.gnome.org/GNOME/glib/-/releases/2.83.5), [2.84.0](https://gitlab.gnome.org/GNOME/glib/-/releases/2.84.0), [2.84.1](https://gitlab.gnome.org/GNOME/glib/-/releases/2.84.1), [2.84.2](https://gitlab.gnome.org/GNOME/glib/-/releases/2.84.2), [2.84.3](https://gitlab.gnome.org/GNOME/glib/-/releases/2.84.3)))
- base, dev: glibc ([2.41](https://lists.gnu.org/archive/html/info-gnu/2025-01/msg00014.html))
- base, dev: gnupg ([2.4.8](https://dev.gnupg.org/T7428) (includes [2.4.7](https://dev.gnupg.org/T7353)))
- base, dev: gnutls ([3.8.10](https://lists.gnupg.org/pipermail/gnutls-help/2025-July/004883.html) (includes [3.8.8](https://gitlab.com/gnutls/gnutls/-/blob/3.8.8/NEWS), [3.8.9](https://lists.gnupg.org/pipermail/gnutls-help/2025-February/004875.html)))
- base, dev: grep ([3.12](https://lists.gnu.org/archive/html/info-gnu/2025-04/msg00008.html))
- base, dev: gzip ([1.14](https://lists.gnu.org/archive/html/info-gnu/2025-04/msg00007.html))
- base, dev: hwdata ([0.391](https://github.com/vcrhonek/hwdata/releases/tag/v0.391))
- base, dev: inih ([59](https://github.com/benhoyt/inih/releases/tag/r59))
- base, dev: intel-microcode ([20250211_p20250211](https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20250211))
- base, dev: iproute2 ([6.16.0](https://www.spinics.net/lists/netdev/msg1112693.html) (includes [6.13.0](https://lore.kernel.org/all/[e-mail]/), [6.14.0](https://lore.kernel.org/all/[e-mail]/)))
- base, dev: ipset ([7.24](https://lwn.net/Articles/1021623/) (includes [7.23](https://ipset.netfilter.org/changelog.html)))
- base, dev: iptables ([1.8.11](https://netfilter.org/projects/iptables/files/changes-iptables-1.8.11.txt) (includes [1.8.9](https://netfilter.org/projects/iptables/files/changes-iptables-1.8.9.txt), [1.8.10](https://netfilter.org/projects/iptables/files/changes-iptables-1.8.10.txt)))
- base, dev: iputils ([20250605](https://github.com/iputils/iputils/releases/tag/20250605) (includes [20250602](https://github.com/iputils/iputils/releases/tag/20250602)))
- base, dev: jansson ([2.14.1](https://jansson.readthedocs.io/en/latest/changes.html#version-2-14-1))
- base, dev: jq ([1.8.1](https://github.com/jqlang/jq/releases/tag/jq-1.8.1) (includes [1.8.0](https://github.com/jqlang/jq/releases/tag/jq-1.8.0)))
- base, dev: kbd ([2.7.1](https://git.kernel.org/pub/scm/linux/kernel/git/legion/kbd.git/tag/?h=v2.7.1) (includes [2.7](https://git.kernel.org/pub/scm/linux/kernel/git/legion/kbd.git/tag/?h=v2.7), [2.7-rc1](https://git.kernel.org/pub/scm/linux/kernel/git/legion/kbd.git/tag/?h=v2.7-rc1)))
- base, dev: kexec-tools ([2.0.31](https://github.com/horms/kexec-tools/commits/v2.0.31/))
- base, dev: kmod ([34.2](https://lwn.net/Articles/1011365/))
- base, dev: ldb ([2.9.2](https://gitlab.com/samba-team/samba/-/commit/42bfbb012f9c1c9054cdfb510ae4a50a3f12b384) (includes [2.9.0](https://gitlab.com/samba-team/samba/-/commit/ec91204387bd7f5c5a8d8df8534c6ca59b491ac5), [2.9.1](https://gitlab.com/samba-team/samba/-/commit/3dd39600da3c0bedeae9f033c1333eb6b0f4ff33)))
- base, dev: libarchive ([3.8.1](https://github.com/libarchive/libarchive/releases/tag/v3.8.1) (includes [3.7.8](https://github.com/libarchive/libarchive/releases/tag/v3.7.8), [3.7.9](https://github.com/libarchive/libarchive/releases/tag/v3.7.9), [3.8.0](https://github.com/libarchive/libarchive/releases/tag/v3.8.0)))
- base, dev: libcap ([2.76](https://sites.google.com/site/fullycapable/release-notes-for-libcap#h.wqnp1zp1o8bm) (includes [2.72](https://sites.google.com/site/fullycapable/release-notes-for-libcap#h.ulglddlojmy0), [2.73](https://sites.google.com/site/fullycapable/release-notes-for-libcap#h.7yd7ab9ppagk), [2.74](https://sites.google.com/site/fullycapable/release-notes-for-libcap#h.ccbrq82zh7n9), [2.75](https://sites.google.com/site/fullycapable/release-notes-for-libcap#h.7xqcoecpcnn8)))
- base, dev: libffi ([3.4.8](https://github.com/libffi/libffi/releases/tag/v3.4.8) (includes [3.4.7](https://github.com/libffi/libffi/releases/tag/v3.4.7)))
- base, dev: libgcrypt ([1.11.2](https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git;a=blob_plain;f=NEWS;h=3add9aad0cf6dc5a70ce6cb3983a46e585a630b3;hb=737cc63600146f196738a6768679eb016cf866e9) (includes [1.11.1](https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git;a=blob;f=NEWS;h=84bc61a49f3a09302b3438cb529baf67576ad859;hb=81ce5321b1b79bde6dfdc3c164efb40c13cf656b)))
- base, dev: libgpg-error ([1.53](https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgpg-error.git;a=blob;f=NEWS;h=66b2256de2f59c38b9cd35fb4a1b1971a6c9f3f1;hb=f9e98ed8315eaf0468870149d22c5dcf992288ec) (includes [1.52](https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgpg-error.git;a=blob;f=NEWS;h=4f6a114d81fb5b2f73bb65a1f1cc3c21fe64fa0c;hb=be471d158e4951f4b17335b0fc9ae2387a786b5b)))
- base, dev: libidn2 ([2.3.8](https://gitlab.com/libidn/libidn2/-/blob/v2.3.8/NEWS))
- base, dev: libnftnl ([1.2.9](https://lwn.net/Articles/1017463/))
- base, dev: libnvme ([1.15](https://github.com/linux-nvme/libnvme/releases/tag/v1.15) (includes [1.12](https://github.com/linux-nvme/libnvme/releases/tag/v1.12)))
- base, dev: libpcre2 ([10.45](https://github.com/PCRE2Project/pcre2/blob/pcre2-10.45/NEWS))
- base, dev: libseccomp ([2.6.0](https://github.com/seccomp/libseccomp/releases/tag/v2.6.0) (includes [2.5.6](https://github.com/seccomp/libseccomp/releases/tag/v2.5.6)))
- base, dev: libselinux ([3.8.1](https://github.com/SELinuxProject/selinux/releases/tag/3.8.1) (includes [3.8](https://github.com/SELinuxProject/selinux/releases/tag/3.8)))
- base, dev: libsemanage ([3.7](https://github.com/SELinuxProject/selinux/releases/tag/3.7))
- base, dev: libsepol ([3.8.1](https://github.com/SELinuxProject/selinux/releases/tag/3.8.1) (includes [3.8](https://github.com/SELinuxProject/selinux/releases/tag/3.8)))
- base, dev: libsodium ([1.0.20_p20250606](https://raw.githubusercontent.com/jedisct1/libsodium/7e024fbf096c84bef866b21f521c516591908bef/ChangeLog))
- base, dev: libtasn1 ([4.20.0](https://lists.gnu.org/archive/html/info-gnu/2025-02/msg00004.html))
- base, dev: libtirpc ([1.3.6](https://git.linux-nfs.org/?p=steved/libtirpc.git;a=log;h=refs/tags/libtirpc-1-3-6) (includes [1.3.5](https://git.linux-nfs.org/?p=steved/libtirpc.git;a=log;h=refs/tags/libtirpc-1-3-5)))
- base, dev: libunistring ([1.3](https://lists.gnu.org/archive/html/info-gnu/2024-10/msg00000.html))
- base, dev: libunwind ([1.8.2](https://github.com/libunwind/libunwind/releases/tag/v1.8.2))
- base, dev: liburing ([2.9](https://github.com/axboe/liburing/releases/tag/liburing-2.9) (includes [2.8](https://github.com/axboe/liburing/releases/tag/liburing-2.8)))
- base, dev: libusb ([1.0.29](https://raw.githubusercontent.com/libusb/libusb/refs/tags/v1.0.29/ChangeLog) (includes [1.0.28](https://github.com/libusb/libusb/blob/v1.0.28/ChangeLog)))
- base, dev: libuv ([1.51.0](https://github.com/libuv/libuv/releases/tag/v1.51.0) (includes [1.50.0](https://github.com/libuv/libuv/releases/tag/v1.50.0)))
- base, dev: libxcrypt ([4.4.38](https://github.com/besser82/libxcrypt/releases/tag/v4.4.38) (includes [4.4.37](https://github.com/besser82/libxcrypt/releases/tag/v4.4.37)))
- base, dev: libxml2 ([2.13.8](https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.13.8) (includes [2.12.10](https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.10), [2.13.0](https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.13.0), [2.13.1](https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.13.1), [2.13.2](https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.13.2), [2.13.3](https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.13.3), [2.13.4](https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.13.4), [2.13.5](https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.13.5), [2.13.6](https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.13.6), [2.13.7](https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.13.7)))
- base, dev: linux-headers ([6.12](https://kernelnewbies.org/Linux_6.12))
