Flatcar Container Linux

stable-4757.2.3Provisioning & Runtime

Oct 29, 2026

A security and maintenance release with Linux vulnerability fixes, bundled component updates, and a narrower system CA trust store. Linux 6.12.114 and ca-certificates 3.132 are among the bundled component updates, while the CA bundle now contains only Mozilla TLS-trusted roots.

Action needed (2)

securityhighLinux vulnerability fixes
Linux vulnerability fixes cover CVE-2026-99092, CVE-2026-99098, CVE-2026-99082, CVE-2026-99085, CVE-2026-99083, CVE-2026-99019, CVE-2026-99044, CVE-2026-99041, CVE-2026-99014, CVE-2026-99028, CVE-2026-99027, CVE-2026-98974, CVE-2026-98981, CVE-2026-99009, CVE-2026-98977, CVE-2026-99002, CVE-2026-98993, CVE-2026-98985, CVE-2026-98975, and CVE-2026-98916.
CVE-2026-99092 CVE-2026-99098 CVE-2026-99082
breakingSystem CA bundle trust roots
The system CA bundle now contains only roots that Mozilla trusts for TLS. The 49 roots trusted only for S/MIME were removed from /etc/ssl/certs and ca-certificates.crt, reducing the bundle from 167 to 118 roots.
scripts#4333

All 2 other recorded changesvalue changes 2

value changes (2)

- Linux ([6.12.114](https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tag/?h=v6.12.114))
- ca-certificates ([3.132](https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_132.html))

Add Flatcar Container Linux to your stack

A weekly email arrives when a release needs action. Like the security patches and breaking changes in this release.

Add to stack →

Official release note ↗All Flatcar Container Linux releases →