Releases — RATATOSK

metal3-iov0.13.0Provisioning & RuntimeMay 8, 2026

ACTION 1CHECK 3PLAN 1OTHER 40View full analysis

This release removes the iRMC driver and legacy vbmctl entrypoint, deprecates BMH.Spec.Firmware, and changes defaults and constraints. It also adds HostClaim and vbmctl capabilities, corrects bugs, and updates dependencies.

Action needed (1)

breakingManager TLS default set to unset
The manager TLS default is set back to unset in this release.

Check if affected (3)

breakingThe iRMC driver, removed
Applies if you use the iRMC driver.
breakingPreprovisioningImage required for deprovisioning
Applies if cleaning is enabled.
breakingThe legacy vbmctl entrypoint, removed
Applies if you use the legacy vbmctl entrypoint.

Plan ahead (1)

deprecatedThe BMH.Spec.Firmware field, deprecated
Applies if you configure BMH.Spec.Firmware.

Source ↗

Flatcar Container Linuxstable-4593.2.0Provisioning & RuntimeApr 27, 2026

ACTION 18CHECK 1OTHER 99View full analysis

A security- and maintenance-focused release with updates to Linux and bundled components, along with dependency updates. It also corrects minimal-initrd regressions and changes service startup, SSH defaults, kernel-module availability, and other operator-visible behavior and layout.

Action needed (18)

securitycriticalLinux security updates
Linux was updated with security fixes associated with advisories including CVE-2024-56757, CVE-2025-71239, and CVE-2026-31788.
securityhighcurl security updates
curl was updated with fixes for CVE-2025-10148 and CVE-2025-9086.
securityhighexpat security update
expat was updated with a fix for CVE-2025-59375.
securityhighgnupg security updates
gnupg was updated with fixes for CVE-2025-68972 and CVE-2025-68973.
securityhighGo security updates
go was updated with security fixes associated with CVE-2025-47910, CVE-2025-47912, CVE-2025-58183, and related advisories.
securityhighintel-microcode security updates
intel-microcode was updated with fixes associated with CVE-2024-28956, CVE-2024-43420, CVE-2025-20012, and related advisories.
securityhighlibxslt security updates
libxslt was updated with fixes for CVE-2025-7424 and CVE-2025-7425.
securityhighnvidia-drivers security updates
nvidia-drivers was updated with fixes for CVE-2025-23280, CVE-2025-23282, CVE-2025-23300, and related advisories.
securityhighopenssl security updates
openssl was updated with fixes for CVE-2025-9230, CVE-2025-9231, and CVE-2025-9232.
securityhighPAM security updates
pam was updated with fixes for CVE-2024-10041, CVE-2024-10963, CVE-2024-22365, and CVE-2025-6020.
securitymediumbinutils security updates
binutils was updated with fixes for CVE-2025-5244, CVE-2025-5245, and CVE-2025-8225.
securitymediumcoreutils security update
coreutils was updated with a fix for CVE-2025-5278.
securitymediumlibpcre2 security update
libpcre2 was updated with a fix for CVE-2025-58050.
securitymediumnet-tools security update
net-tools was updated with a fix for CVE-2025-46836.
securitylowopenssh security updates
openssh was updated with fixes for CVE-2025-61984 and CVE-2025-61985.
securitylibxml2 update
libxml2 was updated to libxml2-20250908.
breakingOpenSSH algorithm configuration defaults
Ciphers, MACs, and KexAlgorithms were dropped from the sshd configuration. OpenSSH upstream defaults are used instead.
breakingReduced first-stage initrd kernel modules
The set of kernel modules available in the first initrd is reduced.

Check if affected (1)

breakingAutomatic startup for overlaybd sysext services
Applies if you use the overlaybd sysext.

Source ↗

metal3-iov0.12.4Provisioning & RuntimeApr 22, 2026

ACTION 1OTHER 4View full analysis

This release fixes an HFC controller error loop, removes unused RBAC permissions, and updates project dependencies. The changes cover controller correctness and routine maintenance, with no stated security advisory.

Action needed (1)

breakingUnused permissions in the controller ClusterRole removed
Unused RBAC permissions are removed from the controller ClusterRole.

Source ↗

metal3-iov0.11.7Provisioning & RuntimeApr 22, 2026

ACTION 1OTHER 4View full analysis

This release removes unused controller permissions and includes fixes and dependency updates. It may concern users tracking HFC controller behavior, CAPI, the Kubernetes group, or the Go build toolchain.

Action needed (1)

breakingUnused controller ClusterRole RBAC permissions removed
Unused RBAC permissions are removed from the controller ClusterRole in this release.

Source ↗