- base, dev: logrotate ([3.22.0](https://github.com/logrotate/logrotate/releases/tag/3.22.0) (includes [3.21.0](https://github.com/logrotate/logrotate/releases/tag/3.21.0)))
- base, dev: lsof ([4.99.5](https://github.com/lsof-org/lsof/releases/tag/4.99.5))
- base, dev: lvm2 ([2.03.21](https://gitlab.com/lvmteam/lvm2/-/tags/v2_03_21) (includes [2.03.00](https://gitlab.com/lvmteam/lvm2/-/tags/v2_03_00), [2.03.01](https://gitlab.com/lvmteam/lvm2/-/tags/v2_03_01), [2.03.02](https://gitlab.com/lvmteam/lvm2/-/tags/v2_03_02), [2.03.03](https://gitlab.com/lvmteam/lvm2/-/tags/v2_03_03), [2.03.04](https://gitlab.com/lvmteam/lvm2/-/tags/v2_03_04), [2.03.05](https://gitlab.com/lvmteam/lvm2/-/tags/v2_03_05), [2.03.06](https://gitlab.com/lvmteam/lvm2/-/tags/v2_03_06), [2.03.07](https://gitlab.com/lvmteam/lvm2/-/tags/v2_03_07), [2.03.08](https://gitlab.com/lvmteam/lvm2/-/tags/v2_03_08), [2.03.09](https://gitlab.com/lvmteam/lvm2/-/tags/v2_03_09), [2.03.10](https://gitlab.com/lvmteam/lvm2/-/tags/v2_03_10), [2.03.11](https://gitlab.com/lvmteam/lvm2/-/tags/v2_03_11), [2.03.12](https://gitlab.com/lvmteam/lvm2/-/tags/v2_03_12), [2.03.13](https://gitlab.com/lvmteam/lvm2/-/tags/v2_03_13), [2.03.14](https://gitlab.com/lvmteam/lvm2/-/tags/v2_03_14), [2.03.15](https://gitlab.com/lvmteam/lvm2/-/tags/v2_03_15), [2.03.16](https://gitlab.com/lvmteam/lvm2/-/tags/v2_03_16), [2.03.17](https://gitlab.com/lvmteam/lvm2/-/tags/v2_03_17), [2.03.18](https://gitlab.com/lvmteam/lvm2/-/tags/v2_03_18), [2.03.19](https://gitlab.com/lvmteam/lvm2/-/tags/v2_03_19), [2.03.20](https://gitlab.com/lvmteam/lvm2/-/tags/v2_03_20)))
- base, dev: mdadm ([4.4](https://git.kernel.org/pub/scm/utils/mdadm/mdadm.git/tree/CHANGELOG.md?h=mdadm-4.4) (includes [4.3](https://git.kernel.org/pub/scm/utils/mdadm/mdadm.git/tree/CHANGELOG.md?h=mdadm-4.4#n36)))
- base, dev: ncurses ([6.5_p20250531](https://invisible-island.net/ncurses/NEWS.html#t20250531) (includes [6.5_p20250125](https://invisible-island.net/ncurses/announce-6.5.html)))
- base, dev: nettle ([3.10.2](https://git.lysator.liu.se/nettle/nettle/-/raw/nettle_3.10.2_release_20250626/ChangeLog) (includes [3.10.1](https://lists.gnu.org/archive/html/info-gnu/2024-12/msg00008.html)))
- base, dev: nfs-utils ([2.7.1](https://git.linux-nfs.org/?p=steved/nfs-utils.git;a=log;h=refs/tags/nfs-utils-2-7-1) (includes [2.6.1](https://git.linux-nfs.org/?p=steved/nfs-utils.git;a=log;h=refs/tags/nfs-utils-2-6-1), [2.6.2](https://git.linux-nfs.org/?p=steved/nfs-utils.git;a=log;h=refs/tags/nfs-utils-2-6-2), [2.6.3](https://git.linux-nfs.org/?p=steved/nfs-utils.git;a=log;h=refs/tags/nfs-utils-2-6-3), [2.6.4](https://git.linux-nfs.org/?p=steved/nfs-utils.git;a=log;h=refs/tags/nfs-utils-2-6-4)))
- base, dev: nftables ([1.1.1](https://netfilter.org/projects/nftables/files/changes-nftables-1.1.1.txt) (includes [1.0.0](https://netfilter.org/projects/nftables/files/changes-nftables-1.0.0.txt), [1.0.1](https://netfilter.org/projects/nftables/files/changes-nftables-1.0.1.txt), [1.0.2](https://netfilter.org/projects/nftables/files/changes-nftables-1.0.2.txt), [1.0.3](https://netfilter.org/projects/nftables/files/changes-nftables-1.0.3.txt), [1.0.4](https://netfilter.org/projects/nftables/files/changes-nftables-1.0.4.txt), [1.0.5](https://netfilter.org/projects/nftables/files/changes-nftables-1.0.5.txt), [1.0.6](https://netfilter.org/projects/nftables/files/changes-nftables-1.0.6.txt), [1.0.7](https://netfilter.org/projects/nftables/files/changes-nftables-1.0.7.txt), [1.0.8](https://netfilter.org/projects/nftables/files/changes-nftables-1.0.8.txt), [1.0.9](https://netfilter.org/projects/nftables/files/changes-nftables-1.0.9.txt), [1.1.0](https://netfilter.org/projects/nftables/files/changes-nftables-1.1.0.txt)))
- base, dev: nghttp2 ([1.65.0](https://github.com/nghttp2/nghttp2/releases/tag/v1.65.0) (includes [1.63.0](https://github.com/nghttp2/nghttp2/releases/tag/v1.63.0), [1.64.0](https://github.com/nghttp2/nghttp2/releases/tag/v1.64.0)))
- base, dev: ntp ([4.2.8_p18](https://www.ntp.org/support/securitynotice/4_2_8p18-release-announcement/))
- base, dev: nvidia-drivers-service ([570.172.08](https://docs.nvidia.com/datacenter/tesla/tesla-release-notes-570-172-08/index.html) (includes [535.247.01](https://docs.nvidia.com/datacenter/tesla/tesla-release-notes-535-247-01/index.html), [535.261.03](https://docs.nvidia.com/datacenter/tesla/tesla-release-notes-535-261-03/index.html), [570.124.06](https://docs.nvidia.com/datacenter/tesla/tesla-release-notes-570-124-06/index.html), [570.133.20](https://docs.nvidia.com/datacenter/tesla/tesla-release-notes-570-133-20/index.html), [570.148.08](https://docs.nvidia.com/datacenter/tesla/tesla-release-notes-570-148-08/index.html), 570.172.08))
- base, dev: nvme-cli ([2.15](https://github.com/linux-nvme/nvme-cli/releases/tag/v2.15) (includes [2.12](https://github.com/linux-nvme/nvme-cli/releases/tag/v2.12)))
- base, dev: oniguruma ([6.9.10](https://github.com/kkos/oniguruma/releases/tag/v6.9.10))
- base, dev: open-iscsi ([2.1.11](https://github.com/open-iscsi/open-iscsi/blob/2.1.11/Changelog))
- base, dev: open-isns ([0.103](https://github.com/open-iscsi/open-isns/releases/tag/v0.103))
- base, dev: openssh ([10.0_p1](https://www.openssh.com/releasenotes.html#10.0p1) (includes [9.9_p1](https://www.openssh.com/txt/release-9.9), [9.9_p2](https://www.openssh.com/txt/release-9.9p2)))
- base, dev: openssl ([3.4.2](https://github.com/openssl/openssl/releases/tag/openssl-3.4.2) (includes [3.3.3](https://github.com/openssl/openssl/releases/tag/openssl-3.3.3), [3.4.0](https://github.com/openssl/openssl/blob/openssl-3.4.0/NEWS.md#openssl-34), [3.4.1](https://github.com/openssl/openssl/releases/tag/openssl-3.4.1)))
- base, dev: pciutils ([3.14.0](https://git.kernel.org/pub/scm/utils/pciutils/pciutils.git/plain/ChangeLog?h=v3.14.0))
- base, dev: pinentry ([1.3.2](https://git.gnupg.org/cgi-bin/gitweb.cgi?p=pinentry.git;a=blob_plain;f=NEWS;h=8bf192539fed9104a1ff431c6dcc3add7fb6771c;hb=d7660807593067d5cd7150b7d4d987d60957b5cb))
- base, dev: pkgconf ([2.5.1](https://raw.githubusercontent.com/pkgconf/pkgconf/refs/tags/pkgconf-2.5.1/NEWS) (includes [2.4.0](https://github.com/pkgconf/pkgconf/blob/pkgconf-2.4.0/NEWS), [2.4.1](https://github.com/pkgconf/pkgconf/blob/pkgconf-2.4.1/NEWS), [2.4.2](https://github.com/pkgconf/pkgconf/blob/pkgconf-2.4.2/NEWS), [2.4.3](https://github.com/pkgconf/pkgconf/blob/pkgconf-2.4.3/NEWS), [2.5.0](https://raw.githubusercontent.com/pkgconf/pkgconf/refs/tags/pkgconf-2.5.0/NEWS)))
- base, dev: policycoreutils ([3.7](https://github.com/SELinuxProject/selinux/releases/tag/3.7))
- base, dev: polkit ([126](https://github.com/polkit-org/polkit/blob/126/NEWS.md) (includes [122](https://github.com/polkit-org/polkit/blob/122/NEWS.md), [123](https://github.com/polkit-org/polkit/blob/123/NEWS.md), [124](https://github.com/polkit-org/polkit/blob/124/NEWS.md), [125](https://github.com/polkit-org/polkit/blob/125/NEWS.md)))
- base, dev: qemu-guest-agent ([9.2.0](https://wiki.qemu.org/ChangeLog/9.2#Guest_agent) (includes [9.0](https://wiki.qemu.org/ChangeLog/9.0#Guest_agent), [9.1](https://wiki.qemu.org/ChangeLog/9.1#Guest_agent)))
- base, dev: quota ([4.10](https://sourceforge.net/p/linuxquota/news/2025/04/quota-tools-410-released/))
- base, dev: rpcbind ([1.2.8](https://git.linux-nfs.org/?p=steved/rpcbind.git;a=shortlog;h=refs/tags/rpcbind-1_2_8) (includes [1.2.7](http://git.linux-nfs.org/?p=steved/rpcbind.git;a=shortlog;h=refs/tags/rpcbind-1_2_7)))
- base, dev: rsync ([3.4.1](https://download.samba.org/pub/rsync/NEWS#3.4.1) (includes [3.4.0](https://download.samba.org/pub/rsync/NEWS#3.4.0)))
- base, dev: samba ([4.20.7](https://gitlab.com/samba-team/samba/-/blob/samba-4.20.7/WHATSNEW.txt) (includes [4.20.0](https://gitlab.com/samba-team/samba/-/blob/samba-4.20.0/WHATSNEW.txt), [4.20.1](https://gitlab.com/samba-team/samba/-/blob/samba-4.20.1/WHATSNEW.txt), [4.20.2](https://gitlab.com/samba-team/samba/-/blob/samba-4.20.2/WHATSNEW.txt), [4.20.3](https://gitlab.com/samba-team/samba/-/blob/samba-4.20.3/WHATSNEW.txt), [4.20.4](https://gitlab.com/samba-team/samba/-/blob/samba-4.20.4/WHATSNEW.txt), [4.20.5](https://gitlab.com/samba-team/samba/-/blob/samba-4.20.5/WHATSNEW.txt), [4.20.6](https://gitlab.com/samba-team/samba/-/blob/samba-4.20.6/WHATSNEW.txt)))
- base, dev: selinux ([2.20250213](https://github.com/SELinuxProject/refpolicy/releases/tag/RELEASE_2_20250213))
- base, dev: semodule-utils ([3.8.1](https://github.com/SELinuxProject/selinux/releases/tag/3.8.1) (includes [3.7](https://github.com/SELinuxProject/selinux/releases/tag/3.7), [3.8](https://github.com/SELinuxProject/selinux/releases/tag/3.8)))
- base, dev: shadow ([4.14.8](https://github.com/shadow-maint/shadow/releases/tag/4.14.8) (includes [4.14.0](https://github.com/shadow-maint/shadow/releases/tag/4.14.0), [4.14.1](https://github.com/shadow-maint/shadow/releases/tag/4.14.1), [4.14.2](https://github.com/shadow-maint/shadow/releases/tag/4.14.2), [4.14.3](https://github.com/shadow-maint/shadow/releases/tag/4.14.3), [4.14.4](https://github.com/shadow-maint/shadow/releases/tag/4.14.4), [4.14.5](https://github.com/shadow-maint/shadow/releases/tag/4.14.5), [4.14.6](https://github.com/shadow-maint/shadow/releases/tag/4.14.6), [4.14.7](https://github.com/shadow-maint/shadow/releases/tag/4.14.7)))
- base, dev: socat ([1.8.0.3](https://repo.or.cz/socat.git/blob/refs/tags/tag-1.8.0.3:/CHANGES) (includes [1.8.0.1](https://repo.or.cz/socat.git/blob/6ff391324d2d3b9f6bfb58e7d16a20be43b47af7:/CHANGES), [1.8.0.2](https://repo.or.cz/socat.git/blob/refs/tags/tag-1.8.0.2:/CHANGES)))
- base, dev: sqlite ([3.50.4](https://sqlite.org/releaselog/3_50_4.html) (includes [3.47.2](https://sqlite.org/releaselog/3_47_2.html), [3.48.0](https://sqlite.org/releaselog/3_48_0.html), [3.49.0](https://sqlite.org/releaselog/3_49_0.html), [3.49.1](https://sqlite.org/releaselog/3_49_1.html), [3.49.2](https://sqlite.org/releaselog/3_49_2.html), [3.50.3](https://sqlite.org/releaselog/3_50_3.html)))
- base, dev: sssd ([2.9.7](https://sssd.io/release-notes/sssd-2.9.7.html) (includes [2.9.6](https://sssd.io/release-notes/sssd-2.9.6.html)))
- base, dev: strace ([6.16](https://github.com/strace/strace/releases/tag/v6.16) (includes [6.13](https://github.com/strace/strace/releases/tag/v6.13), [6.14](https://github.com/strace/strace/releases/tag/v6.14)))
- base, dev: sudo ([1.9.17_p2](https://github.com/sudo-project/sudo/releases/tag/v1.9.17p2))
- base, dev: tdb ([1.4.12](https://gitlab.com/samba-team/samba/-/commit/6b10cfbaf2c522cceb48c610c18656d2d69cf60b) (includes [1.4.11](https://gitlab.com/samba-team/samba/-/commit/93a6656c13facdb8565f90954428c4cf800bfc36)))
- base, dev: trousers ([0.3.15](https://sourceforge.net/p/trousers/trousers/ci/TROUSERS_0_3_15/tree/ChangeLog))
- base, dev: unzip ([6.0_p29](https://metadata.ftp-master.debian.org/changelogs//main/u/unzip/unzip_6.0-29_changelog))
- base, dev: userspace-rcu ([0.15.2](https://lwn.net/Articles/1017443/) (includes [0.15.0](https://lore.kernel.org/all/[e-mail]/), [0.15.1](https://lore.kernel.org/lkml/[e-mail]/T/)))
- base, dev: util-linux ([2.40.4](https://raw.githubusercontent.com/util-linux/util-linux/refs/tags/v2.40.4/Documentation/releases/v2.40.4-ReleaseNotes) (includes [2.40.3](https://raw.githubusercontent.com/util-linux/util-linux/refs/tags/v2.40.3/Documentation/releases/v2.40.3-ReleaseNotes)))
- base, dev: vim ([9.1.1652](https://github.com/vim/vim/commits/v9.1.1652/) (includes [9.1.0794](https://github.com/vim/vim/commits/v9.1.0794/), [9.1.1436](https://github.com/vim/vim/commits/v9.1.1436/)))
- base, dev: which ([2.23](https://git.savannah.gnu.org/cgit/which.git/tree/NEWS?id=3e2c8f8acc3a333b66b06de234bc9324c6fe5500))
- base, dev: xfsprogs ([6.13.0](https://web.git.kernel.org/pub/scm/fs/xfs/xfsprogs-dev.git/tree/doc/CHANGES?h=v6.13.0) (includes [6.12.0](https://web.git.kernel.org/pub/scm/fs/xfs/xfsprogs-dev.git/tree/doc/CHANGES?h=v6.12.0)))
- base, dev: xz-utils ([5.8.1](https://github.com/tukaani-project/xz/releases/tag/v5.8.1) (includes [5.6.4](https://github.com/tukaani-project/xz/releases/tag/v5.6.4), [5.8.0](https://github.com/tukaani-project/xz/releases/tag/v5.8.0)))
- base, dev: zram-generator ([1.2.1](https://github.com/systemd/zram-generator/releases/tag/v1.2.1) (includes [1.2.0](https://github.com/systemd/zram-generator/releases/tag/v1.2.0)))
- base, dev: zstd ([1.5.7](https://github.com/facebook/zstd/releases/tag/v1.5.7))
- btrfs-progs ([6.14](https://github.com/kdave/btrfs-progs/releases/tag/v6.14))
- ca-certificates ([3.116](https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_116.html))
- chrony ([4.7](https://listengine.tuxfamily.org/chrony.tuxfamily.org/chrony-announce/2025/06/msg00000.html))
- curl ([8.14.1](https://curl.se/ch/8.14.1.html))
- dbus-glib ([0.114](https://gitlab.freedesktop.org/dbus/dbus-glib/-/blob/master/NEWS?ref_type=heads#L8))
- dev, sysext-incus: squashfs-tools ([4.7](https://lkml.org/lkml/2025/6/3/1214))
- dev: bash-completion ([2.16.0](https://github.com/scop/bash-completion/releases/tag/2.16.0))
- dev: eselect ([1.4.30](https://gitweb.gentoo.org/proj/eselect.git/tree/NEWS?h=eselect-1.4.30) (includes [1.4.29](https://gitweb.gentoo.org/proj/eselect.git/tree/NEWS?h=eselect-1.4.29)))
- dev: file ([5.46](https://github.com/file/file/blob/FILE5_46/ChangeLog))
- dev: gcc-config ([2.12.1](https://gitweb.gentoo.org/proj/gcc-config.git/log/?h=v2.12.1))
- dev: gdb ([16.2](https://lists.gnu.org/archive/html/info-gnu/2025-02/msg00000.html) (includes [16.1](https://lists.gnu.org/archive/html/info-gnu/2025-01/msg00009.html)))
- dev: getuto ([1.15](https://github.com/projg2/getuto/commits/getuto-1.15/))
- dev: gnuconfig ([20250710](https://cgit.git.savannah.gnu.org/cgit/config.git/log/?id=a2287c3041a3f2a204eb942e09c015eab00dc7dd))
- dev: iperf ([3.19.1](https://github.com/esnet/iperf/releases/tag/3.19.1) (includes [3.18](https://github.com/esnet/iperf/releases/tag/3.18)))
- dev: man-db ([2.13.1](https://gitlab.com/man-db/man-db/-/releases/2.13.1))
- dev: man-pages ([6.10](https://lkml.org/lkml/2025/1/22/1229))
- dev: minicom ([2.10](https://salsa.debian.org/minicom-team/minicom/-/releases/2.10))
- dev: mpfr ([4.2.2](https://www.mpfr.org/mpfr-4.2.2/))
- dev: pahole ([1.30](https://git.kernel.org/pub/scm/devel/pahole/pahole.git/tag/?h=v1.30) (includes [1.28](https://git.kernel.org/pub/scm/devel/pahole/pahole.git/tag/?h=v1.28), [1.29](https://git.kernel.org/pub/scm/devel/pahole/pahole.git/tag/?h=v1.29)))
- dev: patch ([2.8](https://lists.gnu.org/archive/html/info-gnu/2025-03/msg00014.html))
- dev: portage ([3.0.68](https://gitweb.gentoo.org/proj/portage.git/tree/NEWS?h=portage-3.0.68) (includes [3.0.67](https://github.com/gentoo/portage/blob/portage-3.0.67/NEWS)))
- dev: sandbox ([2.46](https://gitweb.gentoo.org/proj/sandbox.git/log/?h=v2.46))
- dev: smartmontools ([7.5](https://github.com/smartmontools/smartmontools/releases/tag/RELEASE_7_5))
- docker: docker ([28.0.1](https://github.com/moby/moby/releases/tag/v28.0.1) (includes [27.4.0](https://docs.docker.com/engine/release-notes/27/#2740), [27.4.1](https://docs.docker.com/engine/release-notes/27/#2741), [28.0.0](https://github.com/moby/moby/releases/tag/v28.0.0)))
- docker: docker-buildx ([0.20.1](https://github.com/docker/buildx/releases/tag/v0.20.1) (includes [0.14.1](https://github.com/docker/buildx/releases/tag/v0.14.1), [0.15.0](https://github.com/docker/buildx/releases/tag/v0.15.0), [0.15.1](https://github.com/docker/buildx/releases/tag/v0.15.1), [0.16.0](https://github.com/docker/buildx/releases/tag/v0.16.0), [0.16.1](https://github.com/docker/buildx/releases/tag/v0.16.1), [0.16.2](https://github.com/docker/buildx/releases/tag/v0.16.2), [0.17.0](https://github.com/docker/buildx/releases/tag/v0.17.0), [0.17.1](https://github.com/docker/buildx/releases/tag/v0.17.1), [0.18.0](https://github.com/docker/buildx/releases/tag/v0.18.0), [0.19.0](https://github.com/docker/buildx/releases/tag/v0.19.0), [0.19.1](https://github.com/docker/buildx/releases/tag/v0.19.1), [0.19.2](https://github.com/docker/buildx/releases/tag/v0.19.2), [0.19.3](https://github.com/docker/buildx/releases/tag/v0.19.3), [0.20.0](https://github.com/docker/buildx/releases/tag/v0.20.0)))
- dracut ([106](https://github.com/dracut-ng/dracut-ng/releases/tag/106) (includes [054](https://github.com/dracut-ng/dracut-ng/releases/tag/054), [055](https://github.com/dracut-ng/dracut-ng/releases/tag/055), [056](https://github.com/dracut-ng/dracut-ng/releases/tag/056), [057](https://github.com/dracut-ng/dracut-ng/releases/tag/057), [058](https://github.com/dracut-ng/dracut-ng/releases/tag/058), [059](https://github.com/dracut-ng/dracut-ng/releases/tag/059), [060](https://github.com/dracut-ng/dracut-ng/releases/tag/060), [100](https://github.com/dracut-ng/dracut-ng/releases/tag/100), [101](https://github.com/dracut-ng/dracut-ng/releases/tag/101), [102](https://github.com/dracut-ng/dracut-ng/releases/tag/102), [103](https://github.com/dracut-ng/dracut-ng/releases/tag/103), [104](https://github.com/dracut-ng/dracut-ng/releases/tag/104), [105](https://github.com/dracut-ng/dracut-ng/releases/tag/105)))
- ethtool ([6.14](https://git.kernel.org/pub/scm/network/ethtool/ethtool.git/commit/?id=fba608c5a8ac943ebff046f387ade9dd364eb5a7))
- fuse-overlayfs ([1.15](https://github.com/containers/fuse-overlayfs/releases/tag/v1.15))
- git ([2.49.1](https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.49.1.adoc))
- inih ([60](https://github.com/benhoyt/inih/releases/tag/r60))
- iproute2 ([6.15.0](https://git.kernel.org/pub/scm/network/iproute2/iproute2.git/commit/?id=401816cc9c7cde7b666d4befb06a10d6359c9688))
- kbd ([2.8.0](https://lore.kernel.org/kbd/[e-mail]/T/#u))
- less ([679](https://greenwoodsoftware.com/less/news.679.html))
- libffi ([3.5.1](https://github.com/libffi/libffi/releases/tag/v3.5.1))
- libgpg-error ([1.55](https://github.com/gpg/libgpg-error/releases/tag/libgpg-error-1.55))
- libnvme ([1.14](https://github.com/linux-nvme/libnvme/releases/tag/v1.14))
- libxml2 ([2.14.5](https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.14.5))
- ncurses ([6.5_p20250329](https://invisible-island.net/ncurses/announce.html))
- nftables ([1.1.3](https://www.netfilter.org/projects/nftables/files/changes-nftables-1.1.3.txt))
- nvme-cli ([2.14](https://github.com/linux-nvme/nvme-cli/releases/tag/v2.14))
- passt ([2025.6.11](https://passt.top/passt/commit/?id=0293c6f4a316baa561a9b43388906707f8cf7e81))
- procps ([4.0.5](https://gitlab.com/procps-ng/procps/-/blob/master/NEWS?ref_type=heads#L30))
- samba ([4.20.8](https://www.samba.org/samba/history/samba-4.20.8.html))
- sqlite ([3.50.2](https://sqlite.org/releaselog/3_50_2.html))
- strace ([6.15](https://github.com/strace/strace/releases/tag/v6.15))
- sysext-containerd: containerd ([2.0.7](https://github.com/containerd/containerd/releases/tag/v2.0.7) (includes [2.0.2](https://github.com/containerd/containerd/releases/tag/v2.0.2), [2.0.5](https://github.com/containerd/containerd/releases/tag/v2.0.5), [2.0.6](https://github.com/containerd/containerd/releases/tag/v2.0.6)))
- sysext-containerd: runc ([1.3.3](https://github.com/opencontainers/runc/releases/tag/v1.3.3) (includes [1.1.15](https://github.com/opencontainers/runc/releases/tag/v1.1.15), [1.2.0](https://github.com/opencontainers/runc/releases/tag/v1.2.0), [1.2.1](https://github.com/opencontainers/runc/releases/tag/v1.2.1), [1.2.2](https://github.com/opencontainers/runc/releases/tag/v1.2.2), [1.2.3](https://github.com/opencontainers/runc/releases/tag/v1.2.3), [1.2.4](https://github.com/opencontainers/runc/releases/tag/v1.2.4), [1.2.5](https://github.com/opencontainers/runc/releases/tag/v1.2.5), [1.2.6](https://github.com/opencontainers/runc/releases/tag/v1.2.6), [1.3.0](https://github.com/opencontainers/runc/releases/tag/v1.3.0), [1.3.1](https://github.com/opencontainers/runc/releases/tag/v1.3.1), [1.3.2](https://github.com/opencontainers/runc/releases/tag/v1.3.2))
- sysext-docker: docker ([28.0.4](https://github.com/moby/moby/releases/tag/v28.0.4) (includes [28.0.2](https://github.com/moby/moby/releases/tag/v28.0.2), [28.0.3](https://github.com/moby/moby/releases/tag/v28.0.3)))
- sysext-docker: docker-buildx ([0.21.2](https://github.com/docker/buildx/releases/tag/v0.21.2) (includes [0.21.0](https://github.com/docker/buildx/releases/tag/v0.21.0), [0.21.1](https://github.com/docker/buildx/releases/tag/v0.21.1)))
- sysext-incus, sysext-podman, vmware: fuse ([3.17.3](https://raw.githubusercontent.com/libfuse/libfuse/refs/tags/fuse-3.17.3/ChangeLog.rst))
- sysext-incus: cowsql ([1.15.9](https://github.com/cowsql/cowsql/commits/v1.15.9/) (includes [1.15.8](https://github.com/cowsql/cowsql/commits/v1.15.8/)))
- sysext-incus: incus ([6.0.4](https://discuss.linuxcontainers.org/t/incus-6-0-4-lts-has-been-released/23391))
- sysext-incus: lxc ([6.0.4](https://discuss.linuxcontainers.org/t/lxc-6-0-4-lts-has-been-released/23390))
- sysext-incus: lxcfs ([6.0.4](https://discuss.linuxcontainers.org/t/lxcfs-6-0-4-lts-has-been-released/23389))
- sysext-nvidia-drivers-535, sysext-nvidia-drivers-535-open: nvidia-drivers ([535.261.03](https://docs.nvidia.com/datacenter/tesla/tesla-release-notes-535-261-03/index.html))
- sysext-nvidia-drivers-570, sysext-nvidia-drivers-570-open: nvidia-drivers (570.181 (includes 570.153.02, [570.169](https://www.nvidia.com/en-us/drivers/details/247720/), [570.172.08](https://docs.nvidia.com/datacenter/tesla/tesla-release-notes-570-172-08/index.html)))
- sysext-podman, vmware: fuse ([3.17.2](https://github.com/libfuse/libfuse/releases/tag/fuse-3.17.2) (includes [3.17.1](https://github.com/libfuse/libfuse/releases/tag/fuse-3.17.1)))
- sysext-podman: aardvark-dns ([1.14.0](https://github.com/containers/aardvark-dns/releases/tag/v1.14.0) (includes [1.13.0](https://github.com/containers/aardvark-dns/releases/tag/v1.13.0), [1.13.1](https://github.com/containers/aardvark-dns/releases/tag/v1.13.1)))
- sysext-podman: catatonit ([0.2.1](https://github.com/openSUSE/catatonit/releases/tag/v0.2.1))
- sysext-podman: conmon ([2.1.13](https://github.com/containers/conmon/releases/tag/v2.1.13) (includes [2.1.11](https://github.com/containers/conmon/releases/tag/v2.1.11), [2.1.12](https://github.com/containers/conmon/releases/tag/v2.1.12)))
- sysext-podman: containers-common ([0.63.0](https://github.com/containers/common/releases/tag/v0.63.0) (includes [0.61.0](https://github.com/containers/common/releases/tag/v0.61.0), [0.62.0](https://github.com/containers/common/releases/tag/v0.62.0), [0.62.1](https://github.com/containers/common/releases/tag/v0.62.1), [0.62.2](https://github.com/containers/common/releases/tag/v0.62.2)))
- sysext-podman: containers-image ([5.34.2](https://github.com/containers/image/releases/tag/v5.34.2) (includes [5.33.0](https://github.com/containers/image/releases/tag/v5.33.0), [5.34.0](https://github.com/containers/image/releases/tag/v5.34.0), [5.34.1](https://github.com/containers/image/releases/tag/v5.34.1)))
- sysext-podman: containers-shortnames ([2025.03.19](https://github.com/containers/shortnames/releases/tag/v2025.03.19))
- sysext-podman: containers-storage ([1.57.2](https://github.com/containers/storage/releases/tag/v1.57.2) (includes [1.56.0](https://github.com/containers/storage/releases/tag/v1.56.0), [1.57.0](https://github.com/containers/storage/releases/tag/v1.57.0), [1.57.1](https://github.com/containers/storage/releases/tag/v1.57.1)))
- sysext-podman: crun ([1.20](https://github.com/containers/crun/releases/tag/1.20) (includes [1.18](https://github.com/containers/crun/releases/tag/1.18), [1.18.1](https://github.com/containers/crun/releases/tag/1.18.1), [1.18.2](https://github.com/containers/crun/releases/tag/1.18.2), [1.19](https://github.com/containers/crun/releases/tag/1.19), [1.19.1](https://github.com/containers/crun/releases/tag/1.19.1)))
- sysext-podman: gpgme ([1.24.3](https://dev.gnupg.org/T7659) (includes [1.24.2](https://dev.gnupg.org/T7524)))
- sysext-podman: netavark ([1.14.1](https://github.com/containers/netavark/releases/tag/v1.14.1) (includes [1.13.0](https://github.com/containers/netavark/releases/tag/v1.13.0), [1.13.1](https://github.com/containers/netavark/releases/tag/v1.13.1), [1.14.0](https://github.com/containers/netavark/releases/tag/v1.14.0)))
- sysext-podman: passt ([2025.04.15](https://archives.passt.top/passt-user/20250415233140.35074c4b@elisabeth/T/#u) (includes [2025.01.21](https://archives.passt.top/passt-user/20250121182827.652400c8@elisabeth/T/#u), [2025.02.17](https://archives.passt.top/passt-user/20250217101614.561b23bc@elisabeth/T/#u)))
- sysext-podman: podman ([5.5.2](https://github.com/containers/podman/releases/tag/v5.5.2) (includes [5.3.2](https://github.com/containers/podman/releases/tag/v5.3.2))
- sysext-python: cachecontrol ([0.14.3](https://github.com/psf/cachecontrol/releases/tag/v0.14.3) (includes [0.14.2](https://github.com/psf/cachecontrol/releases/tag/v0.14.2)))
- sysext-python: charset-normalizer ([3.4.2](https://github.com/jawah/charset_normalizer/releases/tag/3.4.2))
- sysext-python: distlib ([0.4.0](https://github.com/pypa/distlib/blob/0.4.0/CHANGES.rst#040))
- sysext-python: ensurepip-pip ([25.1.1](https://pip.pypa.io/en/stable/news/#v25-1-1))
- sysext-python: jaraco-collections ([5.2.1](https://github.com/jaraco/jaraco.collections/releases/tag/v5.2.1))
- sysext-python: jaraco-functools ([4.2.1](https://github.com/jaraco/jaraco.functools/releases/tag/v4.2.1))
- sysext-python: more-itertools ([10.7.0](https://github.com/more-itertools/more-itertools/blob/v10.7.0/docs/versions.rst) (includes [10.6.0](https://github.com/more-itertools/more-itertools/releases/tag/v10.6.0)))
- sysext-python: msgpack ([1.1.1](https://github.com/msgpack/msgpack-python/releases/tag/v1.1.1))
- sysext-python: packaging ([25.0](https://github.com/pypa/packaging/releases/tag/25.0))
- sysext-python: pip ([25.1.1](https://github.com/pypa/pip/blob/25.1.1/NEWS.rst) (includes [25.0](https://github.com/pypa/pip/blob/25.0/NEWS.rst), [25.0.1](https://github.com/pypa/pip/blob/25.0.1/NEWS.rst), [25.1](https://github.com/pypa/pip/blob/25.1/NEWS.rst)))
- sysext-python: platformdirs ([4.3.8](https://github.com/tox-dev/platformdirs/releases/tag/4.3.8) (includes [4.3.7](https://github.com/tox-dev/platformdirs/releases/tag/4.3.7)))
- sysext-python: pygments ([2.19.2](https://pygments.org/docs/changelog/#version-2-19-2))
- sysext-python: requests ([2.32.4](https://github.com/psf/requests/releases/tag/v2.32.4) (includes [2.32.3](https://github.com/psf/requests/releases/tag/v2.32.3)))
- sysext-python: resolvelib ([1.2.0](https://github.com/sarugaku/resolvelib/blob/main/CHANGELOG.rst#120-2025-06-26))
- sysext-python: rich ([14.1.0](https://github.com/Textualize/rich/releases/tag/v14.1.0) (includes [14.0.0](https://github.com/Textualize/rich/releases/tag/v14.0.0)))
- sysext-python: setuptools ([80.9.0](https://github.com/pypa/setuptools/releases/tag/v80.9.0) (includes [75.7.0](https://github.com/pypa/setuptools/blob/v75.7.0/NEWS.rst#v7570), [75.8.0](https://github.com/pypa/setuptools/blob/v75.8.0/NEWS.rst#v7580), [75.8.1](https://github.com/pypa/setuptools/blob/v75.8.1/NEWS.rst), [75.8.2](https://github.com/pypa/setuptools/blob/v75.8.2/NEWS.rst), [76.0.0](https://github.com/pypa/setuptools/blob/v76.0.0/NEWS.rst), [76.1.0](https://github.com/pypa/setuptools/blob/v76.1.0/NEWS.rst), [77.0.0](https://github.com/pypa/setuptools/blob/v77.0.0/NEWS.rst), [77.0.1](https://github.com/pypa/setuptools/blob/v77.0.1/NEWS.rst), [77.0.2](https://github.com/pypa/setuptools/blob/v77.0.2/NEWS.rst), [77.0.3](https://github.com/pypa/setuptools/blob/v77.0.3/NEWS.rst), [78.0.0](https://github.com/pypa/setuptools/blob/v78.0.0/NEWS.rst), [78.0.1](https://github.com/pypa/setuptools/blob/v78.0.1/NEWS.rst), [78.0.2](https://github.com/pypa/setuptools/blob/v78.0.2/NEWS.rst), [78.1.0](https://github.com/pypa/setuptools/blob/v78.1.0/NEWS.rst), [79.0.0](https://github.com/pypa/setuptools/releases/tag/v79.0.0), [80.0.0](https://github.com/pypa/setuptools/releases/tag/v80.0.0), [80.1.0](https://github.com/pypa/setuptools/releases/tag/v80.1.0), [80.2.0](https://github.com/pypa/setuptools/releases/tag/v80.2.0), [80.3.0](https://github.com/pypa/setuptools/releases/tag/v80.3.0), [80.4.0](https://github.com/pypa/setuptools/releases/tag/v80.4.0), [80.6.0](https://github.com/pypa/setuptools/releases/tag/v80.6.0), [80.7.0](https://github.com/pypa/setuptools/releases/tag/v80.7.0), [80.8.0](https://github.com/pypa/setuptools/releases/tag/v80.8.0)))
- sysext-python: setuptools-scm ([8.3.1](https://github.com/pypa/setuptools-scm/releases/tag/v8.3.1) (includes [8.2.0](https://github.com/pypa/setuptools-scm/blob/v8.2.0/CHANGELOG.md), [8.2.1](https://github.com/pypa/setuptools-scm/blob/v8.2.1/CHANGELOG.md), [8.3.0](https://github.com/pypa/setuptools-scm/releases/tag/v8.3.0)))
- sysext-python: trove-classifiers ([2025.8.26.11](https://github.com/pypa/trove-classifiers/releases/tag/2025.8.26.11) (includes [2025.3.3.18](https://github.com/pypa/trove-classifiers/releases/tag/2025.3.3.18), [2025.3.19.19](https://github.com/pypa/trove-classifiers/releases/tag/2025.3.19.19), [2025.4.11.15](https://github.com/pypa/trove-classifiers/releases/tag/2025.4.11.15), [2025.4.28.22](https://github.com/pypa/trove-classifiers/releases/tag/2025.4.28.22), [2025.5.1.12](https://github.com/pypa/trove-classifiers/releases/tag/2025.5.1.12), [2025.5.7.19](https://github.com/pypa/trove-classifiers/releases/tag/2025.5.7.19), [2025.5.8.13](https://github.com/pypa/trove-classifiers/releases/tag/2025.5.8.13), [2025.5.8.15](https://github.com/pypa/trove-classifiers/releases/tag/2025.5.8.15), [2025.5.9.12](https://github.com/pypa/trove-classifiers/releases/tag/2025.5.9.12), [2025.8.6.13](https://github.com/pypa/trove-classifiers/releases/tag/2025.8.6.13)))
- sysext-python: truststore ([0.10.4](https://raw.githubusercontent.com/sethmlarson/truststore/refs/tags/v0.10.4/CHANGELOG.md) (includes [0.10.1](https://github.com/sethmlarson/truststore/blob/v0.10.1/CHANGELOG.md)))
- sysext-python: typing-extensions ([4.14.1](https://github.com/python/typing_extensions/releases/tag/4.14.1) (includes [4.13.0](https://github.com/python/typing_extensions/releases/tag/4.13.0), [4.13.1](https://github.com/python/typing_extensions/releases/tag/4.13.1), [4.13.2](https://github.com/python/typing_extensions/releases/tag/4.13.2), [4.14.0](https://github.com/python/typing_extensions/releases/tag/4.14.0)))
- sysext-python: urllib3 ([2.5.0](https://github.com/urllib3/urllib3/releases/tag/2.5.0) (includes [2.4.0](https://github.com/urllib3/urllib3/releases/tag/2.4.0)))
- sysext-python: wheel ([0.46.1](https://github.com/pypa/wheel/releases/tag/0.46.1) (includes [0.46.0](https://github.com/pypa/wheel/releases/tag/0.46.0)))
- sysext-zfs: zfs ([2.3.2](https://github.com/openzfs/zfs/releases/tag/zfs-2.3.2) (includes [2.3.0](https://github.com/openzfs/zfs/releases/tag/zfs-2.3.0), [2.3.1](https://github.com/openzfs/zfs/releases/tag/zfs-2.3.1)))
- userspace-rcu ([0.15.3](https://lkml.org/lkml/2025/5/14/1580))
- util-linux ([2.41.1](https://github.com/util-linux/util-linux/blob/master/Documentation/releases/v2.41-ReleaseNotes))
- vmware: libxslt ([1.1.43](https://gitlab.gnome.org/GNOME/libxslt/-/releases/v1.1.43) (includes [1.1.40](https://gitlab.gnome.org/GNOME/libxslt/-/releases/v1.1.40), [1.1.41](https://gitlab.gnome.org/GNOME/libxslt/-/releases/v1.1.41), [1.1.42](https://gitlab.gnome.org/GNOME/libxslt/-/releases/v1.1.42)))
- vmware: open-vm-tools ([13.0.0](https://github.com/vmware/open-vm-tools/releases/tag/stable-13.0.0))
- vmware: xmlsec ([1.3.7](https://github.com/lsh123/xmlsec/releases/tag/1.3.7) (includes [1.3.6](https://github.com/lsh123/xmlsec/releases/tag/1.3.6)))
- xfsprogs ([6.14.0](https://lkml.org/lkml/2025/4/14/1443))
- zfs ([2.3.3](https://github.com/openzfs/zfs/releases/tag/zfs-2.3.3))

_Changes since **Beta 4459.1.0**_

#### Security fixes:

- Linux ([CVE-2025-40109](https://nvd.nist.gov/vuln/detail/CVE-2025-40109), [CVE-2025-40107](https://nvd.nist.gov/vuln/detail/CVE-2025-40107), [CVE-2025-40028](https://nvd.nist.gov/vuln/detail/CVE-2025-40028), [CVE-2025-40027](https://nvd.nist.gov/vuln/detail/CVE-2025-40027), [CVE-2025-40026](https://nvd.nist.gov/vuln/detail/CVE-2025-40026), [CVE-2025-40000](https://nvd.nist.gov/vuln/detail/CVE-2025-40000), [CVE-2025-39995](https://nvd.nist.gov/vuln/detail/CVE-2025-39995), [CVE-2025-40052](https://nvd.nist.gov/vuln/detail/CVE-2025-40052), [CVE-2025-40061](https://nvd.nist.gov/vuln/detail/CVE-2025-40061), [CVE-2025-40060](https://nvd.nist.gov/vuln/detail/CVE-2025-40060), [CVE-2025-40059](https://nvd.nist.gov/vuln/detail/CVE-2025-40059), [CVE-2025-40058](https://nvd.nist.gov/vuln/detail/CVE-2025-40058), [CVE-2025-40057](https://nvd.nist.gov/vuln/detail/CVE-2025-40057), [CVE-2025-40056](https://nvd.nist.gov/vuln/detail/CVE-2025-40056), [CVE-2025-40055](https://nvd.nist.gov/vuln/detail/CVE-2025-40055), [CVE-2025-40081](https://nvd.nist.gov/vuln/detail/CVE-2025-40081), [CVE-2025-40080](https://nvd.nist.gov/vuln/detail/CVE-2025-40080), [CVE-2025-40079](https://nvd.nist.gov/vuln/detail/CVE-2025-40079), [CVE-2025-40078](https://nvd.nist.gov/vuln/detail/CVE-2025-40078), [CVE-2025-40071](https://nvd.nist.gov/vuln/detail/CVE-2025-40071), [CVE-2025-40070](https://nvd.nist.gov/vuln/detail/CVE-2025-40070), [CVE-2025-40068](https://nvd.nist.gov/vuln/detail/CVE-2025-40068), [CVE-2025-40067](https://nvd.nist.gov/vuln/detail/CVE-2025-40067), [CVE-2025-40062](https://nvd.nist.gov/vuln/detail/CVE-2025-40062), [CVE-2025-40053](https://nvd.nist.gov/vuln/detail/CVE-2025-40053), [CVE-2025-40029](https://nvd.nist.gov/vuln/detail/CVE-2025-40029), [CVE-2025-40038](https://nvd.nist.gov/vuln/detail/CVE-2025-40038), [CVE-2025-40037](https://nvd.nist.gov/vuln/detail/CVE-2025-40037), [CVE-2025-40036](https://nvd.nist.gov/vuln/detail/CVE-2025-40036), [CVE-2025-40035](https://nvd.nist.gov/vuln/detail/CVE-2025-40035), [CVE-2025-40033](https://nvd.nist.gov/vuln/detail/CVE-2025-40033), [CVE-2025-40051](https://nvd.nist.gov/vuln/detail/CVE-2025-40051), [CVE-2025-40049](https://nvd.nist.gov/vuln/detail/CVE-2025-40049), [CVE-2025-40031](https://nvd.nist.gov/vuln/detail/CVE-2025-40031), [CVE-2025-40048](https://nvd.nist.gov/vuln/detail/CVE-2025-40048), [CVE-2025-40047](https://nvd.nist.gov/vuln/detail/CVE-2025-40047), [CVE-2025-40045](https://nvd.nist.gov/vuln/detail/CVE-2025-40045), [CVE-2025-40044](https://nvd.nist.gov/vuln/detail/CVE-2025-40044), [CVE-2025-40043](https://nvd.nist.gov/vuln/detail/CVE-2025-40043), [CVE-2025-40039](https://nvd.nist.gov/vuln/detail/CVE-2025-40039), [CVE-2025-40030](https://nvd.nist.gov/vuln/detail/CVE-2025-40030), [CVE-2025-40018](https://nvd.nist.gov/vuln/detail/CVE-2025-40018), [CVE-2025-40004](https://nvd.nist.gov/vuln/detail/CVE-2025-40004), [CVE-2025-40032](https://nvd.nist.gov/vuln/detail/CVE-2025-40032), [CVE-2025-40042](https://nvd.nist.gov/vuln/detail/CVE-2025-40042), [CVE-2025-40019](https://nvd.nist.gov/vuln/detail/CVE-2025-40019))
- sysext-containerd: containerd ([CVE-2024-25621](https://www.cve.org/CVERecord?id=CVE-2024-25621), [CVE-2025-64329](https://www.cve.org/CVERecord?id=CVE-2025-64329))
- sysext-containerd: runc ([CVE-2025-31133](https://www.cve.org/CVERecord?id=CVE-2025-31133), [CVE-2025-52565](https://www.cve.org/CVERecord?id=CVE-2025-52565), [CVE-2025-52881](https://www.cve.org/CVERecord?id=CVE-2025-52881))

#### Bug fixes:

- Enabled `CONFIG_MEMCG_V1` to mitigate cgroupsv1 removal (e.g JVM) ([Flatcar#1884](https://github.com/flatcar/Flatcar/issues/1884))
- Excluded TUN/TAP interfaces from the default DHCP network configuration to solve conflicts with the programs that created them ([Flatcar#1933](https://github.com/flatcar/Flatcar/issues/1933))
- Fixed Intel microcode updates which were broken in recent Alpha and Beta releases by switching back to built-in extra firmware instead of early cpio inclusion ([Flatcar#1909](https://github.com/flatcar/Flatcar/issues/1909))
- Fixed that the needed Flatcar extensions don't get removed on update which caused a re-download ([update_engine#51](https://github.com/flatcar/update_engine/pull/51))

#### Changes:

- Scaleway: The Linux console is now attached to the correct console port. ([scripts#3383](https://github.com/flatcar/scripts/pull/3383))

#### Updates:

- Linux ([6.12.54](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.54) (includes [6.12.53](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.53), [6.12.52](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.52)))
- sysext-containerd: containerd ([2.0.7](https://github.com/containerd/containerd/releases/tag/v2.0.7) (includes [2.0.6](https://github.com/containerd/containerd/releases/tag/v2.0.6)))
- sysext-containerd: runc ([1.3.3](https://github.com/opencontainers/runc/releases/tag/v1.3.3) (includes [1.3.2](https://github.com/opencontainers/runc/releases/tag/v1.3.2), [1.3.1](https://github.com/opencontainers/runc/releases/tag/v1.3.1), [1.3.0](https://github.com/opencontainers/runc/releases/tag/v1.3.0)))

#### Beta 4459.1.1 release

_Changes since **Beta 4459.1.0**_

#### Security fixes:

- Linux ([CVE-2025-40109](https://nvd.nist.gov/vuln/detail/CVE-2025-40109), [CVE-2025-40107](https://nvd.nist.gov/vuln/detail/CVE-2025-40107), [CVE-2025-40028](https://nvd.nist.gov/vuln/detail/CVE-2025-40028), [CVE-2025-40027](https://nvd.nist.gov/vuln/detail/CVE-2025-40027), [CVE-2025-40026](https://nvd.nist.gov/vuln/detail/CVE-2025-40026), [CVE-2025-40000](https://nvd.nist.gov/vuln/detail/CVE-2025-40000), [CVE-2025-39995](https://nvd.nist.gov/vuln/detail/CVE-2025-39995), [CVE-2025-40052](https://nvd.nist.gov/vuln/detail/CVE-2025-40052), [CVE-2025-40061](https://nvd.nist.gov/vuln/detail/CVE-2025-40061), [CVE-2025-40060](https://nvd.nist.gov/vuln/detail/CVE-2025-40060), [CVE-2025-40059](https://nvd.nist.gov/vuln/detail/CVE-2025-40059), [CVE-2025-40058](https://nvd.nist.gov/vuln/detail/CVE-2025-40058), [CVE-2025-40057](https://nvd.nist.gov/vuln/detail/CVE-2025-40057), [CVE-2025-40056](https://nvd.nist.gov/vuln/detail/CVE-2025-40056), [CVE-2025-40055](https://nvd.nist.gov/vuln/detail/CVE-2025-40055), [CVE-2025-40081](https://nvd.nist.gov/vuln/detail/CVE-2025-40081), [CVE-2025-40080](https://nvd.nist.gov/vuln/detail/CVE-2025-40080), [CVE-2025-40079](https://nvd.nist.gov/vuln/detail/CVE-2025-40079), [CVE-2025-40078](https://nvd.nist.gov/vuln/detail/CVE-2025-40078), [CVE-2025-40071](https://nvd.nist.gov/vuln/detail/CVE-2025-40071), [CVE-2025-40070](https://nvd.nist.gov/vuln/detail/CVE-2025-40070), [CVE-2025-40068](https://nvd.nist.gov/vuln/detail/CVE-2025-40068), [CVE-2025-40067](https://nvd.nist.gov/vuln/detail/CVE-2025-40067), [CVE-2025-40062](https://nvd.nist.gov/vuln/detail/CVE-2025-40062), [CVE-2025-40053](https://nvd.nist.gov/vuln/detail/CVE-2025-40053), [CVE-2025-40029](https://nvd.nist.gov/vuln/detail/CVE-2025-40029), [CVE-2025-40038](https://nvd.nist.gov/vuln/detail/CVE-2025-40038), [CVE-2025-40037](https://nvd.nist.gov/vuln/detail/CVE-2025-40037), [CVE-2025-40036](https://nvd.nist.gov/vuln/detail/CVE-2025-40036), [CVE-2025-40035](https://nvd.nist.gov/vuln/detail/CVE-2025-40035), [CVE-2025-40033](https://nvd.nist.gov/vuln/detail/CVE-2025-40033), [CVE-2025-40051](https://nvd.nist.gov/vuln/detail/CVE-2025-40051), [CVE-2025-40049](https://nvd.nist.gov/vuln/detail/CVE-2025-40049), [CVE-2025-40031](https://nvd.nist.gov/vuln/detail/CVE-2025-40031), [CVE-2025-40048](https://nvd.nist.gov/vuln/detail/CVE-2025-40048), [CVE-2025-40047](https://nvd.nist.gov/vuln/detail/CVE-2025-40047), [CVE-2025-40045](https://nvd.nist.gov/vuln/detail/CVE-2025-40045), [CVE-2025-40044](https://nvd.nist.gov/vuln/detail/CVE-2025-40044), [CVE-2025-40043](https://nvd.nist.gov/vuln/detail/CVE-2025-40043), [CVE-2025-40039](https://nvd.nist.gov/vuln/detail/CVE-2025-40039), [CVE-2025-40030](https://nvd.nist.gov/vuln/detail/CVE-2025-40030), [CVE-2025-40018](https://nvd.nist.gov/vuln/detail/CVE-2025-40018), [CVE-2025-40004](https://nvd.nist.gov/vuln/detail/CVE-2025-40004), [CVE-2025-40032](https://nvd.nist.gov/vuln/detail/CVE-2025-40032), [CVE-2025-40042](https://nvd.nist.gov/vuln/detail/CVE-2025-40042), [CVE-2025-40019](https://nvd.nist.gov/vuln/detail/CVE-2025-40019))
- containerd ([CVE-2024-25621](https://www.cve.org/CVERecord?id=CVE-2024-25621), [CVE-2025-64329](https://www.cve.org/CVERecord?id=CVE-2025-64329))
- runc ([CVE-2025-31133](https://www.cve.org/CVERecord?id=CVE-2025-31133), [CVE-2025-52565](https://www.cve.org/CVERecord?id=CVE-2025-52565), [CVE-2025-52881](https://www.cve.org/CVERecord?id=CVE-2025-52881))

#### Bug fixes:

- Enabled `CONFIG_MEMCG_V1` to mitigate cgroupsv1 removal (e.g JVM) ([Flatcar#1884](https://github.com/flatcar/Flatcar/issues/1884))
- Excluded TUN/TAP interfaces from the default DHCP network configuration to solve conflicts with the programs that created them ([Flatcar#1933](https://github.com/flatcar/Flatcar/issues/1933))
- Fixed Intel microcode updates which were broken in recent Alpha and Beta releases by switching back to built-in extra firmware instead of early cpio inclusion ([Flatcar#1909](https://github.com/flatcar/Flatcar/issues/1909))
- Fixed that the needed Flatcar extensions don't get removed on update which caused a re-download ([update_engine#51](https://github.com/flatcar/update_engine/pull/51))

#### Changes:

- Scaleway: The Linux console is now attached to the correct console port. ([scripts#3383](https://github.com/flatcar/scripts/pull/3383))

#### Updates:

- Linux ([6.12.54](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.54) (includes [6.12.53](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.53), [6.12.52](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.52)))
- sysext-containerd: containerd ([2.0.7](https://github.com/containerd/containerd/releases/tag/v2.0.7) (includes [2.0.6](https://github.com/containerd/containerd/releases/tag/v2.0.6)))
- sysext-containerd: runc ([1.3.3](https://github.com/opencontainers/runc/releases/tag/v1.3.3) (includes [1.3.2](https://github.com/opencontainers/runc/releases/tag/v1.3.2), [1.3.1](https://github.com/opencontainers/runc/releases/tag/v1.3.1), [1.3.0](https://github.com/opencontainers/runc/releases/tag/v1.3.0)))

#### Alpha 4515.0.0 release

_Changes since **Alpha 4487.0.1**_

#### Security fixes:

- containerd ([CVE-2024-25621](https://www.cve.org/CVERecord?id=CVE-2024-25621), [CVE-2025-64329](https://www.cve.org/CVERecord?id=CVE-2025-64329))
- expat ([CVE-2025-59375](https://www.cve.org/CVERecord?id=CVE-2025-59375))
- intel-microcode ([CVE-2024-28956](https://www.cve.org/CVERecord?id=CVE-2024-28956), [CVE-2024-43420](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43420), [CVE-2024-45332](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45332), [CVE-2025-20012](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-20012), [CVE-2025-20054](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-20054), [CVE-2025-20103](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-20103), [CVE-2025-20623](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-20623), [CVE-2025-24495](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24495), [CVE-2025-20053](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-20053), [CVE-2025-20109](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-20109), [CVE-2025-22839](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22839), [CVE-2025-22840](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22840), [CVE-2025-22889](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22889), [CVE-2025-26403](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26403))
- nvidia-drivers ([CVE-2025-23280](https://www.cve.org/CVERecord?id=CVE-2025-23280), [CVE-2025-23282](https://www.cve.org/CVERecord?id=CVE-2025-23282), [CVE-2025-23300](https://www.cve.org/CVERecord?id=CVE-2025-23300), [CVE-2025-23330](https://www.cve.org/CVERecord?id=CVE-2025-23330), [CVE-2025-23332](https://www.cve.org/CVERecord?id=CVE-2025-23332), [CVE-2025-23345](https://www.cve.org/CVERecord?id=CVE-2025-23345))
- openssh ([CVE-2025-61984](https://www.cve.org/CVERecord?id=CVE-2025-61984), [CVE-2025-61985](https://www.cve.org/CVERecord?id=CVE-2025-61985))
- openssl ([CVE-2025-9230](https://www.cve.org/CVERecord?id=CVE-2025-9230), [CVE-2025-9231](https://www.cve.org/CVERecord?id=CVE-2025-9231), [CVE-2025-9232](https://www.cve.org/CVERecord?id=CVE-2025-9232))
- runc ([CVE-2025-31133](https://www.cve.org/CVERecord?id=CVE-2025-31133), [CVE-2025-52565](https://www.cve.org/CVERecord?id=CVE-2025-52565), [CVE-2025-52881](https://www.cve.org/CVERecord?id=CVE-2025-52881))

#### Bug fixes:

- Alpha only: Added Fusion SCSI disk drivers back to the initrd after they got lost in the rework ([Flatcar#1924](https://github.com/flatcar/Flatcar/issues/1924))
- Configured the services in the overlaybd sysext to start automatically like the other sysexts. Note that the sysext must be enabled at boot time for this to happen, otherwise you need to call `systemd-tmpfiles --create` and `systemctl daemon-reload` first.

#### Changes:

- Alpha only: Reduced Azure image size again to 30 GB as before by shrinking the root partition to compensate for the growth of the other partitions ([scripts#3460](https://github.com/flatcar/scripts/pull/3460))
- The way that files for building custom kernel modules are installed has changed from a Ubuntu-inspired method to the standard upstream kernel method. In the unlikely event that this breaks your module builds, please let the Flatcar team know immediately.

#### Updates:

- Linux Firmware ([20251011](https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tag/?h=20251011), [20251021](https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tag/?h=20251021))
- SDK: cmake ([3.31.9](https://cmake.org/cmake/help/v3.31/release/3.31.html#id1))
- SDK: go ([1.25.1](https://go.dev/doc/devel/release#go1.25.minor) (includes [1.25](https://go.dev/doc/go1.25)))
- SDK: qemu ([10.0.5](https://wiki.qemu.org/ChangeLog/10.0))
- azure, dev: inotify-tools ([4.25.9.0](https://github.com/inotify-tools/inotify-tools/releases/tag/4.25.9.0))
- azure, stackit: chrony ([4.8](https://gitlab.com/chrony/chrony/-/raw/4.8/NEWS))
- base, dev: bind ([9.18.38](https://bind9.readthedocs.io/en/v9.18.38/notes.html#notes-for-bind-9-18-38))
- base, dev: bpftool ([7.6.0](https://github.com/libbpf/bpftool/releases/tag/v7.6.0))
- base, dev: btrfs-progs ([6.16.1](https://github.com/kdave/btrfs-progs/releases/tag/v6.16.1))
- base, dev: expat ([2.7.3](https://raw.githubusercontent.com/libexpat/libexpat/refs/tags/R_2_7_3/expat/Changes))
- base, dev: gettext ([0.23.2](https://gitweb.git.savannah.gnu.org/gitweb/?p=gettext.git;a=blob_plain;f=NEWS;h=a5cc8a63eb4f06e4a1171afda862812feb67d693;hb=e8e6cb71aec0de1f5758ac21327bb8cd69e33731) (includes [0.23.1](https://gitweb.git.savannah.gnu.org/gitweb/?p=gettext.git;a=blob_plain;f=NEWS;h=4aafedf9b10a66891838e1f35c7af020c6124ee0;hb=d9b0432a825bfe3fc72f9a081d295a9528cd8aac), [0.23.0](https://gitweb.git.savannah.gnu.org/gitweb/?p=gettext.git;a=blob_plain;f=NEWS;h=9d87d45408f510d15856a1dda8a9376573f0a9c5;hb=c12b25dc82104691ca80c4da1cbc538fcab42bf5)))
- base, dev: git ([2.51.0](https://github.com/git/git/blob/v2.51.0/Documentation/RelNotes/2.51.0.adoc) (includes [2.50.0](https://github.com/git/git/blob/v2.50.0/Documentation/RelNotes/2.50.0.adoc)))
- base, dev: intel-microcode ([20250812](https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20250812) (includes [20250512](https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20250512)))
- base, dev: libxml2 ([2.14.6](https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.14.6) (includes [2.14.5](https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.14.5), [2.14.4](https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.14.4), [2.14.3](https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.14.3), [2.14.2](https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.14.2), [2.14.1](https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.14.1), [2.14.0](https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.14.0)))
- base, dev: nftables ([1.1.5](https://www.netfilter.org/projects/nftables/files/changes-nftables-1.1.5.txt))
- base, dev: nvidia-drivers-service (amd64) ([535.274.02](https://docs.nvidia.com/datacenter/tesla/tesla-release-notes-535-274-02/index.html))
- base, dev: nvidia-drivers-service (arm64) ([570.195.03](https://docs.nvidia.com/datacenter/tesla/tesla-release-notes-570-195-03/index.html))
- base, dev: openssh ([10.2_p1](https://www.openssh.com/txt/release-10.2) (includes [10.1](https://www.openssh.com/txt/release-10.1)))
- base, dev: openssl ([3.4.3](https://github.com/openssl/openssl/releases/tag/openssl-3.4.3))
- base, dev: xfsprogs ([6.16.0](https://web.git.kernel.org/pub/scm/fs/xfs/xfsprogs-dev.git/tree/doc/CHANGES?h=v6.16.0) (includes [6.15.0](https://web.git.kernel.org/pub/scm/fs/xfs/xfsprogs-dev.git/tree/doc/CHANGES?h=v6.15.0)))
- sysext-containerd: containerd ([2.1.5](https://github.com/containerd/containerd/releases/tag/v2.1.5) (includes [2.1.4](https://github.com/containerd/containerd/releases/tag/v2.1.4)))
- sysext-containerd: runc ([1.3.3](https://github.com/opencontainers/runc/releases/tag/v1.3.3) (includes [1.3.2](https://github.com/opencontainers/runc/releases/tag/v1.3.2), [1.3.1](https://github.com/opencontainers/runc/releases/tag/v1.3.1)))
- sysext-nvidia-drivers-535, sysext-nvidia-drivers-535-open: nvidia-drivers ([535.274.02](https://docs.nvidia.com/datacenter/tesla/tesla-release-notes-535-274-02/index.html))
- sysext-nvidia-drivers-570, sysext-nvidia-drivers-570-open: nvidia-drivers ([570.195.03](https://docs.nvidia.com/datacenter/tesla/tesla-release-notes-570-195-03/index.html))
- sysext-podman: crun ([1.21](https://github.com/containers/crun/releases/tag/1.21))
- sysext-podman: netavark ([1.15.2](https://github.com/containers/netavark/releases/tag/v1.15.2) (includes [1.15.1](https://github.com/containers/netavark/releases/tag/v1.15.1), [1.15.0](https://github.com/containers/netavark/releases/tag/v1.15.0)))
- sysext-podman: passt ([2025.06.11](https://archives.passt.top/passt-user/20250611175947.7d540ddc@elisabeth/T/#u))
- sysext-python: platformdirs ([4.4.0](https://github.com/tox-dev/platformdirs/releases/tag/4.4.0))
- sysext-python: typing-extensions ([4.15.0](https://raw.githubusercontent.com/python/typing_extensions/refs/tags/4.15.0/CHANGELOG.md))
- systemd ([257.9](https://github.com/systemd/systemd/blob/147c30b613960bc24595435bd902a5c4beb5aba9/NEWS#L3))

Best,
The Flatcar Container Linux Maintainers

---

### Communication

#### Go/No-Go message for Matrix/Slack

Go/No-Go Meeting for Alpha 4515.0.0, Beta 4459.1.1 and Stable 4459.2.0
Pre-view images are available in https://bincache.flatcar-linux.net/images/amd64/$VERSION/
Tracking issue: https://github.com/flatcar/Flatcar/issues/1938
The Go/No-Go document is in our HackMD @flatcar namespace
Link: https://hackmd.io/Op0DgAoeTKi7HXCjAF4X3Q?view

Please give your Go/No-Go vote with 💚 for Go, ❌ for No-Go, and ✋ for Wait.

Contributors & community feel free to put your suggestions, thoughts or comments on the document or here in the chat.

@yudocaa.3p:matrix.org @jerseychewi:matrix.org @tormath1:matrix.org @ader1990:matrix.org @thilofm:matrix.org @pothos:matrix.org @dongsupark:matrix.org @krnowak:matrix.org @gabriel-samfira:matrix.org @jan_bronicki:matrix.org @ervin.racz:matrix.org @dzatovic:matrix.org @jepio:matrix.org

#### Mastodon

_The toot (from [@flatcar](https://hachyderm.io/@flatcar)) goes out after the changelog update has been published; it includes a link to the web changelog._

--

🌅 New day, new Flatcar releases!
Alpha 4515.0.0, Beta 4459.1.1, and Stable 4459.2.0 are out with Linux 6.12.54,
cgroups v1 kernel config mitigations, and major security
updates across the stack.
#Flatcar #Linux #ContainerLinux

--

🚨 All channels include critical fixes for runc vulnerabilities -
CVE-2025-31133, CVE-2025-52565, CVE-2025-52881. Update soon to stay safe!
#Flatcar #Security #runc

--

🛡️ Stable 4459.2.0 → runc vuln fixes ✅ + Linux 6.12.54, new overlaybd sysext,
Hyper-V using systemd-sysext layering, cgroups v1 mitigation,
and CVE patches for OpenSSH, OpenSSL, curl, git, libxml2, NVIDIA, Intel µcode &
more.

--

⚙️ Beta 4459.1.1 → runc vuln fixes ✅, kernel CVE fixes, DHCP/TUN-TAP conflict fix, cgroups v1 mitigation, and improved Intel µcode
handling.

--

🚀 Alpha 4515.0.0 → runc vuln fixes ✅, plus OpenSSH/OpenSSL/Intel/NVIDIA CVEs,
Azure image shrunk to 30 GB, Fusion SCSI disk drivers are back, and
refreshed SDK & firmware.

--

📜 Releases in the usual place:
https://www.flatcar.org/releases/
#Flatcar #ContainerLinux #Release

#### Kubernetes Slack

_This goes in the #flatcar channel_

🌅 *New Flatcar releases are live!*
- Alpha 4515.0.0 (new major)
- Beta 4459.1.1 (maintenance release)
- Stable 4459.2.0 (new major)

Ships with Linux 6.12.54, cgroups v1 kernel mitigations, and major security updates.

🚨 *All channels include critical runc fixes:*
CVE-2025-31133, CVE-2025-52565, CVE-2025-52881 — update soon!

🛡️ Stable: runc + Hyper-V via systemd-sysext, and CVE patches
⚙️ Beta: runc + DHCP/TUN-TAP fix, Intel µcode improvements
🚀 Alpha: runc + OpenSSH/OpenSSL/Intel/NVIDIA fixes, Azure image shrunk to 30 GB

📜 *Full release notes:*
🔗 https://www.flatcar.org/releases/